/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.344 - (hide annotations) (download)
Sat Oct 16 17:13:33 2010 UTC (4 years, 2 months ago) by blueness
Branch: MAIN
Changes since 1.343: +11 -1 lines
hardened-sources-2.6.32-r21 based on 2.6.32.24 + genpatches + grsec-2.2.0-2.6.32.24-201010121028
hardened-sources-2.6.35-r3 based on 2.6.35.7 + genpatches + grsec-2.2.0-2.6.35.7-201010121028

(Portage version: 2.1.9.16/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.344 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.343 2010/10/07 14:02:11 blueness Exp $
4    
5     *hardened-sources-2.6.35-r3 (16 Oct 2010)
6     *hardened-sources-2.6.32-r21 (16 Oct 2010)
7    
8     16 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
9     +hardened-sources-2.6.32-r21.ebuild, +hardened-sources-2.6.35-r3.ebuild:
10     hardened-sources-2.6.32-r21 based on 2.6.32.24 + genpatches +
11     grsec-2.2.0-2.6.32.24-201010121028
12     hardened-sources-2.6.35-r3 based on 2.6.35.7 + genpatches +
13     grsec-2.2.0-2.6.35.7-201010121028
14 blueness 1.343
15     *hardened-sources-2.6.35-r2 (07 Oct 2010)
16    
17     07 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
18     +hardened-sources-2.6.35-r2.ebuild:
19     hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches +
20     grsec-2.2.0-2.6.35.7-201010021153
21 blueness 1.342
22     *hardened-sources-2.6.32-r20 (06 Oct 2010)
23    
24     06 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
25     +hardened-sources-2.6.32-r20.ebuild:
26     hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches +
27     grsec-2.2.0-2.6.32.24-201010021153
28 blueness 1.341
29     *hardened-sources-2.6.35-r1 (30 Sep 2010)
30     *hardened-sources-2.6.32-r19 (30 Sep 2010)
31    
32     30 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
33     +hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild:
34     hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches +
35     grsec-2.2.0-2.6.32.23-201009272133
36     hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches +
37     grsec-2.2.0-2.6.35.6-201009281623
38 blueness 1.340
39     *hardened-sources-2.6.35 (28 Sep 2010)
40    
41     28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
42     +hardened-sources-2.6.35.ebuild:
43     hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
44 blueness 1.339
45     21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
46     -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
47     hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
48     -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
49     Fast track stabilization. See bug #338273. Removed older versions.
50 blueness 1.338
51     *hardened-sources-2.6.34-r6 (17 Sep 2010)
52     *hardened-sources-2.6.32-r18 (17 Sep 2010)
53    
54     17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
55     +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
56     hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
57     grsec-2.2.0-2.6.32.21-201009162222
58     hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
59     grsec-2.2.0-2.6.34.7-201009162222
60     Addresses IA32 syscall exploit.
61 blueness 1.337
62     *hardened-sources-2.6.34-r5 (15 Sep 2010)
63     *hardened-sources-2.6.32-r17 (15 Sep 2010)
64    
65     15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
66     +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
67     hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
68     grsec-2.2.0-2.6.32.21-201009130811
69     hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
70     grsec-2.2.0-2.6.34.6-201009130754
71 blueness 1.336
72     *hardened-sources-2.6.34-r4 (07 Sep 2010)
73     *hardened-sources-2.6.32-r16 (07 Sep 2010)
74    
75     07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
76     +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
77     hardened-sources-2.6.32-r16 based on 2.6.32.21 +
78     grsec-2.2.0-2.6.32.21-201009032133
79     hardened-sources-2.6.34-r4 based on 2.6.34.6 +
80     grsec-2.2.0-2.6.34.6-201009041352
81 blueness 1.335
82     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
83     hardened-sources-2.6.32-r15 based on 2.6.32.21 +
84     grsec-2.2.0-2.6.32.21-201008292122
85     hardened-sources-2.6.34-r3 based on 2.6.34.6 +
86     grsec-2.2.0-2.6.34.6-201008292122
87 blueness 1.334
88     *hardened-sources-2.6.34-r3 (02 Sep 2010)
89     *hardened-sources-2.6.32-r15 (02 Sep 2010)
90    
91     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
92     -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
93     -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
94     +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
95     +hardened-sources-2.6.34-r3.ebuild:
96     Bumps and remove deprecated versions
97 blueness 1.333
98     *hardened-sources-2.6.34-r2 (21 Aug 2010)
99    
100     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
101     +hardened-sources-2.6.34-r2.ebuild:
102     Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
103 blueness 1.332
104     *hardened-sources-2.6.32-r14 (21 Aug 2010)
105    
106     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
107     +hardened-sources-2.6.32-r14.ebuild:
108     Based on vanilla 2.6.32.19 + genpatches +
109     grsec-2.2.0-2.6.32.19-201008131840
110 blueness 1.331
111     *hardened-sources-2.6.32-r13 (14 Aug 2010)
112    
113     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
114     +hardened-sources-2.6.32-r13.ebuild:
115     Based on vanilla 2.6.32.18 + genpatches +
116     grsecurity-2.2.0-2.6.32.18-201008112233
117 robbat2 1.330
118     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
119     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
120 blueness 1.329
121     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
122     hardened-sources-2.6.32-r9.ebuild:
123     Stable ppc64. Bug #326885
124 blueness 1.328
125     *hardened-sources-2.6.32-r12 (24 Jul 2010)
126    
127     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
128     +hardened-sources-2.6.32-r12.ebuild:
129     Parallels fix incorporated into hardened-sources-2.6.34-r1
130 blueness 1.327
131     *hardened-sources-2.6.34-r1 (24 Jul 2010)
132    
133     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
134     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
135     Fixes bug #328275
136 chainsaw 1.326
137     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
138     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
139     on gentoo-dev.
140 jer 1.325
141     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
142     Correct mail address.
143 blueness 1.324
144     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
145     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
146     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
147     -hardened-sources-2.6.32-r8.ebuild:
148     Removing outdated releases
149 fauli 1.323
150     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
151     hardened-sources-2.6.32-r9.ebuild:
152     stable x86, bug 326885
153 blueness 1.322
154     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
155     -hardened-sources-2.6.32-r7.ebuild:
156     Removed for security. Bug #325573
157 blueness 1.321
158     *hardened-sources-2.6.34 (13 Jul 2010)
159    
160     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
161     +hardened-sources-2.6.34.ebuild:
162     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
163 blueness 1.320
164     *hardened-sources-2.6.32-r11 (13 Jul 2010)
165    
166     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
167     +hardened-sources-2.6.32-r11.ebuild:
168     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
169 chainsaw 1.319
170     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
171     Marked stable on AMD64 as requested by Anthony G. Basile
172     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
173     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
174 blueness 1.318
175     *hardened-sources-2.6.32-r10 (30 Jun 2010)
176    
177     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
178     +hardened-sources-2.6.32-r10.ebuild:
179     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
180 blueness 1.317
181     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
182     Added myself to the metadata.xml
183 chainsaw 1.316
184     *hardened-sources-2.6.32-r9 (11 Jun 2010)
185    
186     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
187     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
188 chainsaw 1.315
189     *hardened-sources-2.6.32-r8 (01 Jun 2010)
190    
191     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
192     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
193 chainsaw 1.314
194     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
195     Update SRC_URI to point to mirror network now that the distfile has
196     propagated.
197 chainsaw 1.313
198     *hardened-sources-2.6.32-r7 (26 May 2010)
199    
200     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
201     metadata.xml:
202     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
203     Summers.
204 robbat2 1.312
205     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
206     Update Manifest for deblob support in kernel-2 eclass.
207 nixnut 1.311
208     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
209     ppc stable
210 gengor 1.310
211     29 May 2009; Gordon Malm <gengor@gentoo.org>
212     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
213     Stable amd64/x86 and remove old.
214 gengor 1.309
215     *hardened-sources-2.6.29 (25 May 2009)
216    
217     25 May 2009; Gordon Malm <gengor@gentoo.org>
218     +hardened-sources-2.6.29.ebuild:
219     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
220     release candidates.
221 gengor 1.308
222     *hardened-sources-2.6.28-r9 (25 May 2009)
223    
224     25 May 2009; Gordon Malm <gengor@gentoo.org>
225     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
226     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
227 gengor 1.307
228     *hardened-sources-2.6.28-r8 (18 May 2009)
229    
230     18 May 2009; Gordon Malm <gengor@gentoo.org>
231     +hardened-sources-2.6.28-r8.ebuild:
232     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
233     and #262862 among others.
234 gengor 1.306
235     01 May 2009; Gordon Malm <gengor@gentoo.org>
236     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
237     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
238     Remove unnecessary mirror://gentoo from SRC_URI.
239 nixnut 1.305
240     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
241     ppc stable
242 gengor 1.304
243     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
244     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
245     Stable amd64/x86 and remove old.
246 gengor 1.303
247     *hardened-sources-2.6.28-r7 (27 Mar 2009)
248    
249     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
250     +hardened-sources-2.6.28-r7.ebuild:
251     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
252 gengor 1.302
253     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
254     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
255     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
256     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
257     Stable amd64/x86 and remove old versions.
258 nixnut 1.301
259     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
260     ppc stable
261 gengor 1.300
262     *hardened-sources-2.6.28-r6 (21 Mar 2009)
263    
264     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
265     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
266     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
267 gengor 1.299
268     *hardened-sources-2.6.28-r5 (20 Mar 2009)
269    
270     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
271     +hardened-sources-2.6.28-r5.ebuild:
272     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
273 gengor 1.298
274     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
275     hardened-sources-2.6.28-r4.ebuild:
276     Stable amd64/x86.
277 gengor 1.297
278     *hardened-sources-2.6.28-r4 (18 Mar 2009)
279    
280     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
281     +hardened-sources-2.6.28-r4.ebuild:
282     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
283     compilation with CPA_DEBUG and more.
284 gengor 1.296
285     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
286     hardened-sources-2.6.28-r3.ebuild:
287     Quick stable amd64/x86.
288 gengor 1.295
289     *hardened-sources-2.6.28-r3 (15 Mar 2009)
290    
291     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
292     +hardened-sources-2.6.28-r3.ebuild:
293     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
294 nixnut 1.294
295     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
296     ppc stable
297 gengor 1.293
298     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
299     hardened-sources-2.6.28-r2.ebuild:
300     Stable amd64/x86.
301 gengor 1.292
302     *hardened-sources-2.6.28-r2 (11 Mar 2009)
303    
304     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
305     +hardened-sources-2.6.28-r2.ebuild:
306     Version bump bringing in latest grsecurity patch.
307 gengor 1.291
308     *hardened-sources-2.6.28-r1 (09 Mar 2009)
309    
310     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
311     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
312     Version bump and remove old.
313 nixnut 1.290
314     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
315     ppc stable
316 gengor 1.289
317     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
318     hardened-sources-2.6.27-r8.ebuild:
319     Remove amd64 testing keyword, bug 256226.
320 gengor 1.288
321     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
322     hardened-sources-2.6.27-r8.ebuild:
323     Revert amd64 stable, bug #256226.
324 gengor 1.287
325     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
326     hardened-sources-2.6.27-r8.ebuild:
327     Stable on amd64/x86.
328 gengor 1.286
329     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
330     -hardened-sources-2.6.27-r6.ebuild:
331     Remove old 2.6.27 release.
332 gengor 1.285
333     *hardened-sources-2.6.27-r8 (24 Feb 2009)
334    
335     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
336     +hardened-sources-2.6.27-r8.ebuild:
337     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
338     and probably more.
339 nixnut 1.284
340     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
341     ppc stable
342 gengor 1.283
343     *hardened-sources-2.6.28 (25 Jan 2009)
344    
345     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
346     +hardened-sources-2.6.28.ebuild:
347     Initial 2.6.28 release.
348 gengor 1.282
349     *hardened-sources-2.6.27-r7 (25 Jan 2009)
350    
351     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
352     +hardened-sources-2.6.27-r7.ebuild:
353     Bump to Linux 2.6.27.13.
354 gengor 1.281
355     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
356     hardened-sources-2.6.26-r9.ebuild:
357     Stable amd64/x86.
358 gengor 1.280
359     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
360     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
361     -hardened-sources-2.6.27-r5.ebuild:
362     Remove problem versions.
363 gengor 1.279
364     *hardened-sources-2.6.27-r6 (24 Jan 2009)
365    
366     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
367     +hardened-sources-2.6.27-r6.ebuild:
368     Revert PaX test29 to test30 changes. Fixes bug 256226.
369 gengor 1.277
370     *hardened-sources-2.6.27-r5 (24 Jan 2009)
371    
372     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
373     +hardened-sources-2.6.27-r5.ebuild:
374 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
375 gengor 1.277 254843.
376 gengor 1.276
377     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
378     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
379     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
380     Remove problem versions.
381 nixnut 1.275
382     23 Jan 2009; nixnut <nixnut@gentoo.org>
383     hardened-sources-2.6.25-r13.ebuild:
384     ppc stable
385 gengor 1.274
386     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
387     hardened-sources-2.6.25-r13.ebuild:
388     Fasttrack stable amd64/x86.
389 gengor 1.273
390     *hardened-sources-2.6.26-r9 (21 Jan 2009)
391    
392     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
393     +hardened-sources-2.6.26-r9.ebuild:
394 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
395 gengor 1.272
396     *hardened-sources-2.6.25-r13 (20 Jan 2009)
397    
398     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
399     +hardened-sources-2.6.25-r13.ebuild:
400 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
401 nixnut 1.271
402     20 Jan 2009; nixnut <nixnut@gentoo.org>
403     hardened-sources-2.6.25-r12.ebuild:
404     ppc stable
405 gengor 1.270
406     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
407     hardened-sources-2.6.25-r12.ebuild:
408     Stable amd64/x86.
409 gengor 1.269
410     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
411     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
412     -hardened-sources-2.6.27-r2.ebuild:
413     Clean out old versions.
414 gengor 1.268
415     *hardened-sources-2.6.27-r4 (14 Jan 2009)
416     *hardened-sources-2.6.26-r8 (14 Jan 2009)
417     *hardened-sources-2.6.25-r12 (14 Jan 2009)
418    
419     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
420     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
421     +hardened-sources-2.6.27-r4.ebuild:
422     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
423     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
424     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
425     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
426 nixnut 1.267
427     15 Dec 2008; nixnut <nixnut@gentoo.org>
428     hardened-sources-2.6.25-r11.ebuild:
429     Stable on ppc
430 gengor 1.266
431     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
432     hardened-sources-2.6.25-r11.ebuild:
433     Stable amd64/x86.
434 gengor 1.265
435     *hardened-sources-2.6.27-r3 (07 Dec 2008)
436    
437     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
438     +hardened-sources-2.6.27-r3.ebuild:
439     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
440     Fixes bug #248754, #249729 and #246607.
441 gengor 1.264
442     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
443     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
444     Remove old versions.
445 gengor 1.262
446     *hardened-sources-2.6.26-r7 (03 Dec 2008)
447     *hardened-sources-2.6.25-r11 (03 Dec 2008)
448    
449 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
450     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
451 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
452     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
453     Both include many backports from 2.6.27.{6,7} -stable releases.
454 gengor 1.261
455     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
456     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
457     Remove versions broken on ARCHes != x86/amd64.
458 gengor 1.260
459     *hardened-sources-2.6.27-r2 (24 Nov 2008)
460    
461     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
462     +hardened-sources-2.6.27-r2.ebuild:
463     Bump to Linux 2.6.27.7 and latest grsecurity patch.
464 gengor 1.259
465     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
466     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
467     Remove old versions.
468 gengor 1.258
469     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
470     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
471     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
472 nixnut 1.257
473     16 Nov 2008; nixnut <nixnut@gentoo.org>
474     hardened-sources-2.6.25-r10.ebuild:
475     Stable on ppc
476 gengor 1.256
477     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
478     hardened-sources-2.6.25-r10.ebuild:
479     Stable amd64/x86.
480 gengor 1.255
481     *hardened-sources-2.6.26-r6 (12 Nov 2008)
482    
483     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
484     +hardened-sources-2.6.26-r6.ebuild:
485     Bump to Linux 2.6.26.8 and fix security bug #245650.
486 gengor 1.254
487     *hardened-sources-2.6.25-r10 (12 Nov 2008)
488    
489     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
490     +hardened-sources-2.6.25-r10.ebuild:
491     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
492 gengor 1.253
493     *hardened-sources-2.6.27-r1 (09 Nov 2008)
494    
495     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
496     +hardened-sources-2.6.27-r1.ebuild:
497     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
498 gengor 1.252
499     *hardened-sources-2.6.27 (04 Nov 2008)
500    
501     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
502     +hardened-sources-2.6.27.ebuild:
503     Initial 2.6.27 release.
504 gengor 1.251
505     *hardened-sources-2.6.26-r5 (03 Nov 2008)
506    
507     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
508     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
509     +hardened-sources-2.6.26-r5.ebuild:
510     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
511     Clean out some old versions.
512 nixnut 1.250
513     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
514     Stable on ppc
515 gengor 1.249
516     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
517     hardened-sources-2.6.25-r9.ebuild:
518     Stable on amd64/x86.
519 gengor 1.248
520     *hardened-sources-2.6.25-r9 (26 Oct 2008)
521    
522     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
523     +hardened-sources-2.6.25-r9.ebuild:
524     Update to Linux 2.6.25.19
525 nixnut 1.247
526     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
527     Stable on ppc
528 gengor 1.246
529     *hardened-sources-2.6.26-r4 (14 Oct 2008)
530    
531     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
532     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
533     Update to latest grsecurity patch, fixing building of non-modular kernels.
534 gengor 1.245
535     *hardened-sources-2.6.26-r3 (12 Oct 2008)
536    
537     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
538     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
539     +hardened-sources-2.6.26-r3.ebuild:
540     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
541     2.6.26-r1: Removed.
542     2.6.25-r8: Stable amd64/x86.
543 gengor 1.244
544     *hardened-sources-2.6.25-r8 (09 Oct 2008)
545    
546     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
547     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
548     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
549     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
550 nixnut 1.243
551     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
552     Stable on ppc
553 gengor 1.242
554     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
555     hardened-sources-2.6.25-r7.ebuild:
556     Stable amd64/x86.
557 gengor 1.241
558     *hardened-sources-2.6.26-r2 (13 Sep 2008)
559    
560     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
561     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
562     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
563     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
564 gengor 1.240
565     *hardened-sources-2.6.25-r7 (13 Sep 2008)
566    
567     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
568     +hardened-sources-2.6.25-r7.ebuild:
569     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
570 gengor 1.239
571     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
572     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
573     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
574     hardened-sources-2.6.26-r1.ebuild:
575     Update DESCRIPTION and HGPV_URI.
576 gengor 1.238
577     *hardened-sources-2.6.25-r6 (09 Sep 2008)
578    
579     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
580     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
581     2.6.25-r6: Update to Linux 2.6.25.17.
582     2.6.24-r3: Removed.
583 gengor 1.237
584     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
585     hardened-sources-2.6.25-r5.ebuild:
586     Stable on amd64/x86
587 gengor 1.236
588     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
589     Update my email address.
590 nixnut 1.235
591     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
592     stable on ppc
593 battousai 1.234
594     *hardened-sources-2.6.26-r1 (23 Aug 2008)
595     *hardened-sources-2.6.25-r5 (23 Aug 2008)
596    
597     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
598     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
599     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
600     +hardened-sources-2.6.26-r1.ebuild:
601     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
602     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
603     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
604     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
605     (gengor).
606 solar 1.233
607     *hardened-sources-2.6.26 (18 Aug 2008)
608     *hardened-sources-2.6.25-r4 (18 Aug 2008)
609    
610     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
611     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
612     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
613     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
614     2.6.25-r2: Removed.
615 tove 1.232
616     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
617     Remove phreak from metadata.xml (#96398)
618 solar 1.231
619     *hardened-sources-2.6.25-r3 (31 Jul 2008)
620    
621     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
622     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
623     +hardened-sources-2.6.25-r3.ebuild:
624     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
625     fixes, including security bug #231750.
626 nixnut 1.230
627     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
628     Stable on ppc
629 solar 1.229
630     *hardened-sources-2.6.25-r2 (05 Jul 2008)
631    
632     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
633     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
634     +hardened-sources-2.6.25-r2.ebuild:
635     2.6.23-r4: Stable x86/amd64
636     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
637     2.6.23-r{11,12}: Removed due to multiple vulns.
638     (gengor & kerframil)
639 nixnut 1.228
640     04 Jul 2008; nixnut <nixnut@gentoo.org>
641     hardened-sources-2.6.23-r13.ebuild:
642     Stable on ppc
643 solar 1.227
644     *hardened-sources-2.6.25-r1 (30 Jun 2008)
645    
646     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
647     +hardened-sources-2.6.25-r1.ebuild:
648     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
649     grsecurity release. 2.6.23-r13: x86/amd64 stable
650 solar 1.226
651     *hardened-sources-2.6.25 (17 Jun 2008)
652     *hardened-sources-2.6.24-r3 (17 Jun 2008)
653     *hardened-sources-2.6.23-r13 (17 Jun 2008)
654    
655     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
656     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
657     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
658     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
659     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
660     2.6.25: Initial 2.6.25 release.
661 solar 1.225
662     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
663     - fasttrack to stable x86/amd64
664 swegener 1.224
665     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
666     Fix broken digest for linux-2.6.24.tar.bz2.
667 solar 1.223
668     *hardened-sources-2.6.24-r2 (11 May 2008)
669     *hardened-sources-2.6.23-r12 (11 May 2008)
670    
671     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
672     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
673     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
674     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
675     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
676     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
677     security bugs 219901, 220691, 220975, 220979, 221123. New
678     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
679     should be removed as far as I'm concerned, everything else remove due to
680     vulnerable to numerous security bugs or brokeness.
681 nixnut 1.222
682     10 May 2008; nixnut <nixnut@gentoo.org>
683     hardened-sources-2.6.23-r11.ebuild:
684     Stable on ppc
685 solar 1.221
686     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
687     - -r11 stable on x86/amd64
688 solar 1.220
689     *hardened-sources-2.6.23-r11 (01 May 2008)
690    
691     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
692     - version bump to fix ulgy linux bugs
693 phreak 1.219
694     *hardened-sources-2.6.24-r1 (30 Apr 2008)
695    
696     30 Apr 2008; Christian Heim <phreak@gentoo.org>
697     +hardened-sources-2.6.24-r1.ebuild:
698     Revision bump (thanks to Kerin and Gordon, again), pulling
699     genpatches-2.6.24-7, solving #219089. Additionally contains further security
700     fixes plus some minor updates.
701 phreak 1.218
702     *hardened-sources-2.6.23-r10 (30 Apr 2008)
703    
704     30 Apr 2008; Christian Heim <phreak@gentoo.org>
705     +hardened-sources-2.6.23-r10.ebuild:
706     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
707     Additional contains "various other fixes".
708 phreak 1.217
709     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
710     Update the longdescription in metadata, thanks to Gordon Malm.
711 nixnut 1.216
712     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
713     Stable on ppc wrt bug #213255
714 solar 1.215
715     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
716     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
717     - stable on x86/amd64 per request. Removed obsolete ebuilds
718 phreak 1.214
719     *hardened-sources-2.6.24 (07 Apr 2008)
720    
721     07 Apr 2008; Christian Heim <phreak@gentoo.org>
722     +hardened-sources-2.6.24.ebuild:
723     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
724     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
725     for the many contributions and their continued effort in #216612) based on
726     2.6.24 and genpatches-2.6.24-5.
727    
728     The current ebuild/patchset contains these things:
729     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
730     * Introduces bespoke server and workstation oriented security levels
731     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
732 phreak 1.213
733     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
734     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
735     maintaining it).
736 phreak 1.212
737     24 Mar 2008; Christian Heim <phreak@gentoo.org>
738     hardened-sources-2.4.35-r2.ebuild:
739     Fixing SRC_URI for 2.4.35-r2.
740 phreak 1.211
741     *hardened-sources-2.6.23-r9 (22 Mar 2008)
742    
743     22 Mar 2008; Christian Heim <phreak@gentoo.org>
744     +hardened-sources-2.6.23-r9.ebuild:
745     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
746     * Change the default GIDs for some grsecurity options
747     * Revamp the Hardened [Gentoo] security level and make it the default level
748     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
749     * Fix a recursive lock -- call to capable() within ptrace_attach()
750     * Fix bug that allows audit and iscsi operations to be controlled via netlink
751 solar 1.210
752     *hardened-sources-2.6.23-r8 (27 Feb 2008)
753    
754     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
755     - version bump from Kerin Millar bug 210026
756 solar 1.209
757     17 Feb 2008; <solar@gentoo.org> metadata.xml,
758     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
759     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
760     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
761     - stable on x86 and remove old ebuilds
762 solar 1.207
763     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
764 solar 1.208 - stable on amd64 per request of amd64 lead
765 solar 1.206
766     *hardened-sources-2.6.23-r7 (11 Feb 2008)
767    
768     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
769     - version bump from kerin.millar
770     Changes:
771    
772     * Bump to genpatches-base-2.6.23-9
773     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
774     * Disables COMPAT_VDSO in x86/defconfig
775     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
776 phreak 1.205
777     25 Jan 2008; Christian Heim <phreak@gentoo.org>
778     -hardened-sources-2.6.22-r8.ebuild:
779     Cleaning up old versions.
780 phreak 1.204
781     *hardened-sources-2.6.23-r6 (25 Jan 2008)
782    
783     25 Jan 2008; Christian Heim <phreak@gentoo.org>
784     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
785     Revision bump, pulling in the latest genpatches.
786 phreak 1.203
787     *hardened-sources-2.6.23-r5 (24 Dec 2007)
788    
789     24 Dec 2007; Christian Heim <phreak@gentoo.org>
790     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
791     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
792     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
793     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
794 phreak 1.202
795     24 Dec 2007; Christian Heim <phreak@gentoo.org>
796     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
797     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
798     -hardened-sources-2.6.23-r3.ebuild:
799     Cleaning out some unused, old versions.
800 phreak 1.201
801     24 Dec 2007; Christian Heim <phreak@gentoo.org>
802     hardened-sources-2.6.23-r4.ebuild:
803     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
804     in the tree for long, but there isn't much of a difference between this and
805     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
806 phreak 1.200
807     *hardened-sources-2.6.23-r4 (23 Dec 2007)
808    
809     23 Dec 2007; Christian Heim <phreak@gentoo.org>
810     +hardened-sources-2.6.23-r4.ebuild:
811     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
812 phreak 1.199
813     *hardened-sources-2.6.23-r3 (04 Dec 2007)
814    
815     04 Dec 2007; Christian Heim <phreak@gentoo.org>
816     +hardened-sources-2.6.23-r3.ebuild:
817     Revision bump, pulling in 2.6.23.9.
818 phreak 1.198
819     *hardened-sources-2.6.23-r2 (25 Nov 2007)
820    
821     25 Nov 2007; Christian Heim <phreak@gentoo.org>
822     +hardened-sources-2.6.23-r2.ebuild:
823     Updated patchset, thanks to solar.
824 phreak 1.197
825     *hardened-sources-2.6.23-r1 (31 Oct 2007)
826    
827     31 Oct 2007; Christian Heim <phreak@gentoo.org>
828     +hardened-sources-2.6.23-r1.ebuild:
829     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
830 solar 1.196
831     29 Oct 2007; <solar@gentoo.org> metadata.xml:
832     - update metadata.xml
833 phreak 1.195
834     25 Oct 2007; Christian Heim <phreak@gentoo.org>
835     hardened-sources-2.6.22-r8.ebuild:
836     Marking 2.6.22-r8 stable on amd64 and x86.
837 phreak 1.194
838     21 Oct 2007; Christian Heim <phreak@gentoo.org>
839     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
840     -hardened-sources-2.6.21-r4.ebuild:
841     Removing old ebuilds.
842 phreak 1.193
843     *hardened-sources-2.4.35-r2 (21 Oct 2007)
844    
845     21 Oct 2007; Christian Heim <phreak@gentoo.org>
846     +hardened-sources-2.4.35-r2.ebuild:
847     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
848     patches.
849 phreak 1.192
850     *hardened-sources-2.6.22-r8 (21 Oct 2007)
851    
852     21 Oct 2007; Christian Heim <phreak@gentoo.org>
853     +hardened-sources-2.6.22-r8.ebuild:
854     Yet another new patch, hopefully fixing the remaining issues we had w/
855     2.6.22. Candidate for stabling.
856 phreak 1.191
857     *hardened-sources-2.6.23 (13 Oct 2007)
858    
859     13 Oct 2007; Christian Heim <phreak@gentoo.org>
860     +hardened-sources-2.6.23.ebuild:
861     Initial hardened-sources-2.6.23. If people still have problems w/ bug
862     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
863 phreak 1.190
864     11 Oct 2007; Christian Heim <phreak@gentoo.org>
865     hardened-sources-2.6.20-r10.ebuild:
866     Pulling in yet another new genpatches version, fixing the PWC bug for real.
867 phreak 1.189
868     04 Oct 2007; Christian Heim <phreak@gentoo.org>
869     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
870     Removing old versions.
871 phreak 1.188
872     *hardened-sources-2.6.22-r7 (01 Oct 2007)
873    
874     01 Oct 2007; Christian Heim <phreak@gentoo.org>
875     +hardened-sources-2.6.22-r7.ebuild:
876     Revision bump, pulling in a newer patch. Should fix #194276.
877 phreak 1.187
878     30 Sep 2007; Christian Heim <phreak@gentoo.org>
879     hardened-sources-2.6.20-r10.ebuild:
880     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
881     Mike Doty).
882 phreak 1.186
883     *hardened-sources-2.6.22-r6 (26 Sep 2007)
884    
885     26 Sep 2007; Christian Heim <phreak@gentoo.org>
886     +hardened-sources-2.6.22-r6.ebuild:
887     Revision bump, grabbing up till Linux 2.6.22.9.
888 phreak 1.185
889     24 Sep 2007; Christian Heim <phreak@gentoo.org>
890     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
891     Cleaning up further.
892 phreak 1.184
893     *hardened-sources-2.6.20-r10 (24 Sep 2007)
894    
895     24 Sep 2007; Christian Heim <phreak@gentoo.org>
896     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
897     +hardened-sources-2.6.20-r10.ebuild:
898     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
899     revisions.
900 phreak 1.183
901     *hardened-sources-2.6.22-r5 (22 Sep 2007)
902    
903     22 Sep 2007; Christian Heim <phreak@gentoo.org>
904     +hardened-sources-2.6.22-r5.ebuild:
905     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
906 phreak 1.182
907     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
908     Removing johnm from metadata.xml (see #186467 for reference).
909 phreak 1.181
910     *hardened-sources-2.6.22-r4 (17 Sep 2007)
911    
912     17 Sep 2007; Christian Heim <phreak@gentoo.org>
913     +hardened-sources-2.6.22-r4.ebuild:
914     Revision bump, hopefully fixing all those weird PAX failures.
915 phreak 1.180
916     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
917     Updating the metadata.xml.
918 phreak 1.179
919     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
920     Removing tocharian from metadata due to his retirement (see #71718 for
921     reference).
922 phreak 1.178
923     *hardened-sources-2.6.20-r9 (30 Aug 2007)
924    
925     30 Aug 2007; Christian Heim <phreak@gentoo.org>
926     +hardened-sources-2.6.20-r9.ebuild:
927     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
928 phreak 1.177
929     29 Aug 2007; Christian Heim <phreak@gentoo.org>
930     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
931     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
932     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
933     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
934     -hardened-sources-2.6.22-r2.ebuild:
935     Removing some redundant versions.
936 phreak 1.176
937     *hardened-sources-2.4.35-r1 (29 Aug 2007)
938    
939     29 Aug 2007; Christian Heim <phreak@gentoo.org>
940     +hardened-sources-2.4.35-r1.ebuild:
941     Revision bump, new grsecurity patch.
942 phreak 1.175
943     *hardened-sources-2.6.20-r8 (26 Aug 2007)
944    
945     26 Aug 2007; Christian Heim <phreak@gentoo.org>
946     +hardened-sources-2.6.20-r8.ebuild:
947     Revision bump for Linux 2.6.20.17.
948 phreak 1.174
949     *hardened-sources-2.6.22-r3 (22 Aug 2007)
950    
951     22 Aug 2007; Christian Heim <phreak@gentoo.org>
952     +hardened-sources-2.6.22-r3.ebuild:
953     Revision bump for Linux 2.6.22.4.
954 phreak 1.173
955     16 Aug 2007; Christian Heim <phreak@gentoo.org>
956     hardened-sources-2.6.22-r2.ebuild:
957     Updated patchset, to fix the alignment against 2.6.22.3.
958 phreak 1.172
959     *hardened-sources-2.6.22-r2 (16 Aug 2007)
960    
961     16 Aug 2007; Christian Heim <phreak@gentoo.org>
962     +hardened-sources-2.6.22-r2.ebuild:
963     Revision bump for Linux 2.6.22.3.
964 phreak 1.171
965     *hardened-sources-2.4.35 (16 Aug 2007)
966    
967     16 Aug 2007; Christian Heim <phreak@gentoo.org>
968     +hardened-sources-2.4.35.ebuild:
969     Version bump, initial version for Linux 2.4.35.
970 phreak 1.170
971     *hardened-sources-2.6.21-r4 (16 Aug 2007)
972    
973     16 Aug 2007; Christian Heim <phreak@gentoo.org>
974     +hardened-sources-2.6.21-r4.ebuild:
975     Revision bump for Linux 2.6.21.6.
976 phreak 1.169
977     *hardened-sources-2.6.20-r7 (16 Aug 2007)
978    
979     16 Aug 2007; Christian Heim <phreak@gentoo.org>
980     +hardened-sources-2.6.20-r7.ebuild:
981     Revision bump for Linux 2.6.20.16.
982 phreak 1.168
983     *hardened-sources-2.6.22-r1 (13 Aug 2007)
984    
985     13 Aug 2007; Christian Heim <phreak@gentoo.org>
986     +hardened-sources-2.6.22-r1.ebuild:
987     Yet another revision bump.
988 phreak 1.167
989     *hardened-sources-2.6.22 (10 Aug 2007)
990    
991     10 Aug 2007; Christian Heim <phreak@gentoo.org>
992     +hardened-sources-2.6.22.ebuild:
993     Initial release for 2.6.22. If you are using hardened-sources on a desktop
994     machine (P4 or newer), be aware you might need to disable
995     CONFIG_PAX_PAGEEXEC.
996 phreak 1.166
997     04 Aug 2007; Christian Heim <phreak@gentoo.org>
998     hardened-sources-2.6.20-r6.ebuild:
999     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
1000     2.6.20.15.
1001 phreak 1.165
1002     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1003     hardened-sources-2.6.20-r5.ebuild:
1004     Marking hardened-sources-2.6.20-r5 stable on ppc.
1005 phreak 1.164
1006     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1007     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
1008     Cleanup.
1009 phreak 1.163
1010     *hardened-sources-2.6.20-r6 (08 Jul 2007)
1011    
1012     08 Jul 2007; Christian Heim <phreak@gentoo.org>
1013     +hardened-sources-2.6.20-r6.ebuild:
1014     Revision bump, grabbing yet another stable release.
1015 phreak 1.162
1016     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1017     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
1018     -hardened-sources-2.6.21-r2.ebuild:
1019     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
1020     alpha stable KEYWORD by mistake.
1021 phreak 1.161
1022     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1023     hardened-sources-2.6.20-r5.ebuild:
1024     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
1025     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
1026 phreak 1.160
1027     *hardened-sources-2.6.21-r3 (12 Jun 2007)
1028    
1029     12 Jun 2007; Christian Heim <phreak@gentoo.org>
1030     +hardened-sources-2.6.21-r3.ebuild:
1031     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
1032     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
1033     love.
1034 phreak 1.159
1035     *hardened-sources-2.6.20-r5 (11 Jun 2007)
1036    
1037     11 Jun 2007; Christian Heim <phreak@gentoo.org>
1038     +hardened-sources-2.6.20-r5.ebuild:
1039     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1040     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1041     love.
1042 pappy 1.158
1043     *hardened-sources-2.4.34.5 (11 Jun 2007)
1044    
1045     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1046     +hardened-sources-2.4.34.5.ebuild:
1047     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1048 phreak 1.157
1049     30 May 2007; Christian Heim <phreak@gentoo.org>
1050     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1051     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1052     stale ebuild(s).
1053 phreak 1.156
1054     30 May 2007; Christian Heim <phreak@gentoo.org>
1055     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1056     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1057     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1058     Doing some cleanups, remove stale ebuilds.
1059 phreak 1.155
1060     26 May 2007; Christian Heim <phreak@gentoo.org>
1061     hardened-sources-2.6.21-r2.ebuild:
1062     Fixing the grsecurity patch, had one '};' too much.
1063 phreak 1.154
1064     *hardened-sources-2.6.21-r2 (26 May 2007)
1065    
1066     26 May 2007; Christian Heim <phreak@gentoo.org>
1067     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1068     +hardened-sources-2.6.21-r2.ebuild:
1069     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1070     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1071 phreak 1.153
1072     *hardened-sources-2.6.20-r4 (26 May 2007)
1073    
1074     26 May 2007; Christian Heim <phreak@gentoo.org>
1075     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1076     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1077 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1078 phreak 1.152
1079     15 May 2007; Christian Heim <phreak@gentoo.org>
1080     hardened-sources-2.6.20-r3.ebuild:
1081     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1082     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1083     grsecurity patch fail in that exact same hunk.
1084 phreak 1.151
1085     *hardened-sources-2.6.20-r3 (15 May 2007)
1086    
1087     15 May 2007; Christian Heim <phreak@gentoo.org>
1088     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1089     Revision bump, incorporating Linux 2.6.20.11.
1090    
1091     *hardened-sources-2.6.21-r1 (11 May 2007)
1092    
1093     11 May 2007; Christian Heim <phreak@gentoo.org>
1094     +hardened-sources-2.6.21-r1.ebuild:
1095     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1096     mentioned in #177234.
1097 kevquinn 1.150
1098     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1099     files/digest-hardened-sources-2.6.21, Manifest:
1100     Fix Manifest/digest for linux-2.6.21.tar.bz2
1101 phreak 1.149
1102     06 May 2007; Christian Heim <phreak@gentoo.org>
1103     hardened-sources-2.6.21.ebuild:
1104     Bumping the hardened-patches version, needed for the fix for #177234.
1105 phreak 1.148
1106     *hardened-sources-2.6.21 (02 May 2007)
1107    
1108     02 May 2007; Christian Heim <phreak@gentoo.org>
1109     +hardened-sources-2.6.21.ebuild:
1110     Version bump, Linux 2.6.21-hardened.
1111 phreak 1.147
1112     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1113     hardened-sources-2.6.20-r2.ebuild:
1114     Adding ~ia64 on Ned's request.
1115 phreak 1.146
1116     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1117     hardened-sources-2.6.20-r2.ebuild:
1118     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1119     header line(s).
1120 phreak 1.145
1121     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1122     hardened-sources-2.6.20-r2.ebuild:
1123     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1124 armin76 1.144
1125     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1126    
1127     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1128     +hardened-sources-2.6.20-r2.ebuild:
1129     Version bump, on behalf of phreak
1130 phreak 1.143
1131     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1132    
1133     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1134     +hardened-sources-2.6.20-r1.ebuild:
1135     Revision bump, grabbing a newer grsecurity snapshot.
1136 phreak 1.142
1137     *hardened-sources-2.6.20 (25 Mar 2007)
1138    
1139     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1140     +hardened-sources-2.6.20.ebuild:
1141     Finally a hardened-sources version for 2.6.20; many people have been waiting
1142     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1143     testbox.
1144 chainsaw 1.141
1145     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1146     hardened-sources-2.6.18-r6.ebuild:
1147     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1148 phreak 1.140
1149     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1150    
1151     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1152     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1153     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1154     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1155     supposed to be.
1156 phreak 1.139
1157     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1158     Fixing the Manifest, the previous one was broken (as in still had the
1159     deleted ebuild in it).
1160 phreak 1.138
1161     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1162     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1163     +hardened-sources-2.6.18-r5.ebuild:
1164     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1165     Linux 2.6.18.8. Also cleaning up the older version.
1166    
1167     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1168    
1169     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1170     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1171     +hardened-sources-2.6.18-r5.ebuild:
1172     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1173     Linux 2.6.18.8. Also cleaning up the older version.
1174 phreak 1.137
1175     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1176     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1177     -hardened-sources-2.6.19-r5.ebuild:
1178     Removing some of the old version, that didn't work.
1179 phreak 1.136
1180     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1181    
1182     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1183     +hardened-sources-2.6.19-r6.ebuild:
1184     Revision bump, including a new grsec version fixing #166235.
1185 pappy 1.134
1186     *hardened-sources-2.4.34 (24 Jan 2007)
1187    
1188     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1189 pappy 1.135 Manifest:
1190     updating Manifest with checksums of new tarball and ebuild
1191    
1192     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1193 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1194     I added new hardened sources 2.4 update, this is a critical path
1195     security bugfix - all users of h-s are strongly advised
1196     to update their existing hardened sources to this version.
1197     It contains a fix for a kernel vulnerability that is pertaining
1198     to the PaX changes to virtual memory management, possibly leading
1199     to a local kernel exploit ... see grsecurity.net forums and homepage
1200 phreak 1.133
1201     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1202     files/digest-hardened-sources-2.6.19-r5, Manifest:
1203     Fixing the patch-tarball digest.
1204 phreak 1.132
1205     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1206    
1207     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1208     +hardened-sources-2.6.19-r5.ebuild:
1209     Revision bump, closing the recently discovered PaX expand_stack()
1210     vulnerability.
1211 phreak 1.131
1212     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1213    
1214     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1215     +hardened-sources-2.6.19-r4.ebuild:
1216     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1217     dropping the randomized PID feature.
1218 opfer 1.130
1219     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1220     hardened-sources-2.4.33.4.ebuild:
1221     stable x86, bug #161171
1222 phreak 1.129
1223     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1224    
1225     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1226     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1227     Revision bump for bug #157186 and #158786.
1228 phreak 1.128
1229     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1230    
1231     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1232     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1233     Revision bump for bug #157186.
1234 phreak 1.127
1235     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1236    
1237     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1238     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1239     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1240 phreak 1.126
1241     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1242     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1243     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1244     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1245     hardened-sources-2.6.19-r1.ebuild:
1246     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1247     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1248 pappy 1.125
1249     *hardened-sources-2.4.33.4 (17 Dec 2006)
1250    
1251     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1252     +hardened-sources-2.4.33.4.ebuild:
1253     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1254     and quilting
1255 phreak 1.124
1256     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1257    
1258     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1259     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1260     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1261     for reporting).
1262 phreak 1.123
1263     *hardened-sources-2.6.19 (13 Dec 2006)
1264    
1265     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1266     +hardened-sources-2.6.19.ebuild:
1267     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1268     Brad for providing that prompt update.
1269 phreak 1.122
1270     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1271    
1272     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1273     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1274     +hardened-sources-2.6.18-r3.ebuild:
1275     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1276     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1277 phreak 1.121
1278     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1279     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1280 nixnut 1.120
1281     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1282     Stable on ppc wrt bug 157356
1283 opfer 1.119
1284     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1285     hardened-sources-2.6.18.ebuild:
1286     stable x86, bug #157356
1287 phreak 1.118
1288     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1289    
1290     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1291     +hardened-sources-2.6.18-r2.ebuild:
1292     Revision bump, including 2.6.18.5 (via genpatches) and
1293     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1294     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1295     redesign.
1296 phreak 1.117
1297     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1298     hardened-sources-2.6.18.ebuild:
1299     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1300     of Mike Doty).
1301 phreak 1.116
1302     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1303    
1304     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1305     +hardened-sources-2.6.18-r1.ebuild:
1306     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1307 phreak 1.115
1308     *hardened-sources-2.6.18 (11 Nov 2006)
1309    
1310     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1311     +hardened-sources-2.6.18.ebuild:
1312     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1313 solar 1.114
1314     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1315     - mark amd64 stable also. bug #151877
1316 solar 1.113
1317     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1318     - mark 2.6.17-r1 stable
1319 phreak 1.112
1320     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1321     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1322     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1323 phreak 1.111
1324     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1325    
1326     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1327     +hardened-sources-2.6.17-r1.ebuild:
1328     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1329     grsecurity patch.
1330 phreak 1.110
1331     *hardened-sources-2.6.17 (17 Aug 2006)
1332    
1333     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1334     +hardened-sources-2.6.17.ebuild:
1335     Bumping the hardened-sources-2.6 series to 2.6.17, using
1336     genpatches-2.6.17-6.base.
1337 solar 1.109
1338     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1339     - stable on x86 and amd64
1340 solar 1.108
1341     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1342    
1343     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1344     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1345     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1346     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1347     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1348     crusty ebuilds
1349 johnm 1.107
1350     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1351     hardened-sources-2.6.16-r10.ebuild:
1352     marking stable on x86 and amd64
1353 solar 1.106
1354     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1355     - 2.4.32-r6 stable on x86. RSBAC state unknown
1356 kang 1.105
1357     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1358    
1359     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1360     +hardened-sources-2.4.32-r7.ebuild:
1361     Bump PaX for RSBAC to test-17
1362 johnm 1.104
1363     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1364    
1365     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1366     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1367     hardened-sources-2.6.16 bump to latest -base.
1368 solar 1.103
1369     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1370    
1371     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1372     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1373     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1374     sysctl controlable resource logging
1375 johnm 1.102
1376     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1377    
1378     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1379     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1380     push new 2.6.16 release in preparation for stable
1381 solar 1.101
1382     22 May 2006; <solar@gentoo.org> :
1383     - redigest bug 134002
1384 kang 1.100
1385     *hardened-sources-2.4.32-r5 (16 May 2006)
1386    
1387     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1388     +hardened-sources-2.4.32-r5.ebuild:
1389     Fixes rsbac common patching (new patch in new -r5 patchset)
1390 solar 1.99
1391     *hardened-sources-2.4.32-r4 (13 May 2006)
1392    
1393     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1394     +hardened-sources-2.4.32-r4.ebuild:
1395     - security bumps
1396 johnm 1.98
1397     *hardened-sources-2.6.16-r6 (03 May 2006)
1398    
1399     03 May 2006; John Mylchreest <johnm@gentoo.org>
1400     +hardened-sources-2.6.16-r6.ebuild:
1401     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1402 johnm 1.97
1403     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1404     hardened-sources-2.6.14-r8.ebuild:
1405     fix x86_64 build problem, this will delay the digest issue again for a short
1406     while but it will sort itself out
1407 johnm 1.96
1408     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1409     hardened-sources-2.6.14-r8.ebuild:
1410     bump hardened patchset
1411 antarus 1.94
1412     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1413     files/digest-hardened-sources-2.4.32-r2,
1414     files/digest-hardened-sources-2.4.32-r3,
1415     files/digest-hardened-sources-2.6.14-r8, Manifest:
1416     Fixing duff SHA256 digests: Bug # 131293
1417 johnm 1.93
1418 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1419    
1420     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1421     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1422     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1423     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1424     cleanup of old uneccessary sources
1425    
1426 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1427     fix digest
1428 johnm 1.92
1429     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1430    
1431     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1432     +hardened-sources-2.6.14-r8.ebuild:
1433     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1434 johnm 1.91
1435     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1436     Turning on gpg-signing again, and recomitting
1437 johnm 1.90
1438     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1439    
1440     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1441     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1442     +hardened-sources-2.6.16-r4.ebuild:
1443     Fix numerous security vulns
1444 solar 1.89
1445     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1446    
1447     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1448     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1449     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1450     - security bump for bug #112791. Removed old ebuilds
1451 johnm 1.88
1452     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1453    
1454     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1455     +hardened-sources-2.6.16-r3.ebuild:
1456     Removing silly localversion which I missed
1457 johnm 1.87
1458     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1459    
1460     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1461     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1462     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1463 johnm 1.86
1464     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1465    
1466     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1467     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1468     +hardened-sources-2.6.16-r2.ebuild:
1469     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1470     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1471 johnm 1.85
1472     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1473    
1474     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1475     +hardened-sources-2.6.16-r1.ebuild:
1476     Bumping to include ppc build fix and 2.6.16.3
1477 tsunam 1.84
1478     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1479     hardened-sources-2.6.14-r6.ebuild:
1480     Stable on x86; bug #127718
1481 johnm 1.83
1482     *hardened-sources-2.6.16 (31 Mar 2006)
1483    
1484     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1485     +hardened-sources-2.6.16.ebuild:
1486     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1487     2.6.16.1
1488 cryos 1.82
1489     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1490     hardened-sources-2.6.14-r6.ebuild:
1491     Stable on amd64, bug 127718.
1492 nixnut 1.81
1493     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1494     Stable on ppc. Bug #127718
1495 johnm 1.80
1496     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1497     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1498     -hardened-sources-2.6.14-r4.ebuild:
1499     Cleanup.
1500 johnm 1.79
1501     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1502    
1503     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1504     +hardened-sources-2.6.14-r6.ebuild:
1505     Fixes grsec policy recreation bug and adds a
1506     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1507 solar 1.78
1508     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1509     - stable on x86
1510 hansmi 1.77
1511     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1512     hardened-sources-2.6.14-r5.ebuild:
1513     Stable on ppc.
1514 johnm 1.76
1515     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1516    
1517     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1518     +hardened-sources-2.6.14-r5.ebuild:
1519     fixing every known exploit
1520 solar 1.75
1521     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1522    
1523     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1524     +hardened-sources-2.4.32-r2.ebuild:
1525     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1526 solar 1.74
1527     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1528    
1529     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1530     - version bump for new genpatches which fix up a few sec holes
1531 solar 1.73
1532     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1533    
1534     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1535     - revision bump to add misc vital linux kernel security patches.
1536 johnm 1.72
1537     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1538    
1539     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1540     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1541     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1542 johnm 1.71
1543     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1544     hardened-sources-2.6.14-r2.ebuild:
1545     making x86 & amd64 stable following testing.
1546 johnm 1.70
1547     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1548    
1549     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1550     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1551     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1552     network hooks.
1553 johnm 1.69
1554     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1555     hardened-sources-2.6.14-r1.ebuild:
1556     bumping to stable early for sec fix on x86 & amd64
1557 johnm 1.68
1558     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1559    
1560     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1561     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1562     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1563 solar 1.67
1564     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1565     - stable on x86 security bug #114227 CAN-2005-3257
1566 kang 1.66
1567     *hardened-sources-2.4.32 (19 Nov 2005)
1568    
1569     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1570     +hardened-sources-2.4.32.ebuild:
1571     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1572     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1573     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1574     rsbac >> /etc/portage/package.use)
1575 johnm 1.65
1576     *hardened-sources-2.6.14 (14 Nov 2005)
1577    
1578     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1579     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1580     Bumping 2.6 series to 2.6.14.2
1581 johnm 1.64
1582     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1583    
1584     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1585     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1586     +hardened-sources-2.6.13-r2.ebuild:
1587     Fixes minor build error in ppc.
1588 johnm 1.63
1589     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1590    
1591     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1592     +hardened-sources-2.6.13-r1.ebuild:
1593     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1594     2.6.13.4, fixes some major amd64 stability problems.
1595 johnm 1.62
1596     *hardened-sources-2.6.13 (16 Sep 2005)
1597    
1598     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1599     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1600     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1601     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1602     users should test this thoroughly.
1603 solar 1.61
1604     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1605     - stable on x86
1606 johnm 1.60
1607     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1608    
1609     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1610     +hardened-sources-2.6.11-r15.ebuild:
1611     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1612     grsec redefining curr_ip struct.
1613 solar 1.59
1614     *hardened-sources-2.4.31 (20 Jun 2005)
1615    
1616     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1617     initial import of 2.4.31 tree
1618 johnm 1.58
1619     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1620    
1621     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1622     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1623     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1624     naming scheme to abide by genpatches
1625 johnm 1.57
1626     *hardened-sources-2.6.11-r13 (18 May 2005)
1627    
1628     18 May 2005; John Mylchreest <johnm@gentoo.org>
1629     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1630     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1631     target. sorry about that. Fixes bug #93022
1632 johnm 1.56
1633     *hardened-sources-2.6.11-r12 (17 May 2005)
1634    
1635     17 May 2005; John Mylchreest <johnm@gentoo.org>
1636     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1637     +hardened-sources-2.6.11-r12.ebuild:
1638     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1639     merges in genpatches-base
1640 johnm 1.55
1641     *hardened-sources-2.6.11-r12 (17 May 2005)
1642    
1643     17 May 2005; John Mylchreest <johnm@gentoo.org>
1644     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1645     +hardened-sources-2.6.11-r12.ebuild:
1646     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1647     merges in genpatches-base
1648 solar 1.54
1649     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1650     -files/2.4.27-cmdline-race.patch,
1651     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1652     -files/2.4.28-grsec-binfmt_a.out.patch,
1653     -files/2.4.28-grsec-cmdline-race.patch,
1654     -files/2.4.28-selinux-binfmt_a.out.patch,
1655     -files/2.4.28-selinux-cmdline-race.patch,
1656     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1657     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1658     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1659     cleanup..
1660 solar 1.53
1661     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1662    
1663     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1664     - disable aout by default
1665 solar 1.52
1666     *hardened-sources-2.4.30 (18 Apr 2005)
1667    
1668     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1669     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1670     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1671     use
1672 tocharian 1.50
1673 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1674    
1675     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1676     +hardened-sources-2.4.29.ebuild:
1677     New hardened-patches-2.4-29.0 patchball.
1678     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1679    
1680     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1681    
1682     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1683     +hardened-sources-2.4.28-r5.ebuild:
1684     Added a fix for a PaX vulnerability.
1685    
1686     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1687 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1688     Stable on x86
1689 solar 1.49
1690     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1691     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1692     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1693     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1694     - fixed/added RDEPEND= in all kernel-2 ebuilds
1695 tocharian 1.48
1696     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1697    
1698     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1699     +hardened-sources-2.4.28-r4.ebuild:
1700     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1701     backport of neighbour hash updates.
1702 tocharian 1.47
1703     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1704     hardened-sources-2.4.28-r3.ebuild:
1705     Stable on x86
1706 tseng 1.46
1707     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1708    
1709     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1710     +hardened-sources-2.6.10-r3.ebuild:
1711     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1712     in 2005.0
1713 tocharian 1.45
1714     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1715     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1716     hardened-sources-2.4.28-r2.ebuild:
1717     Mark stable on x86
1718 tocharian 1.44
1719     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1720    
1721     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1722     +hardened-sources-2.4.28-r3.ebuild:
1723     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1724 tocharian 1.43
1725     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1726     hardened-sources-2.4.28.ebuild:
1727     Mark stable on x86.
1728 tocharian 1.42
1729     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1730    
1731     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1732     +hardened-sources-2.4.28-r2.ebuild:
1733     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1734     Mazinger for grsecurity patches as well.
1735 plasmaroo 1.41
1736     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1737    
1738     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1739     Security bump. Thank tocharian for rolling a new patchset...
1740 solar 1.40
1741     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1742     +files/2.4.28-grsec-cmdline-race.patch,
1743     +files/2.4.28-selinux-binfmt_a.out.patch,
1744     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1745     - Round up remaining security patches that appear to be missing in 2.4.28. -
1746     PaX standalone updated to current. hgpv=28.1
1747 solar 1.39
1748     *hardened-sources-2.4.28 (28 Nov 2004)
1749    
1750     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1751     security bump. Thank tocharian for rolling a new patchset
1752 scox 1.31
1753 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1754    
1755     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1756     +hardened-sources-2.4.27-r3.ebuild:
1757     Applies the new 2.4-27.2 patchball which updates
1758     GRSecurity to the 2.0.1 version.
1759    
1760 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1761    
1762     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1763     +hardened-sources-2.4.27-r2.ebuild:
1764     Version bump.
1765     This version uses the new 2.4-27.1 patchball which updates
1766     both the SELinux PaX hooks patch and the SELinux headers.
1767    
1768 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1769    
1770     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1771     +hardened-sources-2.4.27-r1.ebuild,
1772     -hardened-sources-2.4.27.ebuild,
1773     +files/2.4.27-cmdline-race.patch:
1774     Version bump, fix for cmdline race. See bug #59905.
1775    
1776     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1777    
1778     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1779     +hardened-sources-2.4.26-r6.ebuild,
1780     -hardened-sources-2.4.26-r5.ebuild,
1781     -hardened-sources-2.4.26-r4.ebuild,
1782     +files/2.4.26-cmdline-race.patch:
1783     Version bump, fix for cmdline race. See bug #59905.
1784    
1785 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1786    
1787     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1788     +hardened-sources-2.4.27.ebuild,
1789     +files/2.4.27-CAN-2004-0394.patch:
1790     Ported the patchball to the 2.4.27 kernel version.
1791    
1792 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1793    
1794     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1795     +hardened-sources-2.4.26-r5.ebuild:
1796 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1797 scox 1.34 It adds the following features:
1798     - Squashfs
1799     - Ebtables
1800     - Netdev random (core+drivers)
1801     - Watchdog Timer (WDT) fix.
1802    
1803 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1804    
1805     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1806     +hardened-sources-2.4.26-r4.ebuild,
1807     +files/2.4.26-CAN-2004-0415.patch,
1808     -hardened-sources-2.4.26-3:
1809     Version bump, fix for CAN 0415, see bug #59378.
1810    
1811 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1812    
1813     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1814     +hardened-sources-2.4.26-r3.ebuild,
1815     +files/2.4.26-CAN-2004-0497.patch,
1816     -hardened-sources-2.4.26-r2.ebuild:
1817     Version bump, fixed CAN 0497, see bug #56171.
1818    
1819 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1820    
1821     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1822 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1823 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1824     +files/2.4.26-CAN-2004-0535.patch,
1825     -hardened-sources-2.4.26-r1.ebuild:
1826     Fixes for both CAN 0495 and 0535, see bug #54976
1827 pvdabeel 1.27
1828 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1829     hardened-sources-2.4.26-r1.ebuild:
1830     QA - fix use invocation
1831 scox 1.28
1832     *hardened-sources-2.4.26-r1 (22 June 2004)
1833    
1834     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1835     +hardened-sources-2.4.26-r1.ebuild,
1836     +files/2.4.26-CAN-2004-0394.patch,
1837     +files/2.4.26-signal-race.patch,
1838     -hardened-sources-2.4.26.ebuild,
1839     -hardened-sources-2.4.24-r3.ebuild:
1840     Version bump for the CAN-2004-0394 issue and bug #53804
1841     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1842    
1843    
1844 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1845     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1846     Masked hardened-sources-2.4.26.ebuild broken for ppc
1847    
1848     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1849     hardened-sources-2.4.24-r3.ebuild:
1850     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1851 plasmaroo 1.25
1852 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1853    
1854     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1855     +hardened-sources-2.4.26.ebuild:
1856     Updated hardened-sources for the 2.4.26 kernel
1857     Removed broken components, updated almost everything.
1858    
1859 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1860    
1861     17 Apr 2004; <plasmaroo@gentoo.org>
1862     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1863     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1864     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1865     +hardened-sources-2.4.24-r3.ebuild:
1866     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1867     vulnerabilities. Old revisions removed.
1868 plasmaroo 1.24
1869     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1870    
1871     15 Apr 2004; <plasmaroo@gentoo.org>
1872     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1873     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1874     Version bump for the CAN-2004-0109 issue; bug #47881.
1875 aliz 1.23
1876     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1877     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1878     Add eutils to inherit.
1879 plasmaroo 1.22
1880     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1881    
1882     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1883     files/hardened-sources-2.4.24.munmap.patch:
1884     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1885 scox 1.19
1886 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1887 scox 1.26
1888 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1889     hardened-sources-2.4.24.ebuild:
1890     Version bump, updated most of the components.
1891     This release includes the following:
1892    
1893     - Hardened security
1894     - Netfilter patch-o-matic 20031219
1895     - FreeSWAN 2.04 & x509 1.4.8
1896     - EVMS 2.2.2
1897     - XFS 1.3.1
1898     - cryptoloop jari
1899     - grsecurity 2.0-rc4
1900     - SELinux
1901     - PaX 200402060000
1902     - PaX Obscurity 200308302223
1903     - Others...
1904    
1905     Neither -ck nor systrace are included anymore.
1906    
1907 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1908    
1909     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1910     hardened-sources-2.4.22-r2.ebuild:
1911 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1912 scox 1.19
1913     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1914 iggy 1.17
1915     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1916 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1917 iggy 1.16
1918     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1919 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1920     Version bump for the 'do_brk' vulnerability.
1921 iggy 1.15
1922     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1923     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1924     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1925     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1926 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1927 frogger 1.14
1928     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1929     hardened-sources-2.4.22.ebuild:
1930 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1931     components. These are no longer handled in the kernel
1932     so this code was not necessary.
1933 frogger 1.13
1934     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1935     New 2.4.22 based hardened-sources thanks to
1936     Phil West <p.west@computer.org>.
1937    
1938     These sources include:
1939 plasmaroo 1.18 - New SELinux API
1940     - Updated CK-base
1941     - Updated GRSec
1942     - Systrace
1943     - SuperFreeS/WAN 1.99.8
1944     - Propolice kernel build support
1945     - EVMS
1946     - Other various security related patches
1947 frogger 1.11
1948 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1949    
1950     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1951     Updated hardened-sources based on the 2.4.21 Linux kernel.
1952     This includes updates to most major components such as:
1953 plasmaroo 1.18 - ck-base-0306300059
1954     - selinux-2.4-2003071106
1955     - grsecurity-2.0-rc1
1956     - Updated IPTables patch-o-matic
1957     - Updated SuperFreeS/WAN
1958    
1959 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1960     updated patch set ready for the 2.4.21 based kernel.
1961    
1962 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1963     Initial import of hardened-sources-2.4.20-r4. This revision
1964     includes only a few changes, but one of these is an important
1965     security fix. It is recommended all users of hardened-sources
1966     upgrade to this release.
1967 plasmaroo 1.18
1968 frogger 1.11 - ioperm bug fix
1969     - fixed compilation failure when building without GRSec
1970 plasmaroo 1.18
1971 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1972     due to time constraints, but is planned for inclusion in the near
1973     future.
1974 msterret 1.10
1975     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1976    
1977     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1978     hardened-sources-2.4.20-r3.ebuild:
1979 plasmaroo 1.18 Add Header...
1980 frogger 1.9
1981     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1982     hardened-sources-2.4.20-r3.ebuild:
1983     Removed warnings from ebuild. This kernel should be safe to
1984     use at this point.
1985 frogger 1.8
1986     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1987    
1988     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1989     hardened-sources-2.4.20-r3.ebuild:
1990     New revision. Includes the following changes over -r2:
1991 plasmaroo 1.18
1992 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1993     - Super FreeS/WAN 1.99.7rc2
1994     - PaX for the LSM/SELinux branch
1995     - GRSecurity 2.0-pre4 (role based access control)
1996     - Systrace 1.3
1997     - EXT3 fixes
1998     - EVMS 2.0.1
1999     - GCC 3.1+ compile optimizations
2000     - ProPolice kernel build support
2001     - Hashing table security fixes
2002 frogger 1.3
2003     *hardened-sources-2.4.20-r1 (09 Apr 2003)
2004 frogger 1.7
2005     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
2006     Initial import of hardened-sources-r2. This new
2007     ebuild includes many new performance and security
2008     related patches. As in -r1, it will patch in
2009     LSM/SELinux if "selinux" is in USE, otherwise it
2010     will patch in GRSecurity. The following patches
2011     are included in this revision:
2012 plasmaroo 1.18
2013 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
2014     (pulled from the base CK patch)
2015     - ptrace exploit patch for the LSM kernel
2016     (the GRSec patch already fixes this)
2017     - LSM 2.4-2003040709
2018     - SELinux 2.4-2003040709
2019     - Systrace v1.2
2020     - IPTables patch-o-matic base patches - 20030107
2021     - CryptoAPI 2.4.20.1 w/ loop-jari patch
2022     - Super FreeS/WAN 1.99.6.1
2023     - GRSecurity 1.9.9g
2024     - MPPE
2025     - EXT3 data journal fix
2026     - CIPE 1.5.4
2027 frogger 1.6
2028     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2029     hardened-sources-2.4.20-r1.ebuild, manifest:
2030 plasmaroo 1.18 Updated to install flask components correctly for selinux.
2031 frogger 1.5
2032     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2033     hardened-sources-2.4.20-r1.ebuild:
2034     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2035     is patched in instead. Ptrace patches for selinux have also been added. In
2036     either case, systrace support will be patched in as well.
2037 frogger 1.3
2038     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2039     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2040 plasmaroo 1.18 Revision bump for new sources.
2041 frogger 1.4
2042 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2043 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
2044 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2045 method 1.1
2046 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
2047    
2048 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2049     hardened-sources-2.4.20.ebuild:
2050 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20