/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.343 - (hide annotations) (download)
Thu Oct 7 14:02:11 2010 UTC (3 years, 6 months ago) by blueness
Branch: MAIN
Changes since 1.342: +8 -1 lines
hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches + grsec-2.2.0-2.6.35.7-201010021153
(Portage version: 2.1.8.3/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.343 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.342 2010/10/06 19:03:17 blueness Exp $
4    
5     *hardened-sources-2.6.35-r2 (07 Oct 2010)
6    
7     07 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
8     +hardened-sources-2.6.35-r2.ebuild:
9     hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches +
10     grsec-2.2.0-2.6.35.7-201010021153
11 blueness 1.342
12     *hardened-sources-2.6.32-r20 (06 Oct 2010)
13    
14     06 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
15     +hardened-sources-2.6.32-r20.ebuild:
16     hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches +
17     grsec-2.2.0-2.6.32.24-201010021153
18 blueness 1.341
19     *hardened-sources-2.6.35-r1 (30 Sep 2010)
20     *hardened-sources-2.6.32-r19 (30 Sep 2010)
21    
22     30 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
23     +hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild:
24     hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches +
25     grsec-2.2.0-2.6.32.23-201009272133
26     hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches +
27     grsec-2.2.0-2.6.35.6-201009281623
28 blueness 1.340
29     *hardened-sources-2.6.35 (28 Sep 2010)
30    
31     28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
32     +hardened-sources-2.6.35.ebuild:
33     hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
34 blueness 1.339
35     21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
36     -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
37     hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
38     -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
39     Fast track stabilization. See bug #338273. Removed older versions.
40 blueness 1.338
41     *hardened-sources-2.6.34-r6 (17 Sep 2010)
42     *hardened-sources-2.6.32-r18 (17 Sep 2010)
43    
44     17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
45     +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
46     hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
47     grsec-2.2.0-2.6.32.21-201009162222
48     hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
49     grsec-2.2.0-2.6.34.7-201009162222
50     Addresses IA32 syscall exploit.
51 blueness 1.337
52     *hardened-sources-2.6.34-r5 (15 Sep 2010)
53     *hardened-sources-2.6.32-r17 (15 Sep 2010)
54    
55     15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
56     +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
57     hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
58     grsec-2.2.0-2.6.32.21-201009130811
59     hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
60     grsec-2.2.0-2.6.34.6-201009130754
61 blueness 1.336
62     *hardened-sources-2.6.34-r4 (07 Sep 2010)
63     *hardened-sources-2.6.32-r16 (07 Sep 2010)
64    
65     07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
66     +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
67     hardened-sources-2.6.32-r16 based on 2.6.32.21 +
68     grsec-2.2.0-2.6.32.21-201009032133
69     hardened-sources-2.6.34-r4 based on 2.6.34.6 +
70     grsec-2.2.0-2.6.34.6-201009041352
71 blueness 1.335
72     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
73     hardened-sources-2.6.32-r15 based on 2.6.32.21 +
74     grsec-2.2.0-2.6.32.21-201008292122
75     hardened-sources-2.6.34-r3 based on 2.6.34.6 +
76     grsec-2.2.0-2.6.34.6-201008292122
77 blueness 1.334
78     *hardened-sources-2.6.34-r3 (02 Sep 2010)
79     *hardened-sources-2.6.32-r15 (02 Sep 2010)
80    
81     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
82     -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
83     -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
84     +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
85     +hardened-sources-2.6.34-r3.ebuild:
86     Bumps and remove deprecated versions
87 blueness 1.333
88     *hardened-sources-2.6.34-r2 (21 Aug 2010)
89    
90     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
91     +hardened-sources-2.6.34-r2.ebuild:
92     Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
93 blueness 1.332
94     *hardened-sources-2.6.32-r14 (21 Aug 2010)
95    
96     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
97     +hardened-sources-2.6.32-r14.ebuild:
98     Based on vanilla 2.6.32.19 + genpatches +
99     grsec-2.2.0-2.6.32.19-201008131840
100 blueness 1.331
101     *hardened-sources-2.6.32-r13 (14 Aug 2010)
102    
103     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
104     +hardened-sources-2.6.32-r13.ebuild:
105     Based on vanilla 2.6.32.18 + genpatches +
106     grsecurity-2.2.0-2.6.32.18-201008112233
107 robbat2 1.330
108     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
109     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
110 blueness 1.329
111     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
112     hardened-sources-2.6.32-r9.ebuild:
113     Stable ppc64. Bug #326885
114 blueness 1.328
115     *hardened-sources-2.6.32-r12 (24 Jul 2010)
116    
117     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
118     +hardened-sources-2.6.32-r12.ebuild:
119     Parallels fix incorporated into hardened-sources-2.6.34-r1
120 blueness 1.327
121     *hardened-sources-2.6.34-r1 (24 Jul 2010)
122    
123     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
124     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
125     Fixes bug #328275
126 chainsaw 1.326
127     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
128     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
129     on gentoo-dev.
130 jer 1.325
131     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
132     Correct mail address.
133 blueness 1.324
134     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
135     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
136     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
137     -hardened-sources-2.6.32-r8.ebuild:
138     Removing outdated releases
139 fauli 1.323
140     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
141     hardened-sources-2.6.32-r9.ebuild:
142     stable x86, bug 326885
143 blueness 1.322
144     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
145     -hardened-sources-2.6.32-r7.ebuild:
146     Removed for security. Bug #325573
147 blueness 1.321
148     *hardened-sources-2.6.34 (13 Jul 2010)
149    
150     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
151     +hardened-sources-2.6.34.ebuild:
152     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
153 blueness 1.320
154     *hardened-sources-2.6.32-r11 (13 Jul 2010)
155    
156     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
157     +hardened-sources-2.6.32-r11.ebuild:
158     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
159 chainsaw 1.319
160     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
161     Marked stable on AMD64 as requested by Anthony G. Basile
162     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
163     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
164 blueness 1.318
165     *hardened-sources-2.6.32-r10 (30 Jun 2010)
166    
167     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
168     +hardened-sources-2.6.32-r10.ebuild:
169     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
170 blueness 1.317
171     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
172     Added myself to the metadata.xml
173 chainsaw 1.316
174     *hardened-sources-2.6.32-r9 (11 Jun 2010)
175    
176     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
177     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
178 chainsaw 1.315
179     *hardened-sources-2.6.32-r8 (01 Jun 2010)
180    
181     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
182     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
183 chainsaw 1.314
184     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
185     Update SRC_URI to point to mirror network now that the distfile has
186     propagated.
187 chainsaw 1.313
188     *hardened-sources-2.6.32-r7 (26 May 2010)
189    
190     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
191     metadata.xml:
192     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
193     Summers.
194 robbat2 1.312
195     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
196     Update Manifest for deblob support in kernel-2 eclass.
197 nixnut 1.311
198     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
199     ppc stable
200 gengor 1.310
201     29 May 2009; Gordon Malm <gengor@gentoo.org>
202     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
203     Stable amd64/x86 and remove old.
204 gengor 1.309
205     *hardened-sources-2.6.29 (25 May 2009)
206    
207     25 May 2009; Gordon Malm <gengor@gentoo.org>
208     +hardened-sources-2.6.29.ebuild:
209     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
210     release candidates.
211 gengor 1.308
212     *hardened-sources-2.6.28-r9 (25 May 2009)
213    
214     25 May 2009; Gordon Malm <gengor@gentoo.org>
215     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
216     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
217 gengor 1.307
218     *hardened-sources-2.6.28-r8 (18 May 2009)
219    
220     18 May 2009; Gordon Malm <gengor@gentoo.org>
221     +hardened-sources-2.6.28-r8.ebuild:
222     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
223     and #262862 among others.
224 gengor 1.306
225     01 May 2009; Gordon Malm <gengor@gentoo.org>
226     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
227     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
228     Remove unnecessary mirror://gentoo from SRC_URI.
229 nixnut 1.305
230     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
231     ppc stable
232 gengor 1.304
233     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
234     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
235     Stable amd64/x86 and remove old.
236 gengor 1.303
237     *hardened-sources-2.6.28-r7 (27 Mar 2009)
238    
239     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
240     +hardened-sources-2.6.28-r7.ebuild:
241     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
242 gengor 1.302
243     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
244     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
245     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
246     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
247     Stable amd64/x86 and remove old versions.
248 nixnut 1.301
249     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
250     ppc stable
251 gengor 1.300
252     *hardened-sources-2.6.28-r6 (21 Mar 2009)
253    
254     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
255     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
256     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
257 gengor 1.299
258     *hardened-sources-2.6.28-r5 (20 Mar 2009)
259    
260     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
261     +hardened-sources-2.6.28-r5.ebuild:
262     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
263 gengor 1.298
264     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
265     hardened-sources-2.6.28-r4.ebuild:
266     Stable amd64/x86.
267 gengor 1.297
268     *hardened-sources-2.6.28-r4 (18 Mar 2009)
269    
270     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
271     +hardened-sources-2.6.28-r4.ebuild:
272     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
273     compilation with CPA_DEBUG and more.
274 gengor 1.296
275     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
276     hardened-sources-2.6.28-r3.ebuild:
277     Quick stable amd64/x86.
278 gengor 1.295
279     *hardened-sources-2.6.28-r3 (15 Mar 2009)
280    
281     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
282     +hardened-sources-2.6.28-r3.ebuild:
283     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
284 nixnut 1.294
285     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
286     ppc stable
287 gengor 1.293
288     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
289     hardened-sources-2.6.28-r2.ebuild:
290     Stable amd64/x86.
291 gengor 1.292
292     *hardened-sources-2.6.28-r2 (11 Mar 2009)
293    
294     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
295     +hardened-sources-2.6.28-r2.ebuild:
296     Version bump bringing in latest grsecurity patch.
297 gengor 1.291
298     *hardened-sources-2.6.28-r1 (09 Mar 2009)
299    
300     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
301     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
302     Version bump and remove old.
303 nixnut 1.290
304     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
305     ppc stable
306 gengor 1.289
307     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
308     hardened-sources-2.6.27-r8.ebuild:
309     Remove amd64 testing keyword, bug 256226.
310 gengor 1.288
311     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
312     hardened-sources-2.6.27-r8.ebuild:
313     Revert amd64 stable, bug #256226.
314 gengor 1.287
315     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
316     hardened-sources-2.6.27-r8.ebuild:
317     Stable on amd64/x86.
318 gengor 1.286
319     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
320     -hardened-sources-2.6.27-r6.ebuild:
321     Remove old 2.6.27 release.
322 gengor 1.285
323     *hardened-sources-2.6.27-r8 (24 Feb 2009)
324    
325     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
326     +hardened-sources-2.6.27-r8.ebuild:
327     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
328     and probably more.
329 nixnut 1.284
330     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
331     ppc stable
332 gengor 1.283
333     *hardened-sources-2.6.28 (25 Jan 2009)
334    
335     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
336     +hardened-sources-2.6.28.ebuild:
337     Initial 2.6.28 release.
338 gengor 1.282
339     *hardened-sources-2.6.27-r7 (25 Jan 2009)
340    
341     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
342     +hardened-sources-2.6.27-r7.ebuild:
343     Bump to Linux 2.6.27.13.
344 gengor 1.281
345     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
346     hardened-sources-2.6.26-r9.ebuild:
347     Stable amd64/x86.
348 gengor 1.280
349     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
350     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
351     -hardened-sources-2.6.27-r5.ebuild:
352     Remove problem versions.
353 gengor 1.279
354     *hardened-sources-2.6.27-r6 (24 Jan 2009)
355    
356     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
357     +hardened-sources-2.6.27-r6.ebuild:
358     Revert PaX test29 to test30 changes. Fixes bug 256226.
359 gengor 1.277
360     *hardened-sources-2.6.27-r5 (24 Jan 2009)
361    
362     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
363     +hardened-sources-2.6.27-r5.ebuild:
364 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
365 gengor 1.277 254843.
366 gengor 1.276
367     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
368     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
369     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
370     Remove problem versions.
371 nixnut 1.275
372     23 Jan 2009; nixnut <nixnut@gentoo.org>
373     hardened-sources-2.6.25-r13.ebuild:
374     ppc stable
375 gengor 1.274
376     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
377     hardened-sources-2.6.25-r13.ebuild:
378     Fasttrack stable amd64/x86.
379 gengor 1.273
380     *hardened-sources-2.6.26-r9 (21 Jan 2009)
381    
382     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
383     +hardened-sources-2.6.26-r9.ebuild:
384 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
385 gengor 1.272
386     *hardened-sources-2.6.25-r13 (20 Jan 2009)
387    
388     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
389     +hardened-sources-2.6.25-r13.ebuild:
390 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
391 nixnut 1.271
392     20 Jan 2009; nixnut <nixnut@gentoo.org>
393     hardened-sources-2.6.25-r12.ebuild:
394     ppc stable
395 gengor 1.270
396     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
397     hardened-sources-2.6.25-r12.ebuild:
398     Stable amd64/x86.
399 gengor 1.269
400     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
401     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
402     -hardened-sources-2.6.27-r2.ebuild:
403     Clean out old versions.
404 gengor 1.268
405     *hardened-sources-2.6.27-r4 (14 Jan 2009)
406     *hardened-sources-2.6.26-r8 (14 Jan 2009)
407     *hardened-sources-2.6.25-r12 (14 Jan 2009)
408    
409     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
410     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
411     +hardened-sources-2.6.27-r4.ebuild:
412     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
413     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
414     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
415     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
416 nixnut 1.267
417     15 Dec 2008; nixnut <nixnut@gentoo.org>
418     hardened-sources-2.6.25-r11.ebuild:
419     Stable on ppc
420 gengor 1.266
421     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
422     hardened-sources-2.6.25-r11.ebuild:
423     Stable amd64/x86.
424 gengor 1.265
425     *hardened-sources-2.6.27-r3 (07 Dec 2008)
426    
427     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
428     +hardened-sources-2.6.27-r3.ebuild:
429     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
430     Fixes bug #248754, #249729 and #246607.
431 gengor 1.264
432     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
433     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
434     Remove old versions.
435 gengor 1.262
436     *hardened-sources-2.6.26-r7 (03 Dec 2008)
437     *hardened-sources-2.6.25-r11 (03 Dec 2008)
438    
439 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
440     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
441 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
442     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
443     Both include many backports from 2.6.27.{6,7} -stable releases.
444 gengor 1.261
445     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
446     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
447     Remove versions broken on ARCHes != x86/amd64.
448 gengor 1.260
449     *hardened-sources-2.6.27-r2 (24 Nov 2008)
450    
451     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
452     +hardened-sources-2.6.27-r2.ebuild:
453     Bump to Linux 2.6.27.7 and latest grsecurity patch.
454 gengor 1.259
455     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
456     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
457     Remove old versions.
458 gengor 1.258
459     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
460     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
461     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
462 nixnut 1.257
463     16 Nov 2008; nixnut <nixnut@gentoo.org>
464     hardened-sources-2.6.25-r10.ebuild:
465     Stable on ppc
466 gengor 1.256
467     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
468     hardened-sources-2.6.25-r10.ebuild:
469     Stable amd64/x86.
470 gengor 1.255
471     *hardened-sources-2.6.26-r6 (12 Nov 2008)
472    
473     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
474     +hardened-sources-2.6.26-r6.ebuild:
475     Bump to Linux 2.6.26.8 and fix security bug #245650.
476 gengor 1.254
477     *hardened-sources-2.6.25-r10 (12 Nov 2008)
478    
479     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
480     +hardened-sources-2.6.25-r10.ebuild:
481     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
482 gengor 1.253
483     *hardened-sources-2.6.27-r1 (09 Nov 2008)
484    
485     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
486     +hardened-sources-2.6.27-r1.ebuild:
487     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
488 gengor 1.252
489     *hardened-sources-2.6.27 (04 Nov 2008)
490    
491     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
492     +hardened-sources-2.6.27.ebuild:
493     Initial 2.6.27 release.
494 gengor 1.251
495     *hardened-sources-2.6.26-r5 (03 Nov 2008)
496    
497     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
498     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
499     +hardened-sources-2.6.26-r5.ebuild:
500     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
501     Clean out some old versions.
502 nixnut 1.250
503     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
504     Stable on ppc
505 gengor 1.249
506     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
507     hardened-sources-2.6.25-r9.ebuild:
508     Stable on amd64/x86.
509 gengor 1.248
510     *hardened-sources-2.6.25-r9 (26 Oct 2008)
511    
512     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
513     +hardened-sources-2.6.25-r9.ebuild:
514     Update to Linux 2.6.25.19
515 nixnut 1.247
516     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
517     Stable on ppc
518 gengor 1.246
519     *hardened-sources-2.6.26-r4 (14 Oct 2008)
520    
521     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
522     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
523     Update to latest grsecurity patch, fixing building of non-modular kernels.
524 gengor 1.245
525     *hardened-sources-2.6.26-r3 (12 Oct 2008)
526    
527     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
528     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
529     +hardened-sources-2.6.26-r3.ebuild:
530     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
531     2.6.26-r1: Removed.
532     2.6.25-r8: Stable amd64/x86.
533 gengor 1.244
534     *hardened-sources-2.6.25-r8 (09 Oct 2008)
535    
536     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
537     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
538     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
539     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
540 nixnut 1.243
541     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
542     Stable on ppc
543 gengor 1.242
544     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
545     hardened-sources-2.6.25-r7.ebuild:
546     Stable amd64/x86.
547 gengor 1.241
548     *hardened-sources-2.6.26-r2 (13 Sep 2008)
549    
550     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
551     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
552     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
553     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
554 gengor 1.240
555     *hardened-sources-2.6.25-r7 (13 Sep 2008)
556    
557     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
558     +hardened-sources-2.6.25-r7.ebuild:
559     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
560 gengor 1.239
561     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
562     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
563     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
564     hardened-sources-2.6.26-r1.ebuild:
565     Update DESCRIPTION and HGPV_URI.
566 gengor 1.238
567     *hardened-sources-2.6.25-r6 (09 Sep 2008)
568    
569     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
570     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
571     2.6.25-r6: Update to Linux 2.6.25.17.
572     2.6.24-r3: Removed.
573 gengor 1.237
574     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
575     hardened-sources-2.6.25-r5.ebuild:
576     Stable on amd64/x86
577 gengor 1.236
578     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
579     Update my email address.
580 nixnut 1.235
581     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
582     stable on ppc
583 battousai 1.234
584     *hardened-sources-2.6.26-r1 (23 Aug 2008)
585     *hardened-sources-2.6.25-r5 (23 Aug 2008)
586    
587     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
588     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
589     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
590     +hardened-sources-2.6.26-r1.ebuild:
591     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
592     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
593     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
594     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
595     (gengor).
596 solar 1.233
597     *hardened-sources-2.6.26 (18 Aug 2008)
598     *hardened-sources-2.6.25-r4 (18 Aug 2008)
599    
600     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
601     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
602     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
603     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
604     2.6.25-r2: Removed.
605 tove 1.232
606     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
607     Remove phreak from metadata.xml (#96398)
608 solar 1.231
609     *hardened-sources-2.6.25-r3 (31 Jul 2008)
610    
611     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
612     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
613     +hardened-sources-2.6.25-r3.ebuild:
614     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
615     fixes, including security bug #231750.
616 nixnut 1.230
617     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
618     Stable on ppc
619 solar 1.229
620     *hardened-sources-2.6.25-r2 (05 Jul 2008)
621    
622     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
623     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
624     +hardened-sources-2.6.25-r2.ebuild:
625     2.6.23-r4: Stable x86/amd64
626     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
627     2.6.23-r{11,12}: Removed due to multiple vulns.
628     (gengor & kerframil)
629 nixnut 1.228
630     04 Jul 2008; nixnut <nixnut@gentoo.org>
631     hardened-sources-2.6.23-r13.ebuild:
632     Stable on ppc
633 solar 1.227
634     *hardened-sources-2.6.25-r1 (30 Jun 2008)
635    
636     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
637     +hardened-sources-2.6.25-r1.ebuild:
638     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
639     grsecurity release. 2.6.23-r13: x86/amd64 stable
640 solar 1.226
641     *hardened-sources-2.6.25 (17 Jun 2008)
642     *hardened-sources-2.6.24-r3 (17 Jun 2008)
643     *hardened-sources-2.6.23-r13 (17 Jun 2008)
644    
645     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
646     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
647     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
648     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
649     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
650     2.6.25: Initial 2.6.25 release.
651 solar 1.225
652     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
653     - fasttrack to stable x86/amd64
654 swegener 1.224
655     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
656     Fix broken digest for linux-2.6.24.tar.bz2.
657 solar 1.223
658     *hardened-sources-2.6.24-r2 (11 May 2008)
659     *hardened-sources-2.6.23-r12 (11 May 2008)
660    
661     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
662     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
663     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
664     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
665     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
666     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
667     security bugs 219901, 220691, 220975, 220979, 221123. New
668     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
669     should be removed as far as I'm concerned, everything else remove due to
670     vulnerable to numerous security bugs or brokeness.
671 nixnut 1.222
672     10 May 2008; nixnut <nixnut@gentoo.org>
673     hardened-sources-2.6.23-r11.ebuild:
674     Stable on ppc
675 solar 1.221
676     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
677     - -r11 stable on x86/amd64
678 solar 1.220
679     *hardened-sources-2.6.23-r11 (01 May 2008)
680    
681     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
682     - version bump to fix ulgy linux bugs
683 phreak 1.219
684     *hardened-sources-2.6.24-r1 (30 Apr 2008)
685    
686     30 Apr 2008; Christian Heim <phreak@gentoo.org>
687     +hardened-sources-2.6.24-r1.ebuild:
688     Revision bump (thanks to Kerin and Gordon, again), pulling
689     genpatches-2.6.24-7, solving #219089. Additionally contains further security
690     fixes plus some minor updates.
691 phreak 1.218
692     *hardened-sources-2.6.23-r10 (30 Apr 2008)
693    
694     30 Apr 2008; Christian Heim <phreak@gentoo.org>
695     +hardened-sources-2.6.23-r10.ebuild:
696     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
697     Additional contains "various other fixes".
698 phreak 1.217
699     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
700     Update the longdescription in metadata, thanks to Gordon Malm.
701 nixnut 1.216
702     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
703     Stable on ppc wrt bug #213255
704 solar 1.215
705     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
706     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
707     - stable on x86/amd64 per request. Removed obsolete ebuilds
708 phreak 1.214
709     *hardened-sources-2.6.24 (07 Apr 2008)
710    
711     07 Apr 2008; Christian Heim <phreak@gentoo.org>
712     +hardened-sources-2.6.24.ebuild:
713     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
714     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
715     for the many contributions and their continued effort in #216612) based on
716     2.6.24 and genpatches-2.6.24-5.
717    
718     The current ebuild/patchset contains these things:
719     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
720     * Introduces bespoke server and workstation oriented security levels
721     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
722 phreak 1.213
723     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
724     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
725     maintaining it).
726 phreak 1.212
727     24 Mar 2008; Christian Heim <phreak@gentoo.org>
728     hardened-sources-2.4.35-r2.ebuild:
729     Fixing SRC_URI for 2.4.35-r2.
730 phreak 1.211
731     *hardened-sources-2.6.23-r9 (22 Mar 2008)
732    
733     22 Mar 2008; Christian Heim <phreak@gentoo.org>
734     +hardened-sources-2.6.23-r9.ebuild:
735     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
736     * Change the default GIDs for some grsecurity options
737     * Revamp the Hardened [Gentoo] security level and make it the default level
738     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
739     * Fix a recursive lock -- call to capable() within ptrace_attach()
740     * Fix bug that allows audit and iscsi operations to be controlled via netlink
741 solar 1.210
742     *hardened-sources-2.6.23-r8 (27 Feb 2008)
743    
744     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
745     - version bump from Kerin Millar bug 210026
746 solar 1.209
747     17 Feb 2008; <solar@gentoo.org> metadata.xml,
748     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
749     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
750     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
751     - stable on x86 and remove old ebuilds
752 solar 1.207
753     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
754 solar 1.208 - stable on amd64 per request of amd64 lead
755 solar 1.206
756     *hardened-sources-2.6.23-r7 (11 Feb 2008)
757    
758     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
759     - version bump from kerin.millar
760     Changes:
761    
762     * Bump to genpatches-base-2.6.23-9
763     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
764     * Disables COMPAT_VDSO in x86/defconfig
765     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
766 phreak 1.205
767     25 Jan 2008; Christian Heim <phreak@gentoo.org>
768     -hardened-sources-2.6.22-r8.ebuild:
769     Cleaning up old versions.
770 phreak 1.204
771     *hardened-sources-2.6.23-r6 (25 Jan 2008)
772    
773     25 Jan 2008; Christian Heim <phreak@gentoo.org>
774     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
775     Revision bump, pulling in the latest genpatches.
776 phreak 1.203
777     *hardened-sources-2.6.23-r5 (24 Dec 2007)
778    
779     24 Dec 2007; Christian Heim <phreak@gentoo.org>
780     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
781     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
782     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
783     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
784 phreak 1.202
785     24 Dec 2007; Christian Heim <phreak@gentoo.org>
786     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
787     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
788     -hardened-sources-2.6.23-r3.ebuild:
789     Cleaning out some unused, old versions.
790 phreak 1.201
791     24 Dec 2007; Christian Heim <phreak@gentoo.org>
792     hardened-sources-2.6.23-r4.ebuild:
793     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
794     in the tree for long, but there isn't much of a difference between this and
795     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
796 phreak 1.200
797     *hardened-sources-2.6.23-r4 (23 Dec 2007)
798    
799     23 Dec 2007; Christian Heim <phreak@gentoo.org>
800     +hardened-sources-2.6.23-r4.ebuild:
801     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
802 phreak 1.199
803     *hardened-sources-2.6.23-r3 (04 Dec 2007)
804    
805     04 Dec 2007; Christian Heim <phreak@gentoo.org>
806     +hardened-sources-2.6.23-r3.ebuild:
807     Revision bump, pulling in 2.6.23.9.
808 phreak 1.198
809     *hardened-sources-2.6.23-r2 (25 Nov 2007)
810    
811     25 Nov 2007; Christian Heim <phreak@gentoo.org>
812     +hardened-sources-2.6.23-r2.ebuild:
813     Updated patchset, thanks to solar.
814 phreak 1.197
815     *hardened-sources-2.6.23-r1 (31 Oct 2007)
816    
817     31 Oct 2007; Christian Heim <phreak@gentoo.org>
818     +hardened-sources-2.6.23-r1.ebuild:
819     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
820 solar 1.196
821     29 Oct 2007; <solar@gentoo.org> metadata.xml:
822     - update metadata.xml
823 phreak 1.195
824     25 Oct 2007; Christian Heim <phreak@gentoo.org>
825     hardened-sources-2.6.22-r8.ebuild:
826     Marking 2.6.22-r8 stable on amd64 and x86.
827 phreak 1.194
828     21 Oct 2007; Christian Heim <phreak@gentoo.org>
829     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
830     -hardened-sources-2.6.21-r4.ebuild:
831     Removing old ebuilds.
832 phreak 1.193
833     *hardened-sources-2.4.35-r2 (21 Oct 2007)
834    
835     21 Oct 2007; Christian Heim <phreak@gentoo.org>
836     +hardened-sources-2.4.35-r2.ebuild:
837     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
838     patches.
839 phreak 1.192
840     *hardened-sources-2.6.22-r8 (21 Oct 2007)
841    
842     21 Oct 2007; Christian Heim <phreak@gentoo.org>
843     +hardened-sources-2.6.22-r8.ebuild:
844     Yet another new patch, hopefully fixing the remaining issues we had w/
845     2.6.22. Candidate for stabling.
846 phreak 1.191
847     *hardened-sources-2.6.23 (13 Oct 2007)
848    
849     13 Oct 2007; Christian Heim <phreak@gentoo.org>
850     +hardened-sources-2.6.23.ebuild:
851     Initial hardened-sources-2.6.23. If people still have problems w/ bug
852     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
853 phreak 1.190
854     11 Oct 2007; Christian Heim <phreak@gentoo.org>
855     hardened-sources-2.6.20-r10.ebuild:
856     Pulling in yet another new genpatches version, fixing the PWC bug for real.
857 phreak 1.189
858     04 Oct 2007; Christian Heim <phreak@gentoo.org>
859     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
860     Removing old versions.
861 phreak 1.188
862     *hardened-sources-2.6.22-r7 (01 Oct 2007)
863    
864     01 Oct 2007; Christian Heim <phreak@gentoo.org>
865     +hardened-sources-2.6.22-r7.ebuild:
866     Revision bump, pulling in a newer patch. Should fix #194276.
867 phreak 1.187
868     30 Sep 2007; Christian Heim <phreak@gentoo.org>
869     hardened-sources-2.6.20-r10.ebuild:
870     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
871     Mike Doty).
872 phreak 1.186
873     *hardened-sources-2.6.22-r6 (26 Sep 2007)
874    
875     26 Sep 2007; Christian Heim <phreak@gentoo.org>
876     +hardened-sources-2.6.22-r6.ebuild:
877     Revision bump, grabbing up till Linux 2.6.22.9.
878 phreak 1.185
879     24 Sep 2007; Christian Heim <phreak@gentoo.org>
880     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
881     Cleaning up further.
882 phreak 1.184
883     *hardened-sources-2.6.20-r10 (24 Sep 2007)
884    
885     24 Sep 2007; Christian Heim <phreak@gentoo.org>
886     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
887     +hardened-sources-2.6.20-r10.ebuild:
888     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
889     revisions.
890 phreak 1.183
891     *hardened-sources-2.6.22-r5 (22 Sep 2007)
892    
893     22 Sep 2007; Christian Heim <phreak@gentoo.org>
894     +hardened-sources-2.6.22-r5.ebuild:
895     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
896 phreak 1.182
897     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
898     Removing johnm from metadata.xml (see #186467 for reference).
899 phreak 1.181
900     *hardened-sources-2.6.22-r4 (17 Sep 2007)
901    
902     17 Sep 2007; Christian Heim <phreak@gentoo.org>
903     +hardened-sources-2.6.22-r4.ebuild:
904     Revision bump, hopefully fixing all those weird PAX failures.
905 phreak 1.180
906     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
907     Updating the metadata.xml.
908 phreak 1.179
909     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
910     Removing tocharian from metadata due to his retirement (see #71718 for
911     reference).
912 phreak 1.178
913     *hardened-sources-2.6.20-r9 (30 Aug 2007)
914    
915     30 Aug 2007; Christian Heim <phreak@gentoo.org>
916     +hardened-sources-2.6.20-r9.ebuild:
917     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
918 phreak 1.177
919     29 Aug 2007; Christian Heim <phreak@gentoo.org>
920     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
921     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
922     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
923     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
924     -hardened-sources-2.6.22-r2.ebuild:
925     Removing some redundant versions.
926 phreak 1.176
927     *hardened-sources-2.4.35-r1 (29 Aug 2007)
928    
929     29 Aug 2007; Christian Heim <phreak@gentoo.org>
930     +hardened-sources-2.4.35-r1.ebuild:
931     Revision bump, new grsecurity patch.
932 phreak 1.175
933     *hardened-sources-2.6.20-r8 (26 Aug 2007)
934    
935     26 Aug 2007; Christian Heim <phreak@gentoo.org>
936     +hardened-sources-2.6.20-r8.ebuild:
937     Revision bump for Linux 2.6.20.17.
938 phreak 1.174
939     *hardened-sources-2.6.22-r3 (22 Aug 2007)
940    
941     22 Aug 2007; Christian Heim <phreak@gentoo.org>
942     +hardened-sources-2.6.22-r3.ebuild:
943     Revision bump for Linux 2.6.22.4.
944 phreak 1.173
945     16 Aug 2007; Christian Heim <phreak@gentoo.org>
946     hardened-sources-2.6.22-r2.ebuild:
947     Updated patchset, to fix the alignment against 2.6.22.3.
948 phreak 1.172
949     *hardened-sources-2.6.22-r2 (16 Aug 2007)
950    
951     16 Aug 2007; Christian Heim <phreak@gentoo.org>
952     +hardened-sources-2.6.22-r2.ebuild:
953     Revision bump for Linux 2.6.22.3.
954 phreak 1.171
955     *hardened-sources-2.4.35 (16 Aug 2007)
956    
957     16 Aug 2007; Christian Heim <phreak@gentoo.org>
958     +hardened-sources-2.4.35.ebuild:
959     Version bump, initial version for Linux 2.4.35.
960 phreak 1.170
961     *hardened-sources-2.6.21-r4 (16 Aug 2007)
962    
963     16 Aug 2007; Christian Heim <phreak@gentoo.org>
964     +hardened-sources-2.6.21-r4.ebuild:
965     Revision bump for Linux 2.6.21.6.
966 phreak 1.169
967     *hardened-sources-2.6.20-r7 (16 Aug 2007)
968    
969     16 Aug 2007; Christian Heim <phreak@gentoo.org>
970     +hardened-sources-2.6.20-r7.ebuild:
971     Revision bump for Linux 2.6.20.16.
972 phreak 1.168
973     *hardened-sources-2.6.22-r1 (13 Aug 2007)
974    
975     13 Aug 2007; Christian Heim <phreak@gentoo.org>
976     +hardened-sources-2.6.22-r1.ebuild:
977     Yet another revision bump.
978 phreak 1.167
979     *hardened-sources-2.6.22 (10 Aug 2007)
980    
981     10 Aug 2007; Christian Heim <phreak@gentoo.org>
982     +hardened-sources-2.6.22.ebuild:
983     Initial release for 2.6.22. If you are using hardened-sources on a desktop
984     machine (P4 or newer), be aware you might need to disable
985     CONFIG_PAX_PAGEEXEC.
986 phreak 1.166
987     04 Aug 2007; Christian Heim <phreak@gentoo.org>
988     hardened-sources-2.6.20-r6.ebuild:
989     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
990     2.6.20.15.
991 phreak 1.165
992     10 Jul 2007; Christian Heim <phreak@gentoo.org>
993     hardened-sources-2.6.20-r5.ebuild:
994     Marking hardened-sources-2.6.20-r5 stable on ppc.
995 phreak 1.164
996     10 Jul 2007; Christian Heim <phreak@gentoo.org>
997     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
998     Cleanup.
999 phreak 1.163
1000     *hardened-sources-2.6.20-r6 (08 Jul 2007)
1001    
1002     08 Jul 2007; Christian Heim <phreak@gentoo.org>
1003     +hardened-sources-2.6.20-r6.ebuild:
1004     Revision bump, grabbing yet another stable release.
1005 phreak 1.162
1006     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1007     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
1008     -hardened-sources-2.6.21-r2.ebuild:
1009     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
1010     alpha stable KEYWORD by mistake.
1011 phreak 1.161
1012     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1013     hardened-sources-2.6.20-r5.ebuild:
1014     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
1015     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
1016 phreak 1.160
1017     *hardened-sources-2.6.21-r3 (12 Jun 2007)
1018    
1019     12 Jun 2007; Christian Heim <phreak@gentoo.org>
1020     +hardened-sources-2.6.21-r3.ebuild:
1021     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
1022     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
1023     love.
1024 phreak 1.159
1025     *hardened-sources-2.6.20-r5 (11 Jun 2007)
1026    
1027     11 Jun 2007; Christian Heim <phreak@gentoo.org>
1028     +hardened-sources-2.6.20-r5.ebuild:
1029     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1030     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1031     love.
1032 pappy 1.158
1033     *hardened-sources-2.4.34.5 (11 Jun 2007)
1034    
1035     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1036     +hardened-sources-2.4.34.5.ebuild:
1037     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1038 phreak 1.157
1039     30 May 2007; Christian Heim <phreak@gentoo.org>
1040     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1041     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1042     stale ebuild(s).
1043 phreak 1.156
1044     30 May 2007; Christian Heim <phreak@gentoo.org>
1045     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1046     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1047     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1048     Doing some cleanups, remove stale ebuilds.
1049 phreak 1.155
1050     26 May 2007; Christian Heim <phreak@gentoo.org>
1051     hardened-sources-2.6.21-r2.ebuild:
1052     Fixing the grsecurity patch, had one '};' too much.
1053 phreak 1.154
1054     *hardened-sources-2.6.21-r2 (26 May 2007)
1055    
1056     26 May 2007; Christian Heim <phreak@gentoo.org>
1057     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1058     +hardened-sources-2.6.21-r2.ebuild:
1059     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1060     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1061 phreak 1.153
1062     *hardened-sources-2.6.20-r4 (26 May 2007)
1063    
1064     26 May 2007; Christian Heim <phreak@gentoo.org>
1065     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1066     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1067 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1068 phreak 1.152
1069     15 May 2007; Christian Heim <phreak@gentoo.org>
1070     hardened-sources-2.6.20-r3.ebuild:
1071     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1072     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1073     grsecurity patch fail in that exact same hunk.
1074 phreak 1.151
1075     *hardened-sources-2.6.20-r3 (15 May 2007)
1076    
1077     15 May 2007; Christian Heim <phreak@gentoo.org>
1078     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1079     Revision bump, incorporating Linux 2.6.20.11.
1080    
1081     *hardened-sources-2.6.21-r1 (11 May 2007)
1082    
1083     11 May 2007; Christian Heim <phreak@gentoo.org>
1084     +hardened-sources-2.6.21-r1.ebuild:
1085     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1086     mentioned in #177234.
1087 kevquinn 1.150
1088     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1089     files/digest-hardened-sources-2.6.21, Manifest:
1090     Fix Manifest/digest for linux-2.6.21.tar.bz2
1091 phreak 1.149
1092     06 May 2007; Christian Heim <phreak@gentoo.org>
1093     hardened-sources-2.6.21.ebuild:
1094     Bumping the hardened-patches version, needed for the fix for #177234.
1095 phreak 1.148
1096     *hardened-sources-2.6.21 (02 May 2007)
1097    
1098     02 May 2007; Christian Heim <phreak@gentoo.org>
1099     +hardened-sources-2.6.21.ebuild:
1100     Version bump, Linux 2.6.21-hardened.
1101 phreak 1.147
1102     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1103     hardened-sources-2.6.20-r2.ebuild:
1104     Adding ~ia64 on Ned's request.
1105 phreak 1.146
1106     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1107     hardened-sources-2.6.20-r2.ebuild:
1108     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1109     header line(s).
1110 phreak 1.145
1111     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1112     hardened-sources-2.6.20-r2.ebuild:
1113     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1114 armin76 1.144
1115     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1116    
1117     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1118     +hardened-sources-2.6.20-r2.ebuild:
1119     Version bump, on behalf of phreak
1120 phreak 1.143
1121     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1122    
1123     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1124     +hardened-sources-2.6.20-r1.ebuild:
1125     Revision bump, grabbing a newer grsecurity snapshot.
1126 phreak 1.142
1127     *hardened-sources-2.6.20 (25 Mar 2007)
1128    
1129     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1130     +hardened-sources-2.6.20.ebuild:
1131     Finally a hardened-sources version for 2.6.20; many people have been waiting
1132     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1133     testbox.
1134 chainsaw 1.141
1135     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1136     hardened-sources-2.6.18-r6.ebuild:
1137     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1138 phreak 1.140
1139     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1140    
1141     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1142     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1143     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1144     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1145     supposed to be.
1146 phreak 1.139
1147     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1148     Fixing the Manifest, the previous one was broken (as in still had the
1149     deleted ebuild in it).
1150 phreak 1.138
1151     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1152     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1153     +hardened-sources-2.6.18-r5.ebuild:
1154     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1155     Linux 2.6.18.8. Also cleaning up the older version.
1156    
1157     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1158    
1159     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1160     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1161     +hardened-sources-2.6.18-r5.ebuild:
1162     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1163     Linux 2.6.18.8. Also cleaning up the older version.
1164 phreak 1.137
1165     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1166     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1167     -hardened-sources-2.6.19-r5.ebuild:
1168     Removing some of the old version, that didn't work.
1169 phreak 1.136
1170     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1171    
1172     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1173     +hardened-sources-2.6.19-r6.ebuild:
1174     Revision bump, including a new grsec version fixing #166235.
1175 pappy 1.134
1176     *hardened-sources-2.4.34 (24 Jan 2007)
1177    
1178     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1179 pappy 1.135 Manifest:
1180     updating Manifest with checksums of new tarball and ebuild
1181    
1182     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1183 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1184     I added new hardened sources 2.4 update, this is a critical path
1185     security bugfix - all users of h-s are strongly advised
1186     to update their existing hardened sources to this version.
1187     It contains a fix for a kernel vulnerability that is pertaining
1188     to the PaX changes to virtual memory management, possibly leading
1189     to a local kernel exploit ... see grsecurity.net forums and homepage
1190 phreak 1.133
1191     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1192     files/digest-hardened-sources-2.6.19-r5, Manifest:
1193     Fixing the patch-tarball digest.
1194 phreak 1.132
1195     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1196    
1197     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1198     +hardened-sources-2.6.19-r5.ebuild:
1199     Revision bump, closing the recently discovered PaX expand_stack()
1200     vulnerability.
1201 phreak 1.131
1202     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1203    
1204     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1205     +hardened-sources-2.6.19-r4.ebuild:
1206     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1207     dropping the randomized PID feature.
1208 opfer 1.130
1209     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1210     hardened-sources-2.4.33.4.ebuild:
1211     stable x86, bug #161171
1212 phreak 1.129
1213     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1214    
1215     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1216     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1217     Revision bump for bug #157186 and #158786.
1218 phreak 1.128
1219     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1220    
1221     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1222     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1223     Revision bump for bug #157186.
1224 phreak 1.127
1225     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1226    
1227     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1228     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1229     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1230 phreak 1.126
1231     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1232     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1233     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1234     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1235     hardened-sources-2.6.19-r1.ebuild:
1236     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1237     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1238 pappy 1.125
1239     *hardened-sources-2.4.33.4 (17 Dec 2006)
1240    
1241     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1242     +hardened-sources-2.4.33.4.ebuild:
1243     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1244     and quilting
1245 phreak 1.124
1246     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1247    
1248     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1249     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1250     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1251     for reporting).
1252 phreak 1.123
1253     *hardened-sources-2.6.19 (13 Dec 2006)
1254    
1255     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1256     +hardened-sources-2.6.19.ebuild:
1257     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1258     Brad for providing that prompt update.
1259 phreak 1.122
1260     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1261    
1262     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1263     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1264     +hardened-sources-2.6.18-r3.ebuild:
1265     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1266     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1267 phreak 1.121
1268     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1269     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1270 nixnut 1.120
1271     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1272     Stable on ppc wrt bug 157356
1273 opfer 1.119
1274     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1275     hardened-sources-2.6.18.ebuild:
1276     stable x86, bug #157356
1277 phreak 1.118
1278     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1279    
1280     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1281     +hardened-sources-2.6.18-r2.ebuild:
1282     Revision bump, including 2.6.18.5 (via genpatches) and
1283     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1284     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1285     redesign.
1286 phreak 1.117
1287     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1288     hardened-sources-2.6.18.ebuild:
1289     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1290     of Mike Doty).
1291 phreak 1.116
1292     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1293    
1294     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1295     +hardened-sources-2.6.18-r1.ebuild:
1296     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1297 phreak 1.115
1298     *hardened-sources-2.6.18 (11 Nov 2006)
1299    
1300     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1301     +hardened-sources-2.6.18.ebuild:
1302     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1303 solar 1.114
1304     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1305     - mark amd64 stable also. bug #151877
1306 solar 1.113
1307     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1308     - mark 2.6.17-r1 stable
1309 phreak 1.112
1310     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1311     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1312     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1313 phreak 1.111
1314     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1315    
1316     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1317     +hardened-sources-2.6.17-r1.ebuild:
1318     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1319     grsecurity patch.
1320 phreak 1.110
1321     *hardened-sources-2.6.17 (17 Aug 2006)
1322    
1323     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1324     +hardened-sources-2.6.17.ebuild:
1325     Bumping the hardened-sources-2.6 series to 2.6.17, using
1326     genpatches-2.6.17-6.base.
1327 solar 1.109
1328     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1329     - stable on x86 and amd64
1330 solar 1.108
1331     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1332    
1333     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1334     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1335     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1336     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1337     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1338     crusty ebuilds
1339 johnm 1.107
1340     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1341     hardened-sources-2.6.16-r10.ebuild:
1342     marking stable on x86 and amd64
1343 solar 1.106
1344     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1345     - 2.4.32-r6 stable on x86. RSBAC state unknown
1346 kang 1.105
1347     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1348    
1349     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1350     +hardened-sources-2.4.32-r7.ebuild:
1351     Bump PaX for RSBAC to test-17
1352 johnm 1.104
1353     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1354    
1355     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1356     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1357     hardened-sources-2.6.16 bump to latest -base.
1358 solar 1.103
1359     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1360    
1361     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1362     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1363     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1364     sysctl controlable resource logging
1365 johnm 1.102
1366     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1367    
1368     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1369     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1370     push new 2.6.16 release in preparation for stable
1371 solar 1.101
1372     22 May 2006; <solar@gentoo.org> :
1373     - redigest bug 134002
1374 kang 1.100
1375     *hardened-sources-2.4.32-r5 (16 May 2006)
1376    
1377     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1378     +hardened-sources-2.4.32-r5.ebuild:
1379     Fixes rsbac common patching (new patch in new -r5 patchset)
1380 solar 1.99
1381     *hardened-sources-2.4.32-r4 (13 May 2006)
1382    
1383     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1384     +hardened-sources-2.4.32-r4.ebuild:
1385     - security bumps
1386 johnm 1.98
1387     *hardened-sources-2.6.16-r6 (03 May 2006)
1388    
1389     03 May 2006; John Mylchreest <johnm@gentoo.org>
1390     +hardened-sources-2.6.16-r6.ebuild:
1391     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1392 johnm 1.97
1393     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1394     hardened-sources-2.6.14-r8.ebuild:
1395     fix x86_64 build problem, this will delay the digest issue again for a short
1396     while but it will sort itself out
1397 johnm 1.96
1398     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1399     hardened-sources-2.6.14-r8.ebuild:
1400     bump hardened patchset
1401 antarus 1.94
1402     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1403     files/digest-hardened-sources-2.4.32-r2,
1404     files/digest-hardened-sources-2.4.32-r3,
1405     files/digest-hardened-sources-2.6.14-r8, Manifest:
1406     Fixing duff SHA256 digests: Bug # 131293
1407 johnm 1.93
1408 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1409    
1410     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1411     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1412     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1413     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1414     cleanup of old uneccessary sources
1415    
1416 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1417     fix digest
1418 johnm 1.92
1419     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1420    
1421     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1422     +hardened-sources-2.6.14-r8.ebuild:
1423     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1424 johnm 1.91
1425     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1426     Turning on gpg-signing again, and recomitting
1427 johnm 1.90
1428     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1429    
1430     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1431     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1432     +hardened-sources-2.6.16-r4.ebuild:
1433     Fix numerous security vulns
1434 solar 1.89
1435     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1436    
1437     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1438     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1439     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1440     - security bump for bug #112791. Removed old ebuilds
1441 johnm 1.88
1442     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1443    
1444     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1445     +hardened-sources-2.6.16-r3.ebuild:
1446     Removing silly localversion which I missed
1447 johnm 1.87
1448     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1449    
1450     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1451     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1452     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1453 johnm 1.86
1454     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1455    
1456     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1457     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1458     +hardened-sources-2.6.16-r2.ebuild:
1459     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1460     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1461 johnm 1.85
1462     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1463    
1464     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1465     +hardened-sources-2.6.16-r1.ebuild:
1466     Bumping to include ppc build fix and 2.6.16.3
1467 tsunam 1.84
1468     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1469     hardened-sources-2.6.14-r6.ebuild:
1470     Stable on x86; bug #127718
1471 johnm 1.83
1472     *hardened-sources-2.6.16 (31 Mar 2006)
1473    
1474     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1475     +hardened-sources-2.6.16.ebuild:
1476     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1477     2.6.16.1
1478 cryos 1.82
1479     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1480     hardened-sources-2.6.14-r6.ebuild:
1481     Stable on amd64, bug 127718.
1482 nixnut 1.81
1483     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1484     Stable on ppc. Bug #127718
1485 johnm 1.80
1486     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1487     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1488     -hardened-sources-2.6.14-r4.ebuild:
1489     Cleanup.
1490 johnm 1.79
1491     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1492    
1493     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1494     +hardened-sources-2.6.14-r6.ebuild:
1495     Fixes grsec policy recreation bug and adds a
1496     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1497 solar 1.78
1498     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1499     - stable on x86
1500 hansmi 1.77
1501     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1502     hardened-sources-2.6.14-r5.ebuild:
1503     Stable on ppc.
1504 johnm 1.76
1505     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1506    
1507     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1508     +hardened-sources-2.6.14-r5.ebuild:
1509     fixing every known exploit
1510 solar 1.75
1511     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1512    
1513     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1514     +hardened-sources-2.4.32-r2.ebuild:
1515     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1516 solar 1.74
1517     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1518    
1519     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1520     - version bump for new genpatches which fix up a few sec holes
1521 solar 1.73
1522     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1523    
1524     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1525     - revision bump to add misc vital linux kernel security patches.
1526 johnm 1.72
1527     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1528    
1529     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1530     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1531     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1532 johnm 1.71
1533     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1534     hardened-sources-2.6.14-r2.ebuild:
1535     making x86 & amd64 stable following testing.
1536 johnm 1.70
1537     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1538    
1539     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1540     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1541     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1542     network hooks.
1543 johnm 1.69
1544     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1545     hardened-sources-2.6.14-r1.ebuild:
1546     bumping to stable early for sec fix on x86 & amd64
1547 johnm 1.68
1548     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1549    
1550     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1551     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1552     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1553 solar 1.67
1554     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1555     - stable on x86 security bug #114227 CAN-2005-3257
1556 kang 1.66
1557     *hardened-sources-2.4.32 (19 Nov 2005)
1558    
1559     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1560     +hardened-sources-2.4.32.ebuild:
1561     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1562     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1563     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1564     rsbac >> /etc/portage/package.use)
1565 johnm 1.65
1566     *hardened-sources-2.6.14 (14 Nov 2005)
1567    
1568     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1569     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1570     Bumping 2.6 series to 2.6.14.2
1571 johnm 1.64
1572     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1573    
1574     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1575     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1576     +hardened-sources-2.6.13-r2.ebuild:
1577     Fixes minor build error in ppc.
1578 johnm 1.63
1579     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1580    
1581     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1582     +hardened-sources-2.6.13-r1.ebuild:
1583     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1584     2.6.13.4, fixes some major amd64 stability problems.
1585 johnm 1.62
1586     *hardened-sources-2.6.13 (16 Sep 2005)
1587    
1588     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1589     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1590     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1591     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1592     users should test this thoroughly.
1593 solar 1.61
1594     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1595     - stable on x86
1596 johnm 1.60
1597     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1598    
1599     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1600     +hardened-sources-2.6.11-r15.ebuild:
1601     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1602     grsec redefining curr_ip struct.
1603 solar 1.59
1604     *hardened-sources-2.4.31 (20 Jun 2005)
1605    
1606     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1607     initial import of 2.4.31 tree
1608 johnm 1.58
1609     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1610    
1611     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1612     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1613     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1614     naming scheme to abide by genpatches
1615 johnm 1.57
1616     *hardened-sources-2.6.11-r13 (18 May 2005)
1617    
1618     18 May 2005; John Mylchreest <johnm@gentoo.org>
1619     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1620     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1621     target. sorry about that. Fixes bug #93022
1622 johnm 1.56
1623     *hardened-sources-2.6.11-r12 (17 May 2005)
1624    
1625     17 May 2005; John Mylchreest <johnm@gentoo.org>
1626     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1627     +hardened-sources-2.6.11-r12.ebuild:
1628     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1629     merges in genpatches-base
1630 johnm 1.55
1631     *hardened-sources-2.6.11-r12 (17 May 2005)
1632    
1633     17 May 2005; John Mylchreest <johnm@gentoo.org>
1634     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1635     +hardened-sources-2.6.11-r12.ebuild:
1636     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1637     merges in genpatches-base
1638 solar 1.54
1639     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1640     -files/2.4.27-cmdline-race.patch,
1641     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1642     -files/2.4.28-grsec-binfmt_a.out.patch,
1643     -files/2.4.28-grsec-cmdline-race.patch,
1644     -files/2.4.28-selinux-binfmt_a.out.patch,
1645     -files/2.4.28-selinux-cmdline-race.patch,
1646     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1647     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1648     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1649     cleanup..
1650 solar 1.53
1651     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1652    
1653     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1654     - disable aout by default
1655 solar 1.52
1656     *hardened-sources-2.4.30 (18 Apr 2005)
1657    
1658     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1659     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1660     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1661     use
1662 tocharian 1.50
1663 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1664    
1665     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1666     +hardened-sources-2.4.29.ebuild:
1667     New hardened-patches-2.4-29.0 patchball.
1668     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1669    
1670     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1671    
1672     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1673     +hardened-sources-2.4.28-r5.ebuild:
1674     Added a fix for a PaX vulnerability.
1675    
1676     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1677 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1678     Stable on x86
1679 solar 1.49
1680     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1681     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1682     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1683     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1684     - fixed/added RDEPEND= in all kernel-2 ebuilds
1685 tocharian 1.48
1686     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1687    
1688     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1689     +hardened-sources-2.4.28-r4.ebuild:
1690     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1691     backport of neighbour hash updates.
1692 tocharian 1.47
1693     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1694     hardened-sources-2.4.28-r3.ebuild:
1695     Stable on x86
1696 tseng 1.46
1697     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1698    
1699     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1700     +hardened-sources-2.6.10-r3.ebuild:
1701     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1702     in 2005.0
1703 tocharian 1.45
1704     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1705     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1706     hardened-sources-2.4.28-r2.ebuild:
1707     Mark stable on x86
1708 tocharian 1.44
1709     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1710    
1711     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1712     +hardened-sources-2.4.28-r3.ebuild:
1713     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1714 tocharian 1.43
1715     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1716     hardened-sources-2.4.28.ebuild:
1717     Mark stable on x86.
1718 tocharian 1.42
1719     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1720    
1721     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1722     +hardened-sources-2.4.28-r2.ebuild:
1723     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1724     Mazinger for grsecurity patches as well.
1725 plasmaroo 1.41
1726     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1727    
1728     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1729     Security bump. Thank tocharian for rolling a new patchset...
1730 solar 1.40
1731     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1732     +files/2.4.28-grsec-cmdline-race.patch,
1733     +files/2.4.28-selinux-binfmt_a.out.patch,
1734     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1735     - Round up remaining security patches that appear to be missing in 2.4.28. -
1736     PaX standalone updated to current. hgpv=28.1
1737 solar 1.39
1738     *hardened-sources-2.4.28 (28 Nov 2004)
1739    
1740     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1741     security bump. Thank tocharian for rolling a new patchset
1742 scox 1.31
1743 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1744    
1745     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1746     +hardened-sources-2.4.27-r3.ebuild:
1747     Applies the new 2.4-27.2 patchball which updates
1748     GRSecurity to the 2.0.1 version.
1749    
1750 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1751    
1752     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1753     +hardened-sources-2.4.27-r2.ebuild:
1754     Version bump.
1755     This version uses the new 2.4-27.1 patchball which updates
1756     both the SELinux PaX hooks patch and the SELinux headers.
1757    
1758 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1759    
1760     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1761     +hardened-sources-2.4.27-r1.ebuild,
1762     -hardened-sources-2.4.27.ebuild,
1763     +files/2.4.27-cmdline-race.patch:
1764     Version bump, fix for cmdline race. See bug #59905.
1765    
1766     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1767    
1768     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1769     +hardened-sources-2.4.26-r6.ebuild,
1770     -hardened-sources-2.4.26-r5.ebuild,
1771     -hardened-sources-2.4.26-r4.ebuild,
1772     +files/2.4.26-cmdline-race.patch:
1773     Version bump, fix for cmdline race. See bug #59905.
1774    
1775 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1776    
1777     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1778     +hardened-sources-2.4.27.ebuild,
1779     +files/2.4.27-CAN-2004-0394.patch:
1780     Ported the patchball to the 2.4.27 kernel version.
1781    
1782 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1783    
1784     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1785     +hardened-sources-2.4.26-r5.ebuild:
1786 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1787 scox 1.34 It adds the following features:
1788     - Squashfs
1789     - Ebtables
1790     - Netdev random (core+drivers)
1791     - Watchdog Timer (WDT) fix.
1792    
1793 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1794    
1795     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1796     +hardened-sources-2.4.26-r4.ebuild,
1797     +files/2.4.26-CAN-2004-0415.patch,
1798     -hardened-sources-2.4.26-3:
1799     Version bump, fix for CAN 0415, see bug #59378.
1800    
1801 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1802    
1803     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1804     +hardened-sources-2.4.26-r3.ebuild,
1805     +files/2.4.26-CAN-2004-0497.patch,
1806     -hardened-sources-2.4.26-r2.ebuild:
1807     Version bump, fixed CAN 0497, see bug #56171.
1808    
1809 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1810    
1811     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1812 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1813 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1814     +files/2.4.26-CAN-2004-0535.patch,
1815     -hardened-sources-2.4.26-r1.ebuild:
1816     Fixes for both CAN 0495 and 0535, see bug #54976
1817 pvdabeel 1.27
1818 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1819     hardened-sources-2.4.26-r1.ebuild:
1820     QA - fix use invocation
1821 scox 1.28
1822     *hardened-sources-2.4.26-r1 (22 June 2004)
1823    
1824     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1825     +hardened-sources-2.4.26-r1.ebuild,
1826     +files/2.4.26-CAN-2004-0394.patch,
1827     +files/2.4.26-signal-race.patch,
1828     -hardened-sources-2.4.26.ebuild,
1829     -hardened-sources-2.4.24-r3.ebuild:
1830     Version bump for the CAN-2004-0394 issue and bug #53804
1831     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1832    
1833    
1834 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1835     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1836     Masked hardened-sources-2.4.26.ebuild broken for ppc
1837    
1838     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1839     hardened-sources-2.4.24-r3.ebuild:
1840     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1841 plasmaroo 1.25
1842 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1843    
1844     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1845     +hardened-sources-2.4.26.ebuild:
1846     Updated hardened-sources for the 2.4.26 kernel
1847     Removed broken components, updated almost everything.
1848    
1849 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1850    
1851     17 Apr 2004; <plasmaroo@gentoo.org>
1852     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1853     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1854     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1855     +hardened-sources-2.4.24-r3.ebuild:
1856     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1857     vulnerabilities. Old revisions removed.
1858 plasmaroo 1.24
1859     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1860    
1861     15 Apr 2004; <plasmaroo@gentoo.org>
1862     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1863     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1864     Version bump for the CAN-2004-0109 issue; bug #47881.
1865 aliz 1.23
1866     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1867     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1868     Add eutils to inherit.
1869 plasmaroo 1.22
1870     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1871    
1872     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1873     files/hardened-sources-2.4.24.munmap.patch:
1874     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1875 scox 1.19
1876 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1877 scox 1.26
1878 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1879     hardened-sources-2.4.24.ebuild:
1880     Version bump, updated most of the components.
1881     This release includes the following:
1882    
1883     - Hardened security
1884     - Netfilter patch-o-matic 20031219
1885     - FreeSWAN 2.04 & x509 1.4.8
1886     - EVMS 2.2.2
1887     - XFS 1.3.1
1888     - cryptoloop jari
1889     - grsecurity 2.0-rc4
1890     - SELinux
1891     - PaX 200402060000
1892     - PaX Obscurity 200308302223
1893     - Others...
1894    
1895     Neither -ck nor systrace are included anymore.
1896    
1897 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1898    
1899     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1900     hardened-sources-2.4.22-r2.ebuild:
1901 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1902 scox 1.19
1903     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1904 iggy 1.17
1905     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1906 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1907 iggy 1.16
1908     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1909 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1910     Version bump for the 'do_brk' vulnerability.
1911 iggy 1.15
1912     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1913     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1914     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1915     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1916 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1917 frogger 1.14
1918     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1919     hardened-sources-2.4.22.ebuild:
1920 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1921     components. These are no longer handled in the kernel
1922     so this code was not necessary.
1923 frogger 1.13
1924     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1925     New 2.4.22 based hardened-sources thanks to
1926     Phil West <p.west@computer.org>.
1927    
1928     These sources include:
1929 plasmaroo 1.18 - New SELinux API
1930     - Updated CK-base
1931     - Updated GRSec
1932     - Systrace
1933     - SuperFreeS/WAN 1.99.8
1934     - Propolice kernel build support
1935     - EVMS
1936     - Other various security related patches
1937 frogger 1.11
1938 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1939    
1940     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1941     Updated hardened-sources based on the 2.4.21 Linux kernel.
1942     This includes updates to most major components such as:
1943 plasmaroo 1.18 - ck-base-0306300059
1944     - selinux-2.4-2003071106
1945     - grsecurity-2.0-rc1
1946     - Updated IPTables patch-o-matic
1947     - Updated SuperFreeS/WAN
1948    
1949 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1950     updated patch set ready for the 2.4.21 based kernel.
1951    
1952 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1953     Initial import of hardened-sources-2.4.20-r4. This revision
1954     includes only a few changes, but one of these is an important
1955     security fix. It is recommended all users of hardened-sources
1956     upgrade to this release.
1957 plasmaroo 1.18
1958 frogger 1.11 - ioperm bug fix
1959     - fixed compilation failure when building without GRSec
1960 plasmaroo 1.18
1961 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1962     due to time constraints, but is planned for inclusion in the near
1963     future.
1964 msterret 1.10
1965     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1966    
1967     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1968     hardened-sources-2.4.20-r3.ebuild:
1969 plasmaroo 1.18 Add Header...
1970 frogger 1.9
1971     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1972     hardened-sources-2.4.20-r3.ebuild:
1973     Removed warnings from ebuild. This kernel should be safe to
1974     use at this point.
1975 frogger 1.8
1976     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1977    
1978     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1979     hardened-sources-2.4.20-r3.ebuild:
1980     New revision. Includes the following changes over -r2:
1981 plasmaroo 1.18
1982 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1983     - Super FreeS/WAN 1.99.7rc2
1984     - PaX for the LSM/SELinux branch
1985     - GRSecurity 2.0-pre4 (role based access control)
1986     - Systrace 1.3
1987     - EXT3 fixes
1988     - EVMS 2.0.1
1989     - GCC 3.1+ compile optimizations
1990     - ProPolice kernel build support
1991     - Hashing table security fixes
1992 frogger 1.3
1993     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1994 frogger 1.7
1995     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1996     Initial import of hardened-sources-r2. This new
1997     ebuild includes many new performance and security
1998     related patches. As in -r1, it will patch in
1999     LSM/SELinux if "selinux" is in USE, otherwise it
2000     will patch in GRSecurity. The following patches
2001     are included in this revision:
2002 plasmaroo 1.18
2003 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
2004     (pulled from the base CK patch)
2005     - ptrace exploit patch for the LSM kernel
2006     (the GRSec patch already fixes this)
2007     - LSM 2.4-2003040709
2008     - SELinux 2.4-2003040709
2009     - Systrace v1.2
2010     - IPTables patch-o-matic base patches - 20030107
2011     - CryptoAPI 2.4.20.1 w/ loop-jari patch
2012     - Super FreeS/WAN 1.99.6.1
2013     - GRSecurity 1.9.9g
2014     - MPPE
2015     - EXT3 data journal fix
2016     - CIPE 1.5.4
2017 frogger 1.6
2018     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2019     hardened-sources-2.4.20-r1.ebuild, manifest:
2020 plasmaroo 1.18 Updated to install flask components correctly for selinux.
2021 frogger 1.5
2022     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2023     hardened-sources-2.4.20-r1.ebuild:
2024     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2025     is patched in instead. Ptrace patches for selinux have also been added. In
2026     either case, systrace support will be patched in as well.
2027 frogger 1.3
2028     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2029     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2030 plasmaroo 1.18 Revision bump for new sources.
2031 frogger 1.4
2032 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2033 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
2034 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2035 method 1.1
2036 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
2037    
2038 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2039     hardened-sources-2.4.20.ebuild:
2040 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20