/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.348 - (hide annotations) (download)
Sun Oct 24 10:16:07 2010 UTC (3 years, 10 months ago) by blueness
Branch: MAIN
Changes since 1.347: +10 -1 lines
Removing vulnerable kernels where possible, bug #341801

(Portage version: 2.1.9.16/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.348 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.347 2010/10/21 21:34:19 blueness Exp $
4    
5     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
6     -hardened-sources-2.6.32-r16.ebuild, -hardened-sources-2.6.32-r17.ebuild,
7     -hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.32-r19.ebuild,
8     -hardened-sources-2.6.32-r20.ebuild, -hardened-sources-2.6.32-r21.ebuild,
9     -hardened-sources-2.6.34-r4.ebuild, -hardened-sources-2.6.34-r5.ebuild,
10     -hardened-sources-2.6.35.ebuild, -hardened-sources-2.6.35-r1.ebuild,
11     -hardened-sources-2.6.35-r2.ebuild, -hardened-sources-2.6.35-r3.ebuild:
12     Removing vulnerable kernels where possible, bug #341801
13 blueness 1.347
14     21 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
15     hardened-sources-2.6.32-r22.ebuild:
16     x86 stable, bug #341915
17 blueness 1.346
18     20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
19     hardened-sources-2.6.32-r22.ebuild:
20     amd64 stable, bug #341915
21 blueness 1.345
22     *hardened-sources-2.6.35-r4 (20 Oct 2010)
23     *hardened-sources-2.6.32-r22 (20 Oct 2010)
24    
25     20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
26     +hardened-sources-2.6.32-r22.ebuild, +hardened-sources-2.6.35-r4.ebuild:
27     hardened-sources-2.6.32-r22 based on 2.6.32.24 + genpatches +
28     grsec-2.2.0-2.6.32.24-201010191911
29     hardened-sources-2.6.35-r4 based on 2.6.35.7 + genpatches +
30     grsec-2.2.0-2.6.35.7-201010191911
31     Addresses security bug #341801
32 blueness 1.344
33     *hardened-sources-2.6.35-r3 (16 Oct 2010)
34     *hardened-sources-2.6.32-r21 (16 Oct 2010)
35    
36     16 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
37     +hardened-sources-2.6.32-r21.ebuild, +hardened-sources-2.6.35-r3.ebuild:
38     hardened-sources-2.6.32-r21 based on 2.6.32.24 + genpatches +
39     grsec-2.2.0-2.6.32.24-201010121028
40     hardened-sources-2.6.35-r3 based on 2.6.35.7 + genpatches +
41     grsec-2.2.0-2.6.35.7-201010121028
42 blueness 1.343
43     *hardened-sources-2.6.35-r2 (07 Oct 2010)
44    
45     07 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
46     +hardened-sources-2.6.35-r2.ebuild:
47     hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches +
48     grsec-2.2.0-2.6.35.7-201010021153
49 blueness 1.342
50     *hardened-sources-2.6.32-r20 (06 Oct 2010)
51    
52     06 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
53     +hardened-sources-2.6.32-r20.ebuild:
54     hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches +
55     grsec-2.2.0-2.6.32.24-201010021153
56 blueness 1.341
57     *hardened-sources-2.6.35-r1 (30 Sep 2010)
58     *hardened-sources-2.6.32-r19 (30 Sep 2010)
59    
60     30 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
61     +hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild:
62     hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches +
63     grsec-2.2.0-2.6.32.23-201009272133
64     hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches +
65     grsec-2.2.0-2.6.35.6-201009281623
66 blueness 1.340
67     *hardened-sources-2.6.35 (28 Sep 2010)
68    
69     28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
70     +hardened-sources-2.6.35.ebuild:
71     hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
72 blueness 1.339
73     21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
74     -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
75     hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
76     -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
77     Fast track stabilization. See bug #338273. Removed older versions.
78 blueness 1.338
79     *hardened-sources-2.6.34-r6 (17 Sep 2010)
80     *hardened-sources-2.6.32-r18 (17 Sep 2010)
81    
82     17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
83     +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
84     hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
85     grsec-2.2.0-2.6.32.21-201009162222
86     hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
87     grsec-2.2.0-2.6.34.7-201009162222
88     Addresses IA32 syscall exploit.
89 blueness 1.337
90     *hardened-sources-2.6.34-r5 (15 Sep 2010)
91     *hardened-sources-2.6.32-r17 (15 Sep 2010)
92    
93     15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
94     +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
95     hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
96     grsec-2.2.0-2.6.32.21-201009130811
97     hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
98     grsec-2.2.0-2.6.34.6-201009130754
99 blueness 1.336
100     *hardened-sources-2.6.34-r4 (07 Sep 2010)
101     *hardened-sources-2.6.32-r16 (07 Sep 2010)
102    
103     07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
104     +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
105     hardened-sources-2.6.32-r16 based on 2.6.32.21 +
106     grsec-2.2.0-2.6.32.21-201009032133
107     hardened-sources-2.6.34-r4 based on 2.6.34.6 +
108     grsec-2.2.0-2.6.34.6-201009041352
109 blueness 1.335
110     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
111     hardened-sources-2.6.32-r15 based on 2.6.32.21 +
112     grsec-2.2.0-2.6.32.21-201008292122
113     hardened-sources-2.6.34-r3 based on 2.6.34.6 +
114     grsec-2.2.0-2.6.34.6-201008292122
115 blueness 1.334
116     *hardened-sources-2.6.34-r3 (02 Sep 2010)
117     *hardened-sources-2.6.32-r15 (02 Sep 2010)
118    
119     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
120     -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
121     -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
122     +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
123     +hardened-sources-2.6.34-r3.ebuild:
124     Bumps and remove deprecated versions
125 blueness 1.333
126     *hardened-sources-2.6.34-r2 (21 Aug 2010)
127    
128     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
129     +hardened-sources-2.6.34-r2.ebuild:
130     Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
131 blueness 1.332
132     *hardened-sources-2.6.32-r14 (21 Aug 2010)
133    
134     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
135     +hardened-sources-2.6.32-r14.ebuild:
136     Based on vanilla 2.6.32.19 + genpatches +
137     grsec-2.2.0-2.6.32.19-201008131840
138 blueness 1.331
139     *hardened-sources-2.6.32-r13 (14 Aug 2010)
140    
141     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
142     +hardened-sources-2.6.32-r13.ebuild:
143     Based on vanilla 2.6.32.18 + genpatches +
144     grsecurity-2.2.0-2.6.32.18-201008112233
145 robbat2 1.330
146     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
147     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
148 blueness 1.329
149     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
150     hardened-sources-2.6.32-r9.ebuild:
151     Stable ppc64. Bug #326885
152 blueness 1.328
153     *hardened-sources-2.6.32-r12 (24 Jul 2010)
154    
155     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
156     +hardened-sources-2.6.32-r12.ebuild:
157     Parallels fix incorporated into hardened-sources-2.6.34-r1
158 blueness 1.327
159     *hardened-sources-2.6.34-r1 (24 Jul 2010)
160    
161     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
162     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
163     Fixes bug #328275
164 chainsaw 1.326
165     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
166     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
167     on gentoo-dev.
168 jer 1.325
169     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
170     Correct mail address.
171 blueness 1.324
172     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
173     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
174     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
175     -hardened-sources-2.6.32-r8.ebuild:
176     Removing outdated releases
177 fauli 1.323
178     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
179     hardened-sources-2.6.32-r9.ebuild:
180     stable x86, bug 326885
181 blueness 1.322
182     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
183     -hardened-sources-2.6.32-r7.ebuild:
184     Removed for security. Bug #325573
185 blueness 1.321
186     *hardened-sources-2.6.34 (13 Jul 2010)
187    
188     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
189     +hardened-sources-2.6.34.ebuild:
190     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
191 blueness 1.320
192     *hardened-sources-2.6.32-r11 (13 Jul 2010)
193    
194     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
195     +hardened-sources-2.6.32-r11.ebuild:
196     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
197 chainsaw 1.319
198     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
199     Marked stable on AMD64 as requested by Anthony G. Basile
200     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
201     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
202 blueness 1.318
203     *hardened-sources-2.6.32-r10 (30 Jun 2010)
204    
205     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
206     +hardened-sources-2.6.32-r10.ebuild:
207     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
208 blueness 1.317
209     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
210     Added myself to the metadata.xml
211 chainsaw 1.316
212     *hardened-sources-2.6.32-r9 (11 Jun 2010)
213    
214     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
215     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
216 chainsaw 1.315
217     *hardened-sources-2.6.32-r8 (01 Jun 2010)
218    
219     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
220     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
221 chainsaw 1.314
222     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
223     Update SRC_URI to point to mirror network now that the distfile has
224     propagated.
225 chainsaw 1.313
226     *hardened-sources-2.6.32-r7 (26 May 2010)
227    
228     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
229     metadata.xml:
230     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
231     Summers.
232 robbat2 1.312
233     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
234     Update Manifest for deblob support in kernel-2 eclass.
235 nixnut 1.311
236     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
237     ppc stable
238 gengor 1.310
239     29 May 2009; Gordon Malm <gengor@gentoo.org>
240     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
241     Stable amd64/x86 and remove old.
242 gengor 1.309
243     *hardened-sources-2.6.29 (25 May 2009)
244    
245     25 May 2009; Gordon Malm <gengor@gentoo.org>
246     +hardened-sources-2.6.29.ebuild:
247     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
248     release candidates.
249 gengor 1.308
250     *hardened-sources-2.6.28-r9 (25 May 2009)
251    
252     25 May 2009; Gordon Malm <gengor@gentoo.org>
253     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
254     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
255 gengor 1.307
256     *hardened-sources-2.6.28-r8 (18 May 2009)
257    
258     18 May 2009; Gordon Malm <gengor@gentoo.org>
259     +hardened-sources-2.6.28-r8.ebuild:
260     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
261     and #262862 among others.
262 gengor 1.306
263     01 May 2009; Gordon Malm <gengor@gentoo.org>
264     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
265     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
266     Remove unnecessary mirror://gentoo from SRC_URI.
267 nixnut 1.305
268     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
269     ppc stable
270 gengor 1.304
271     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
272     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
273     Stable amd64/x86 and remove old.
274 gengor 1.303
275     *hardened-sources-2.6.28-r7 (27 Mar 2009)
276    
277     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
278     +hardened-sources-2.6.28-r7.ebuild:
279     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
280 gengor 1.302
281     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
282     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
283     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
284     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
285     Stable amd64/x86 and remove old versions.
286 nixnut 1.301
287     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
288     ppc stable
289 gengor 1.300
290     *hardened-sources-2.6.28-r6 (21 Mar 2009)
291    
292     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
293     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
294     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
295 gengor 1.299
296     *hardened-sources-2.6.28-r5 (20 Mar 2009)
297    
298     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
299     +hardened-sources-2.6.28-r5.ebuild:
300     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
301 gengor 1.298
302     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
303     hardened-sources-2.6.28-r4.ebuild:
304     Stable amd64/x86.
305 gengor 1.297
306     *hardened-sources-2.6.28-r4 (18 Mar 2009)
307    
308     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
309     +hardened-sources-2.6.28-r4.ebuild:
310     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
311     compilation with CPA_DEBUG and more.
312 gengor 1.296
313     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
314     hardened-sources-2.6.28-r3.ebuild:
315     Quick stable amd64/x86.
316 gengor 1.295
317     *hardened-sources-2.6.28-r3 (15 Mar 2009)
318    
319     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
320     +hardened-sources-2.6.28-r3.ebuild:
321     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
322 nixnut 1.294
323     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
324     ppc stable
325 gengor 1.293
326     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
327     hardened-sources-2.6.28-r2.ebuild:
328     Stable amd64/x86.
329 gengor 1.292
330     *hardened-sources-2.6.28-r2 (11 Mar 2009)
331    
332     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
333     +hardened-sources-2.6.28-r2.ebuild:
334     Version bump bringing in latest grsecurity patch.
335 gengor 1.291
336     *hardened-sources-2.6.28-r1 (09 Mar 2009)
337    
338     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
339     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
340     Version bump and remove old.
341 nixnut 1.290
342     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
343     ppc stable
344 gengor 1.289
345     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
346     hardened-sources-2.6.27-r8.ebuild:
347     Remove amd64 testing keyword, bug 256226.
348 gengor 1.288
349     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
350     hardened-sources-2.6.27-r8.ebuild:
351     Revert amd64 stable, bug #256226.
352 gengor 1.287
353     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
354     hardened-sources-2.6.27-r8.ebuild:
355     Stable on amd64/x86.
356 gengor 1.286
357     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
358     -hardened-sources-2.6.27-r6.ebuild:
359     Remove old 2.6.27 release.
360 gengor 1.285
361     *hardened-sources-2.6.27-r8 (24 Feb 2009)
362    
363     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
364     +hardened-sources-2.6.27-r8.ebuild:
365     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
366     and probably more.
367 nixnut 1.284
368     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
369     ppc stable
370 gengor 1.283
371     *hardened-sources-2.6.28 (25 Jan 2009)
372    
373     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
374     +hardened-sources-2.6.28.ebuild:
375     Initial 2.6.28 release.
376 gengor 1.282
377     *hardened-sources-2.6.27-r7 (25 Jan 2009)
378    
379     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
380     +hardened-sources-2.6.27-r7.ebuild:
381     Bump to Linux 2.6.27.13.
382 gengor 1.281
383     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
384     hardened-sources-2.6.26-r9.ebuild:
385     Stable amd64/x86.
386 gengor 1.280
387     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
388     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
389     -hardened-sources-2.6.27-r5.ebuild:
390     Remove problem versions.
391 gengor 1.279
392     *hardened-sources-2.6.27-r6 (24 Jan 2009)
393    
394     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
395     +hardened-sources-2.6.27-r6.ebuild:
396     Revert PaX test29 to test30 changes. Fixes bug 256226.
397 gengor 1.277
398     *hardened-sources-2.6.27-r5 (24 Jan 2009)
399    
400     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
401     +hardened-sources-2.6.27-r5.ebuild:
402 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
403 gengor 1.277 254843.
404 gengor 1.276
405     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
406     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
407     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
408     Remove problem versions.
409 nixnut 1.275
410     23 Jan 2009; nixnut <nixnut@gentoo.org>
411     hardened-sources-2.6.25-r13.ebuild:
412     ppc stable
413 gengor 1.274
414     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
415     hardened-sources-2.6.25-r13.ebuild:
416     Fasttrack stable amd64/x86.
417 gengor 1.273
418     *hardened-sources-2.6.26-r9 (21 Jan 2009)
419    
420     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
421     +hardened-sources-2.6.26-r9.ebuild:
422 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
423 gengor 1.272
424     *hardened-sources-2.6.25-r13 (20 Jan 2009)
425    
426     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
427     +hardened-sources-2.6.25-r13.ebuild:
428 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
429 nixnut 1.271
430     20 Jan 2009; nixnut <nixnut@gentoo.org>
431     hardened-sources-2.6.25-r12.ebuild:
432     ppc stable
433 gengor 1.270
434     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
435     hardened-sources-2.6.25-r12.ebuild:
436     Stable amd64/x86.
437 gengor 1.269
438     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
439     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
440     -hardened-sources-2.6.27-r2.ebuild:
441     Clean out old versions.
442 gengor 1.268
443     *hardened-sources-2.6.27-r4 (14 Jan 2009)
444     *hardened-sources-2.6.26-r8 (14 Jan 2009)
445     *hardened-sources-2.6.25-r12 (14 Jan 2009)
446    
447     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
448     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
449     +hardened-sources-2.6.27-r4.ebuild:
450     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
451     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
452     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
453     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
454 nixnut 1.267
455     15 Dec 2008; nixnut <nixnut@gentoo.org>
456     hardened-sources-2.6.25-r11.ebuild:
457     Stable on ppc
458 gengor 1.266
459     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
460     hardened-sources-2.6.25-r11.ebuild:
461     Stable amd64/x86.
462 gengor 1.265
463     *hardened-sources-2.6.27-r3 (07 Dec 2008)
464    
465     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
466     +hardened-sources-2.6.27-r3.ebuild:
467     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
468     Fixes bug #248754, #249729 and #246607.
469 gengor 1.264
470     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
471     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
472     Remove old versions.
473 gengor 1.262
474     *hardened-sources-2.6.26-r7 (03 Dec 2008)
475     *hardened-sources-2.6.25-r11 (03 Dec 2008)
476    
477 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
478     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
479 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
480     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
481     Both include many backports from 2.6.27.{6,7} -stable releases.
482 gengor 1.261
483     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
484     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
485     Remove versions broken on ARCHes != x86/amd64.
486 gengor 1.260
487     *hardened-sources-2.6.27-r2 (24 Nov 2008)
488    
489     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
490     +hardened-sources-2.6.27-r2.ebuild:
491     Bump to Linux 2.6.27.7 and latest grsecurity patch.
492 gengor 1.259
493     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
494     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
495     Remove old versions.
496 gengor 1.258
497     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
498     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
499     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
500 nixnut 1.257
501     16 Nov 2008; nixnut <nixnut@gentoo.org>
502     hardened-sources-2.6.25-r10.ebuild:
503     Stable on ppc
504 gengor 1.256
505     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
506     hardened-sources-2.6.25-r10.ebuild:
507     Stable amd64/x86.
508 gengor 1.255
509     *hardened-sources-2.6.26-r6 (12 Nov 2008)
510    
511     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
512     +hardened-sources-2.6.26-r6.ebuild:
513     Bump to Linux 2.6.26.8 and fix security bug #245650.
514 gengor 1.254
515     *hardened-sources-2.6.25-r10 (12 Nov 2008)
516    
517     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
518     +hardened-sources-2.6.25-r10.ebuild:
519     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
520 gengor 1.253
521     *hardened-sources-2.6.27-r1 (09 Nov 2008)
522    
523     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
524     +hardened-sources-2.6.27-r1.ebuild:
525     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
526 gengor 1.252
527     *hardened-sources-2.6.27 (04 Nov 2008)
528    
529     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
530     +hardened-sources-2.6.27.ebuild:
531     Initial 2.6.27 release.
532 gengor 1.251
533     *hardened-sources-2.6.26-r5 (03 Nov 2008)
534    
535     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
536     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
537     +hardened-sources-2.6.26-r5.ebuild:
538     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
539     Clean out some old versions.
540 nixnut 1.250
541     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
542     Stable on ppc
543 gengor 1.249
544     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
545     hardened-sources-2.6.25-r9.ebuild:
546     Stable on amd64/x86.
547 gengor 1.248
548     *hardened-sources-2.6.25-r9 (26 Oct 2008)
549    
550     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
551     +hardened-sources-2.6.25-r9.ebuild:
552     Update to Linux 2.6.25.19
553 nixnut 1.247
554     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
555     Stable on ppc
556 gengor 1.246
557     *hardened-sources-2.6.26-r4 (14 Oct 2008)
558    
559     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
560     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
561     Update to latest grsecurity patch, fixing building of non-modular kernels.
562 gengor 1.245
563     *hardened-sources-2.6.26-r3 (12 Oct 2008)
564    
565     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
566     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
567     +hardened-sources-2.6.26-r3.ebuild:
568     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
569     2.6.26-r1: Removed.
570     2.6.25-r8: Stable amd64/x86.
571 gengor 1.244
572     *hardened-sources-2.6.25-r8 (09 Oct 2008)
573    
574     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
575     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
576     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
577     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
578 nixnut 1.243
579     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
580     Stable on ppc
581 gengor 1.242
582     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
583     hardened-sources-2.6.25-r7.ebuild:
584     Stable amd64/x86.
585 gengor 1.241
586     *hardened-sources-2.6.26-r2 (13 Sep 2008)
587    
588     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
589     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
590     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
591     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
592 gengor 1.240
593     *hardened-sources-2.6.25-r7 (13 Sep 2008)
594    
595     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
596     +hardened-sources-2.6.25-r7.ebuild:
597     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
598 gengor 1.239
599     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
600     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
601     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
602     hardened-sources-2.6.26-r1.ebuild:
603     Update DESCRIPTION and HGPV_URI.
604 gengor 1.238
605     *hardened-sources-2.6.25-r6 (09 Sep 2008)
606    
607     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
608     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
609     2.6.25-r6: Update to Linux 2.6.25.17.
610     2.6.24-r3: Removed.
611 gengor 1.237
612     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
613     hardened-sources-2.6.25-r5.ebuild:
614     Stable on amd64/x86
615 gengor 1.236
616     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
617     Update my email address.
618 nixnut 1.235
619     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
620     stable on ppc
621 battousai 1.234
622     *hardened-sources-2.6.26-r1 (23 Aug 2008)
623     *hardened-sources-2.6.25-r5 (23 Aug 2008)
624    
625     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
626     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
627     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
628     +hardened-sources-2.6.26-r1.ebuild:
629     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
630     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
631     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
632     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
633     (gengor).
634 solar 1.233
635     *hardened-sources-2.6.26 (18 Aug 2008)
636     *hardened-sources-2.6.25-r4 (18 Aug 2008)
637    
638     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
639     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
640     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
641     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
642     2.6.25-r2: Removed.
643 tove 1.232
644     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
645     Remove phreak from metadata.xml (#96398)
646 solar 1.231
647     *hardened-sources-2.6.25-r3 (31 Jul 2008)
648    
649     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
650     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
651     +hardened-sources-2.6.25-r3.ebuild:
652     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
653     fixes, including security bug #231750.
654 nixnut 1.230
655     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
656     Stable on ppc
657 solar 1.229
658     *hardened-sources-2.6.25-r2 (05 Jul 2008)
659    
660     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
661     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
662     +hardened-sources-2.6.25-r2.ebuild:
663     2.6.23-r4: Stable x86/amd64
664     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
665     2.6.23-r{11,12}: Removed due to multiple vulns.
666     (gengor & kerframil)
667 nixnut 1.228
668     04 Jul 2008; nixnut <nixnut@gentoo.org>
669     hardened-sources-2.6.23-r13.ebuild:
670     Stable on ppc
671 solar 1.227
672     *hardened-sources-2.6.25-r1 (30 Jun 2008)
673    
674     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
675     +hardened-sources-2.6.25-r1.ebuild:
676     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
677     grsecurity release. 2.6.23-r13: x86/amd64 stable
678 solar 1.226
679     *hardened-sources-2.6.25 (17 Jun 2008)
680     *hardened-sources-2.6.24-r3 (17 Jun 2008)
681     *hardened-sources-2.6.23-r13 (17 Jun 2008)
682    
683     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
684     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
685     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
686     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
687     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
688     2.6.25: Initial 2.6.25 release.
689 solar 1.225
690     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
691     - fasttrack to stable x86/amd64
692 swegener 1.224
693     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
694     Fix broken digest for linux-2.6.24.tar.bz2.
695 solar 1.223
696     *hardened-sources-2.6.24-r2 (11 May 2008)
697     *hardened-sources-2.6.23-r12 (11 May 2008)
698    
699     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
700     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
701     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
702     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
703     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
704     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
705     security bugs 219901, 220691, 220975, 220979, 221123. New
706     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
707     should be removed as far as I'm concerned, everything else remove due to
708     vulnerable to numerous security bugs or brokeness.
709 nixnut 1.222
710     10 May 2008; nixnut <nixnut@gentoo.org>
711     hardened-sources-2.6.23-r11.ebuild:
712     Stable on ppc
713 solar 1.221
714     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
715     - -r11 stable on x86/amd64
716 solar 1.220
717     *hardened-sources-2.6.23-r11 (01 May 2008)
718    
719     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
720     - version bump to fix ulgy linux bugs
721 phreak 1.219
722     *hardened-sources-2.6.24-r1 (30 Apr 2008)
723    
724     30 Apr 2008; Christian Heim <phreak@gentoo.org>
725     +hardened-sources-2.6.24-r1.ebuild:
726     Revision bump (thanks to Kerin and Gordon, again), pulling
727     genpatches-2.6.24-7, solving #219089. Additionally contains further security
728     fixes plus some minor updates.
729 phreak 1.218
730     *hardened-sources-2.6.23-r10 (30 Apr 2008)
731    
732     30 Apr 2008; Christian Heim <phreak@gentoo.org>
733     +hardened-sources-2.6.23-r10.ebuild:
734     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
735     Additional contains "various other fixes".
736 phreak 1.217
737     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
738     Update the longdescription in metadata, thanks to Gordon Malm.
739 nixnut 1.216
740     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
741     Stable on ppc wrt bug #213255
742 solar 1.215
743     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
744     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
745     - stable on x86/amd64 per request. Removed obsolete ebuilds
746 phreak 1.214
747     *hardened-sources-2.6.24 (07 Apr 2008)
748    
749     07 Apr 2008; Christian Heim <phreak@gentoo.org>
750     +hardened-sources-2.6.24.ebuild:
751     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
752     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
753     for the many contributions and their continued effort in #216612) based on
754     2.6.24 and genpatches-2.6.24-5.
755    
756     The current ebuild/patchset contains these things:
757     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
758     * Introduces bespoke server and workstation oriented security levels
759     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
760 phreak 1.213
761     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
762     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
763     maintaining it).
764 phreak 1.212
765     24 Mar 2008; Christian Heim <phreak@gentoo.org>
766     hardened-sources-2.4.35-r2.ebuild:
767     Fixing SRC_URI for 2.4.35-r2.
768 phreak 1.211
769     *hardened-sources-2.6.23-r9 (22 Mar 2008)
770    
771     22 Mar 2008; Christian Heim <phreak@gentoo.org>
772     +hardened-sources-2.6.23-r9.ebuild:
773     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
774     * Change the default GIDs for some grsecurity options
775     * Revamp the Hardened [Gentoo] security level and make it the default level
776     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
777     * Fix a recursive lock -- call to capable() within ptrace_attach()
778     * Fix bug that allows audit and iscsi operations to be controlled via netlink
779 solar 1.210
780     *hardened-sources-2.6.23-r8 (27 Feb 2008)
781    
782     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
783     - version bump from Kerin Millar bug 210026
784 solar 1.209
785     17 Feb 2008; <solar@gentoo.org> metadata.xml,
786     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
787     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
788     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
789     - stable on x86 and remove old ebuilds
790 solar 1.207
791     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
792 solar 1.208 - stable on amd64 per request of amd64 lead
793 solar 1.206
794     *hardened-sources-2.6.23-r7 (11 Feb 2008)
795    
796     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
797     - version bump from kerin.millar
798     Changes:
799    
800     * Bump to genpatches-base-2.6.23-9
801     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
802     * Disables COMPAT_VDSO in x86/defconfig
803     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
804 phreak 1.205
805     25 Jan 2008; Christian Heim <phreak@gentoo.org>
806     -hardened-sources-2.6.22-r8.ebuild:
807     Cleaning up old versions.
808 phreak 1.204
809     *hardened-sources-2.6.23-r6 (25 Jan 2008)
810    
811     25 Jan 2008; Christian Heim <phreak@gentoo.org>
812     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
813     Revision bump, pulling in the latest genpatches.
814 phreak 1.203
815     *hardened-sources-2.6.23-r5 (24 Dec 2007)
816    
817     24 Dec 2007; Christian Heim <phreak@gentoo.org>
818     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
819     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
820     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
821     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
822 phreak 1.202
823     24 Dec 2007; Christian Heim <phreak@gentoo.org>
824     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
825     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
826     -hardened-sources-2.6.23-r3.ebuild:
827     Cleaning out some unused, old versions.
828 phreak 1.201
829     24 Dec 2007; Christian Heim <phreak@gentoo.org>
830     hardened-sources-2.6.23-r4.ebuild:
831     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
832     in the tree for long, but there isn't much of a difference between this and
833     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
834 phreak 1.200
835     *hardened-sources-2.6.23-r4 (23 Dec 2007)
836    
837     23 Dec 2007; Christian Heim <phreak@gentoo.org>
838     +hardened-sources-2.6.23-r4.ebuild:
839     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
840 phreak 1.199
841     *hardened-sources-2.6.23-r3 (04 Dec 2007)
842    
843     04 Dec 2007; Christian Heim <phreak@gentoo.org>
844     +hardened-sources-2.6.23-r3.ebuild:
845     Revision bump, pulling in 2.6.23.9.
846 phreak 1.198
847     *hardened-sources-2.6.23-r2 (25 Nov 2007)
848    
849     25 Nov 2007; Christian Heim <phreak@gentoo.org>
850     +hardened-sources-2.6.23-r2.ebuild:
851     Updated patchset, thanks to solar.
852 phreak 1.197
853     *hardened-sources-2.6.23-r1 (31 Oct 2007)
854    
855     31 Oct 2007; Christian Heim <phreak@gentoo.org>
856     +hardened-sources-2.6.23-r1.ebuild:
857     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
858 solar 1.196
859     29 Oct 2007; <solar@gentoo.org> metadata.xml:
860     - update metadata.xml
861 phreak 1.195
862     25 Oct 2007; Christian Heim <phreak@gentoo.org>
863     hardened-sources-2.6.22-r8.ebuild:
864     Marking 2.6.22-r8 stable on amd64 and x86.
865 phreak 1.194
866     21 Oct 2007; Christian Heim <phreak@gentoo.org>
867     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
868     -hardened-sources-2.6.21-r4.ebuild:
869     Removing old ebuilds.
870 phreak 1.193
871     *hardened-sources-2.4.35-r2 (21 Oct 2007)
872    
873     21 Oct 2007; Christian Heim <phreak@gentoo.org>
874     +hardened-sources-2.4.35-r2.ebuild:
875     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
876     patches.
877 phreak 1.192
878     *hardened-sources-2.6.22-r8 (21 Oct 2007)
879    
880     21 Oct 2007; Christian Heim <phreak@gentoo.org>
881     +hardened-sources-2.6.22-r8.ebuild:
882     Yet another new patch, hopefully fixing the remaining issues we had w/
883     2.6.22. Candidate for stabling.
884 phreak 1.191
885     *hardened-sources-2.6.23 (13 Oct 2007)
886    
887     13 Oct 2007; Christian Heim <phreak@gentoo.org>
888     +hardened-sources-2.6.23.ebuild:
889     Initial hardened-sources-2.6.23. If people still have problems w/ bug
890     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
891 phreak 1.190
892     11 Oct 2007; Christian Heim <phreak@gentoo.org>
893     hardened-sources-2.6.20-r10.ebuild:
894     Pulling in yet another new genpatches version, fixing the PWC bug for real.
895 phreak 1.189
896     04 Oct 2007; Christian Heim <phreak@gentoo.org>
897     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
898     Removing old versions.
899 phreak 1.188
900     *hardened-sources-2.6.22-r7 (01 Oct 2007)
901    
902     01 Oct 2007; Christian Heim <phreak@gentoo.org>
903     +hardened-sources-2.6.22-r7.ebuild:
904     Revision bump, pulling in a newer patch. Should fix #194276.
905 phreak 1.187
906     30 Sep 2007; Christian Heim <phreak@gentoo.org>
907     hardened-sources-2.6.20-r10.ebuild:
908     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
909     Mike Doty).
910 phreak 1.186
911     *hardened-sources-2.6.22-r6 (26 Sep 2007)
912    
913     26 Sep 2007; Christian Heim <phreak@gentoo.org>
914     +hardened-sources-2.6.22-r6.ebuild:
915     Revision bump, grabbing up till Linux 2.6.22.9.
916 phreak 1.185
917     24 Sep 2007; Christian Heim <phreak@gentoo.org>
918     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
919     Cleaning up further.
920 phreak 1.184
921     *hardened-sources-2.6.20-r10 (24 Sep 2007)
922    
923     24 Sep 2007; Christian Heim <phreak@gentoo.org>
924     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
925     +hardened-sources-2.6.20-r10.ebuild:
926     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
927     revisions.
928 phreak 1.183
929     *hardened-sources-2.6.22-r5 (22 Sep 2007)
930    
931     22 Sep 2007; Christian Heim <phreak@gentoo.org>
932     +hardened-sources-2.6.22-r5.ebuild:
933     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
934 phreak 1.182
935     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
936     Removing johnm from metadata.xml (see #186467 for reference).
937 phreak 1.181
938     *hardened-sources-2.6.22-r4 (17 Sep 2007)
939    
940     17 Sep 2007; Christian Heim <phreak@gentoo.org>
941     +hardened-sources-2.6.22-r4.ebuild:
942     Revision bump, hopefully fixing all those weird PAX failures.
943 phreak 1.180
944     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
945     Updating the metadata.xml.
946 phreak 1.179
947     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
948     Removing tocharian from metadata due to his retirement (see #71718 for
949     reference).
950 phreak 1.178
951     *hardened-sources-2.6.20-r9 (30 Aug 2007)
952    
953     30 Aug 2007; Christian Heim <phreak@gentoo.org>
954     +hardened-sources-2.6.20-r9.ebuild:
955     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
956 phreak 1.177
957     29 Aug 2007; Christian Heim <phreak@gentoo.org>
958     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
959     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
960     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
961     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
962     -hardened-sources-2.6.22-r2.ebuild:
963     Removing some redundant versions.
964 phreak 1.176
965     *hardened-sources-2.4.35-r1 (29 Aug 2007)
966    
967     29 Aug 2007; Christian Heim <phreak@gentoo.org>
968     +hardened-sources-2.4.35-r1.ebuild:
969     Revision bump, new grsecurity patch.
970 phreak 1.175
971     *hardened-sources-2.6.20-r8 (26 Aug 2007)
972    
973     26 Aug 2007; Christian Heim <phreak@gentoo.org>
974     +hardened-sources-2.6.20-r8.ebuild:
975     Revision bump for Linux 2.6.20.17.
976 phreak 1.174
977     *hardened-sources-2.6.22-r3 (22 Aug 2007)
978    
979     22 Aug 2007; Christian Heim <phreak@gentoo.org>
980     +hardened-sources-2.6.22-r3.ebuild:
981     Revision bump for Linux 2.6.22.4.
982 phreak 1.173
983     16 Aug 2007; Christian Heim <phreak@gentoo.org>
984     hardened-sources-2.6.22-r2.ebuild:
985     Updated patchset, to fix the alignment against 2.6.22.3.
986 phreak 1.172
987     *hardened-sources-2.6.22-r2 (16 Aug 2007)
988    
989     16 Aug 2007; Christian Heim <phreak@gentoo.org>
990     +hardened-sources-2.6.22-r2.ebuild:
991     Revision bump for Linux 2.6.22.3.
992 phreak 1.171
993     *hardened-sources-2.4.35 (16 Aug 2007)
994    
995     16 Aug 2007; Christian Heim <phreak@gentoo.org>
996     +hardened-sources-2.4.35.ebuild:
997     Version bump, initial version for Linux 2.4.35.
998 phreak 1.170
999     *hardened-sources-2.6.21-r4 (16 Aug 2007)
1000    
1001     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1002     +hardened-sources-2.6.21-r4.ebuild:
1003     Revision bump for Linux 2.6.21.6.
1004 phreak 1.169
1005     *hardened-sources-2.6.20-r7 (16 Aug 2007)
1006    
1007     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1008     +hardened-sources-2.6.20-r7.ebuild:
1009     Revision bump for Linux 2.6.20.16.
1010 phreak 1.168
1011     *hardened-sources-2.6.22-r1 (13 Aug 2007)
1012    
1013     13 Aug 2007; Christian Heim <phreak@gentoo.org>
1014     +hardened-sources-2.6.22-r1.ebuild:
1015     Yet another revision bump.
1016 phreak 1.167
1017     *hardened-sources-2.6.22 (10 Aug 2007)
1018    
1019     10 Aug 2007; Christian Heim <phreak@gentoo.org>
1020     +hardened-sources-2.6.22.ebuild:
1021     Initial release for 2.6.22. If you are using hardened-sources on a desktop
1022     machine (P4 or newer), be aware you might need to disable
1023     CONFIG_PAX_PAGEEXEC.
1024 phreak 1.166
1025     04 Aug 2007; Christian Heim <phreak@gentoo.org>
1026     hardened-sources-2.6.20-r6.ebuild:
1027     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
1028     2.6.20.15.
1029 phreak 1.165
1030     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1031     hardened-sources-2.6.20-r5.ebuild:
1032     Marking hardened-sources-2.6.20-r5 stable on ppc.
1033 phreak 1.164
1034     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1035     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
1036     Cleanup.
1037 phreak 1.163
1038     *hardened-sources-2.6.20-r6 (08 Jul 2007)
1039    
1040     08 Jul 2007; Christian Heim <phreak@gentoo.org>
1041     +hardened-sources-2.6.20-r6.ebuild:
1042     Revision bump, grabbing yet another stable release.
1043 phreak 1.162
1044     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1045     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
1046     -hardened-sources-2.6.21-r2.ebuild:
1047     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
1048     alpha stable KEYWORD by mistake.
1049 phreak 1.161
1050     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1051     hardened-sources-2.6.20-r5.ebuild:
1052     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
1053     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
1054 phreak 1.160
1055     *hardened-sources-2.6.21-r3 (12 Jun 2007)
1056    
1057     12 Jun 2007; Christian Heim <phreak@gentoo.org>
1058     +hardened-sources-2.6.21-r3.ebuild:
1059     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
1060     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
1061     love.
1062 phreak 1.159
1063     *hardened-sources-2.6.20-r5 (11 Jun 2007)
1064    
1065     11 Jun 2007; Christian Heim <phreak@gentoo.org>
1066     +hardened-sources-2.6.20-r5.ebuild:
1067     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1068     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1069     love.
1070 pappy 1.158
1071     *hardened-sources-2.4.34.5 (11 Jun 2007)
1072    
1073     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1074     +hardened-sources-2.4.34.5.ebuild:
1075     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1076 phreak 1.157
1077     30 May 2007; Christian Heim <phreak@gentoo.org>
1078     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1079     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1080     stale ebuild(s).
1081 phreak 1.156
1082     30 May 2007; Christian Heim <phreak@gentoo.org>
1083     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1084     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1085     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1086     Doing some cleanups, remove stale ebuilds.
1087 phreak 1.155
1088     26 May 2007; Christian Heim <phreak@gentoo.org>
1089     hardened-sources-2.6.21-r2.ebuild:
1090     Fixing the grsecurity patch, had one '};' too much.
1091 phreak 1.154
1092     *hardened-sources-2.6.21-r2 (26 May 2007)
1093    
1094     26 May 2007; Christian Heim <phreak@gentoo.org>
1095     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1096     +hardened-sources-2.6.21-r2.ebuild:
1097     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1098     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1099 phreak 1.153
1100     *hardened-sources-2.6.20-r4 (26 May 2007)
1101    
1102     26 May 2007; Christian Heim <phreak@gentoo.org>
1103     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1104     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1105 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1106 phreak 1.152
1107     15 May 2007; Christian Heim <phreak@gentoo.org>
1108     hardened-sources-2.6.20-r3.ebuild:
1109     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1110     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1111     grsecurity patch fail in that exact same hunk.
1112 phreak 1.151
1113     *hardened-sources-2.6.20-r3 (15 May 2007)
1114    
1115     15 May 2007; Christian Heim <phreak@gentoo.org>
1116     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1117     Revision bump, incorporating Linux 2.6.20.11.
1118    
1119     *hardened-sources-2.6.21-r1 (11 May 2007)
1120    
1121     11 May 2007; Christian Heim <phreak@gentoo.org>
1122     +hardened-sources-2.6.21-r1.ebuild:
1123     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1124     mentioned in #177234.
1125 kevquinn 1.150
1126     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1127     files/digest-hardened-sources-2.6.21, Manifest:
1128     Fix Manifest/digest for linux-2.6.21.tar.bz2
1129 phreak 1.149
1130     06 May 2007; Christian Heim <phreak@gentoo.org>
1131     hardened-sources-2.6.21.ebuild:
1132     Bumping the hardened-patches version, needed for the fix for #177234.
1133 phreak 1.148
1134     *hardened-sources-2.6.21 (02 May 2007)
1135    
1136     02 May 2007; Christian Heim <phreak@gentoo.org>
1137     +hardened-sources-2.6.21.ebuild:
1138     Version bump, Linux 2.6.21-hardened.
1139 phreak 1.147
1140     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1141     hardened-sources-2.6.20-r2.ebuild:
1142     Adding ~ia64 on Ned's request.
1143 phreak 1.146
1144     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1145     hardened-sources-2.6.20-r2.ebuild:
1146     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1147     header line(s).
1148 phreak 1.145
1149     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1150     hardened-sources-2.6.20-r2.ebuild:
1151     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1152 armin76 1.144
1153     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1154    
1155     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1156     +hardened-sources-2.6.20-r2.ebuild:
1157     Version bump, on behalf of phreak
1158 phreak 1.143
1159     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1160    
1161     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1162     +hardened-sources-2.6.20-r1.ebuild:
1163     Revision bump, grabbing a newer grsecurity snapshot.
1164 phreak 1.142
1165     *hardened-sources-2.6.20 (25 Mar 2007)
1166    
1167     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1168     +hardened-sources-2.6.20.ebuild:
1169     Finally a hardened-sources version for 2.6.20; many people have been waiting
1170     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1171     testbox.
1172 chainsaw 1.141
1173     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1174     hardened-sources-2.6.18-r6.ebuild:
1175     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1176 phreak 1.140
1177     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1178    
1179     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1180     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1181     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1182     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1183     supposed to be.
1184 phreak 1.139
1185     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1186     Fixing the Manifest, the previous one was broken (as in still had the
1187     deleted ebuild in it).
1188 phreak 1.138
1189     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1190     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1191     +hardened-sources-2.6.18-r5.ebuild:
1192     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1193     Linux 2.6.18.8. Also cleaning up the older version.
1194    
1195     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1196    
1197     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1198     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1199     +hardened-sources-2.6.18-r5.ebuild:
1200     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1201     Linux 2.6.18.8. Also cleaning up the older version.
1202 phreak 1.137
1203     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1204     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1205     -hardened-sources-2.6.19-r5.ebuild:
1206     Removing some of the old version, that didn't work.
1207 phreak 1.136
1208     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1209    
1210     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1211     +hardened-sources-2.6.19-r6.ebuild:
1212     Revision bump, including a new grsec version fixing #166235.
1213 pappy 1.134
1214     *hardened-sources-2.4.34 (24 Jan 2007)
1215    
1216     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1217 pappy 1.135 Manifest:
1218     updating Manifest with checksums of new tarball and ebuild
1219    
1220     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1221 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1222     I added new hardened sources 2.4 update, this is a critical path
1223     security bugfix - all users of h-s are strongly advised
1224     to update their existing hardened sources to this version.
1225     It contains a fix for a kernel vulnerability that is pertaining
1226     to the PaX changes to virtual memory management, possibly leading
1227     to a local kernel exploit ... see grsecurity.net forums and homepage
1228 phreak 1.133
1229     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1230     files/digest-hardened-sources-2.6.19-r5, Manifest:
1231     Fixing the patch-tarball digest.
1232 phreak 1.132
1233     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1234    
1235     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1236     +hardened-sources-2.6.19-r5.ebuild:
1237     Revision bump, closing the recently discovered PaX expand_stack()
1238     vulnerability.
1239 phreak 1.131
1240     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1241    
1242     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1243     +hardened-sources-2.6.19-r4.ebuild:
1244     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1245     dropping the randomized PID feature.
1246 opfer 1.130
1247     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1248     hardened-sources-2.4.33.4.ebuild:
1249     stable x86, bug #161171
1250 phreak 1.129
1251     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1252    
1253     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1254     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1255     Revision bump for bug #157186 and #158786.
1256 phreak 1.128
1257     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1258    
1259     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1260     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1261     Revision bump for bug #157186.
1262 phreak 1.127
1263     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1264    
1265     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1266     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1267     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1268 phreak 1.126
1269     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1270     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1271     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1272     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1273     hardened-sources-2.6.19-r1.ebuild:
1274     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1275     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1276 pappy 1.125
1277     *hardened-sources-2.4.33.4 (17 Dec 2006)
1278    
1279     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1280     +hardened-sources-2.4.33.4.ebuild:
1281     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1282     and quilting
1283 phreak 1.124
1284     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1285    
1286     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1287     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1288     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1289     for reporting).
1290 phreak 1.123
1291     *hardened-sources-2.6.19 (13 Dec 2006)
1292    
1293     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1294     +hardened-sources-2.6.19.ebuild:
1295     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1296     Brad for providing that prompt update.
1297 phreak 1.122
1298     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1299    
1300     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1301     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1302     +hardened-sources-2.6.18-r3.ebuild:
1303     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1304     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1305 phreak 1.121
1306     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1307     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1308 nixnut 1.120
1309     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1310     Stable on ppc wrt bug 157356
1311 opfer 1.119
1312     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1313     hardened-sources-2.6.18.ebuild:
1314     stable x86, bug #157356
1315 phreak 1.118
1316     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1317    
1318     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1319     +hardened-sources-2.6.18-r2.ebuild:
1320     Revision bump, including 2.6.18.5 (via genpatches) and
1321     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1322     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1323     redesign.
1324 phreak 1.117
1325     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1326     hardened-sources-2.6.18.ebuild:
1327     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1328     of Mike Doty).
1329 phreak 1.116
1330     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1331    
1332     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1333     +hardened-sources-2.6.18-r1.ebuild:
1334     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1335 phreak 1.115
1336     *hardened-sources-2.6.18 (11 Nov 2006)
1337    
1338     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1339     +hardened-sources-2.6.18.ebuild:
1340     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1341 solar 1.114
1342     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1343     - mark amd64 stable also. bug #151877
1344 solar 1.113
1345     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1346     - mark 2.6.17-r1 stable
1347 phreak 1.112
1348     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1349     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1350     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1351 phreak 1.111
1352     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1353    
1354     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1355     +hardened-sources-2.6.17-r1.ebuild:
1356     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1357     grsecurity patch.
1358 phreak 1.110
1359     *hardened-sources-2.6.17 (17 Aug 2006)
1360    
1361     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1362     +hardened-sources-2.6.17.ebuild:
1363     Bumping the hardened-sources-2.6 series to 2.6.17, using
1364     genpatches-2.6.17-6.base.
1365 solar 1.109
1366     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1367     - stable on x86 and amd64
1368 solar 1.108
1369     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1370    
1371     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1372     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1373     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1374     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1375     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1376     crusty ebuilds
1377 johnm 1.107
1378     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1379     hardened-sources-2.6.16-r10.ebuild:
1380     marking stable on x86 and amd64
1381 solar 1.106
1382     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1383     - 2.4.32-r6 stable on x86. RSBAC state unknown
1384 kang 1.105
1385     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1386    
1387     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1388     +hardened-sources-2.4.32-r7.ebuild:
1389     Bump PaX for RSBAC to test-17
1390 johnm 1.104
1391     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1392    
1393     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1394     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1395     hardened-sources-2.6.16 bump to latest -base.
1396 solar 1.103
1397     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1398    
1399     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1400     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1401     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1402     sysctl controlable resource logging
1403 johnm 1.102
1404     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1405    
1406     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1407     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1408     push new 2.6.16 release in preparation for stable
1409 solar 1.101
1410     22 May 2006; <solar@gentoo.org> :
1411     - redigest bug 134002
1412 kang 1.100
1413     *hardened-sources-2.4.32-r5 (16 May 2006)
1414    
1415     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1416     +hardened-sources-2.4.32-r5.ebuild:
1417     Fixes rsbac common patching (new patch in new -r5 patchset)
1418 solar 1.99
1419     *hardened-sources-2.4.32-r4 (13 May 2006)
1420    
1421     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1422     +hardened-sources-2.4.32-r4.ebuild:
1423     - security bumps
1424 johnm 1.98
1425     *hardened-sources-2.6.16-r6 (03 May 2006)
1426    
1427     03 May 2006; John Mylchreest <johnm@gentoo.org>
1428     +hardened-sources-2.6.16-r6.ebuild:
1429     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1430 johnm 1.97
1431     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1432     hardened-sources-2.6.14-r8.ebuild:
1433     fix x86_64 build problem, this will delay the digest issue again for a short
1434     while but it will sort itself out
1435 johnm 1.96
1436     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1437     hardened-sources-2.6.14-r8.ebuild:
1438     bump hardened patchset
1439 antarus 1.94
1440     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1441     files/digest-hardened-sources-2.4.32-r2,
1442     files/digest-hardened-sources-2.4.32-r3,
1443     files/digest-hardened-sources-2.6.14-r8, Manifest:
1444     Fixing duff SHA256 digests: Bug # 131293
1445 johnm 1.93
1446 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1447    
1448     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1449     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1450     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1451     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1452     cleanup of old uneccessary sources
1453    
1454 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1455     fix digest
1456 johnm 1.92
1457     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1458    
1459     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1460     +hardened-sources-2.6.14-r8.ebuild:
1461     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1462 johnm 1.91
1463     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1464     Turning on gpg-signing again, and recomitting
1465 johnm 1.90
1466     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1467    
1468     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1469     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1470     +hardened-sources-2.6.16-r4.ebuild:
1471     Fix numerous security vulns
1472 solar 1.89
1473     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1474    
1475     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1476     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1477     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1478     - security bump for bug #112791. Removed old ebuilds
1479 johnm 1.88
1480     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1481    
1482     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1483     +hardened-sources-2.6.16-r3.ebuild:
1484     Removing silly localversion which I missed
1485 johnm 1.87
1486     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1487    
1488     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1489     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1490     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1491 johnm 1.86
1492     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1493    
1494     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1495     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1496     +hardened-sources-2.6.16-r2.ebuild:
1497     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1498     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1499 johnm 1.85
1500     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1501    
1502     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1503     +hardened-sources-2.6.16-r1.ebuild:
1504     Bumping to include ppc build fix and 2.6.16.3
1505 tsunam 1.84
1506     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1507     hardened-sources-2.6.14-r6.ebuild:
1508     Stable on x86; bug #127718
1509 johnm 1.83
1510     *hardened-sources-2.6.16 (31 Mar 2006)
1511    
1512     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1513     +hardened-sources-2.6.16.ebuild:
1514     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1515     2.6.16.1
1516 cryos 1.82
1517     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1518     hardened-sources-2.6.14-r6.ebuild:
1519     Stable on amd64, bug 127718.
1520 nixnut 1.81
1521     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1522     Stable on ppc. Bug #127718
1523 johnm 1.80
1524     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1525     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1526     -hardened-sources-2.6.14-r4.ebuild:
1527     Cleanup.
1528 johnm 1.79
1529     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1530    
1531     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1532     +hardened-sources-2.6.14-r6.ebuild:
1533     Fixes grsec policy recreation bug and adds a
1534     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1535 solar 1.78
1536     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1537     - stable on x86
1538 hansmi 1.77
1539     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1540     hardened-sources-2.6.14-r5.ebuild:
1541     Stable on ppc.
1542 johnm 1.76
1543     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1544    
1545     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1546     +hardened-sources-2.6.14-r5.ebuild:
1547     fixing every known exploit
1548 solar 1.75
1549     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1550    
1551     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1552     +hardened-sources-2.4.32-r2.ebuild:
1553     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1554 solar 1.74
1555     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1556    
1557     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1558     - version bump for new genpatches which fix up a few sec holes
1559 solar 1.73
1560     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1561    
1562     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1563     - revision bump to add misc vital linux kernel security patches.
1564 johnm 1.72
1565     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1566    
1567     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1568     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1569     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1570 johnm 1.71
1571     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1572     hardened-sources-2.6.14-r2.ebuild:
1573     making x86 & amd64 stable following testing.
1574 johnm 1.70
1575     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1576    
1577     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1578     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1579     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1580     network hooks.
1581 johnm 1.69
1582     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1583     hardened-sources-2.6.14-r1.ebuild:
1584     bumping to stable early for sec fix on x86 & amd64
1585 johnm 1.68
1586     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1587    
1588     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1589     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1590     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1591 solar 1.67
1592     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1593     - stable on x86 security bug #114227 CAN-2005-3257
1594 kang 1.66
1595     *hardened-sources-2.4.32 (19 Nov 2005)
1596    
1597     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1598     +hardened-sources-2.4.32.ebuild:
1599     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1600     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1601     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1602     rsbac >> /etc/portage/package.use)
1603 johnm 1.65
1604     *hardened-sources-2.6.14 (14 Nov 2005)
1605    
1606     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1607     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1608     Bumping 2.6 series to 2.6.14.2
1609 johnm 1.64
1610     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1611    
1612     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1613     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1614     +hardened-sources-2.6.13-r2.ebuild:
1615     Fixes minor build error in ppc.
1616 johnm 1.63
1617     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1618    
1619     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1620     +hardened-sources-2.6.13-r1.ebuild:
1621     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1622     2.6.13.4, fixes some major amd64 stability problems.
1623 johnm 1.62
1624     *hardened-sources-2.6.13 (16 Sep 2005)
1625    
1626     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1627     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1628     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1629     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1630     users should test this thoroughly.
1631 solar 1.61
1632     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1633     - stable on x86
1634 johnm 1.60
1635     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1636    
1637     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1638     +hardened-sources-2.6.11-r15.ebuild:
1639     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1640     grsec redefining curr_ip struct.
1641 solar 1.59
1642     *hardened-sources-2.4.31 (20 Jun 2005)
1643    
1644     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1645     initial import of 2.4.31 tree
1646 johnm 1.58
1647     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1648    
1649     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1650     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1651     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1652     naming scheme to abide by genpatches
1653 johnm 1.57
1654     *hardened-sources-2.6.11-r13 (18 May 2005)
1655    
1656     18 May 2005; John Mylchreest <johnm@gentoo.org>
1657     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1658     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1659     target. sorry about that. Fixes bug #93022
1660 johnm 1.56
1661     *hardened-sources-2.6.11-r12 (17 May 2005)
1662    
1663     17 May 2005; John Mylchreest <johnm@gentoo.org>
1664     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1665     +hardened-sources-2.6.11-r12.ebuild:
1666     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1667     merges in genpatches-base
1668 johnm 1.55
1669     *hardened-sources-2.6.11-r12 (17 May 2005)
1670    
1671     17 May 2005; John Mylchreest <johnm@gentoo.org>
1672     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1673     +hardened-sources-2.6.11-r12.ebuild:
1674     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1675     merges in genpatches-base
1676 solar 1.54
1677     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1678     -files/2.4.27-cmdline-race.patch,
1679     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1680     -files/2.4.28-grsec-binfmt_a.out.patch,
1681     -files/2.4.28-grsec-cmdline-race.patch,
1682     -files/2.4.28-selinux-binfmt_a.out.patch,
1683     -files/2.4.28-selinux-cmdline-race.patch,
1684     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1685     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1686     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1687     cleanup..
1688 solar 1.53
1689     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1690    
1691     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1692     - disable aout by default
1693 solar 1.52
1694     *hardened-sources-2.4.30 (18 Apr 2005)
1695    
1696     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1697     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1698     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1699     use
1700 tocharian 1.50
1701 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1702    
1703     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1704     +hardened-sources-2.4.29.ebuild:
1705     New hardened-patches-2.4-29.0 patchball.
1706     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1707    
1708     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1709    
1710     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1711     +hardened-sources-2.4.28-r5.ebuild:
1712     Added a fix for a PaX vulnerability.
1713    
1714     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1715 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1716     Stable on x86
1717 solar 1.49
1718     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1719     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1720     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1721     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1722     - fixed/added RDEPEND= in all kernel-2 ebuilds
1723 tocharian 1.48
1724     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1725    
1726     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1727     +hardened-sources-2.4.28-r4.ebuild:
1728     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1729     backport of neighbour hash updates.
1730 tocharian 1.47
1731     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1732     hardened-sources-2.4.28-r3.ebuild:
1733     Stable on x86
1734 tseng 1.46
1735     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1736    
1737     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1738     +hardened-sources-2.6.10-r3.ebuild:
1739     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1740     in 2005.0
1741 tocharian 1.45
1742     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1743     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1744     hardened-sources-2.4.28-r2.ebuild:
1745     Mark stable on x86
1746 tocharian 1.44
1747     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1748    
1749     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1750     +hardened-sources-2.4.28-r3.ebuild:
1751     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1752 tocharian 1.43
1753     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1754     hardened-sources-2.4.28.ebuild:
1755     Mark stable on x86.
1756 tocharian 1.42
1757     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1758    
1759     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1760     +hardened-sources-2.4.28-r2.ebuild:
1761     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1762     Mazinger for grsecurity patches as well.
1763 plasmaroo 1.41
1764     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1765    
1766     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1767     Security bump. Thank tocharian for rolling a new patchset...
1768 solar 1.40
1769     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1770     +files/2.4.28-grsec-cmdline-race.patch,
1771     +files/2.4.28-selinux-binfmt_a.out.patch,
1772     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1773     - Round up remaining security patches that appear to be missing in 2.4.28. -
1774     PaX standalone updated to current. hgpv=28.1
1775 solar 1.39
1776     *hardened-sources-2.4.28 (28 Nov 2004)
1777    
1778     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1779     security bump. Thank tocharian for rolling a new patchset
1780 scox 1.31
1781 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1782    
1783     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1784     +hardened-sources-2.4.27-r3.ebuild:
1785     Applies the new 2.4-27.2 patchball which updates
1786     GRSecurity to the 2.0.1 version.
1787    
1788 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1789    
1790     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1791     +hardened-sources-2.4.27-r2.ebuild:
1792     Version bump.
1793     This version uses the new 2.4-27.1 patchball which updates
1794     both the SELinux PaX hooks patch and the SELinux headers.
1795    
1796 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1797    
1798     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1799     +hardened-sources-2.4.27-r1.ebuild,
1800     -hardened-sources-2.4.27.ebuild,
1801     +files/2.4.27-cmdline-race.patch:
1802     Version bump, fix for cmdline race. See bug #59905.
1803    
1804     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1805    
1806     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1807     +hardened-sources-2.4.26-r6.ebuild,
1808     -hardened-sources-2.4.26-r5.ebuild,
1809     -hardened-sources-2.4.26-r4.ebuild,
1810     +files/2.4.26-cmdline-race.patch:
1811     Version bump, fix for cmdline race. See bug #59905.
1812    
1813 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1814    
1815     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1816     +hardened-sources-2.4.27.ebuild,
1817     +files/2.4.27-CAN-2004-0394.patch:
1818     Ported the patchball to the 2.4.27 kernel version.
1819    
1820 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1821    
1822     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1823     +hardened-sources-2.4.26-r5.ebuild:
1824 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1825 scox 1.34 It adds the following features:
1826     - Squashfs
1827     - Ebtables
1828     - Netdev random (core+drivers)
1829     - Watchdog Timer (WDT) fix.
1830    
1831 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1832    
1833     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1834     +hardened-sources-2.4.26-r4.ebuild,
1835     +files/2.4.26-CAN-2004-0415.patch,
1836     -hardened-sources-2.4.26-3:
1837     Version bump, fix for CAN 0415, see bug #59378.
1838    
1839 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1840    
1841     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1842     +hardened-sources-2.4.26-r3.ebuild,
1843     +files/2.4.26-CAN-2004-0497.patch,
1844     -hardened-sources-2.4.26-r2.ebuild:
1845     Version bump, fixed CAN 0497, see bug #56171.
1846    
1847 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1848    
1849     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1850 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1851 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1852     +files/2.4.26-CAN-2004-0535.patch,
1853     -hardened-sources-2.4.26-r1.ebuild:
1854     Fixes for both CAN 0495 and 0535, see bug #54976
1855 pvdabeel 1.27
1856 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1857     hardened-sources-2.4.26-r1.ebuild:
1858     QA - fix use invocation
1859 scox 1.28
1860     *hardened-sources-2.4.26-r1 (22 June 2004)
1861    
1862     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1863     +hardened-sources-2.4.26-r1.ebuild,
1864     +files/2.4.26-CAN-2004-0394.patch,
1865     +files/2.4.26-signal-race.patch,
1866     -hardened-sources-2.4.26.ebuild,
1867     -hardened-sources-2.4.24-r3.ebuild:
1868     Version bump for the CAN-2004-0394 issue and bug #53804
1869     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1870    
1871    
1872 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1873     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1874     Masked hardened-sources-2.4.26.ebuild broken for ppc
1875    
1876     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1877     hardened-sources-2.4.24-r3.ebuild:
1878     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1879 plasmaroo 1.25
1880 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1881    
1882     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1883     +hardened-sources-2.4.26.ebuild:
1884     Updated hardened-sources for the 2.4.26 kernel
1885     Removed broken components, updated almost everything.
1886    
1887 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1888    
1889     17 Apr 2004; <plasmaroo@gentoo.org>
1890     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1891     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1892     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1893     +hardened-sources-2.4.24-r3.ebuild:
1894     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1895     vulnerabilities. Old revisions removed.
1896 plasmaroo 1.24
1897     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1898    
1899     15 Apr 2004; <plasmaroo@gentoo.org>
1900     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1901     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1902     Version bump for the CAN-2004-0109 issue; bug #47881.
1903 aliz 1.23
1904     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1905     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1906     Add eutils to inherit.
1907 plasmaroo 1.22
1908     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1909    
1910     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1911     files/hardened-sources-2.4.24.munmap.patch:
1912     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1913 scox 1.19
1914 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1915 scox 1.26
1916 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1917     hardened-sources-2.4.24.ebuild:
1918     Version bump, updated most of the components.
1919     This release includes the following:
1920    
1921     - Hardened security
1922     - Netfilter patch-o-matic 20031219
1923     - FreeSWAN 2.04 & x509 1.4.8
1924     - EVMS 2.2.2
1925     - XFS 1.3.1
1926     - cryptoloop jari
1927     - grsecurity 2.0-rc4
1928     - SELinux
1929     - PaX 200402060000
1930     - PaX Obscurity 200308302223
1931     - Others...
1932    
1933     Neither -ck nor systrace are included anymore.
1934    
1935 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1936    
1937     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1938     hardened-sources-2.4.22-r2.ebuild:
1939 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1940 scox 1.19
1941     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1942 iggy 1.17
1943     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1944 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1945 iggy 1.16
1946     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1947 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1948     Version bump for the 'do_brk' vulnerability.
1949 iggy 1.15
1950     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1951     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1952     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1953     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1954 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1955 frogger 1.14
1956     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1957     hardened-sources-2.4.22.ebuild:
1958 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1959     components. These are no longer handled in the kernel
1960     so this code was not necessary.
1961 frogger 1.13
1962     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1963     New 2.4.22 based hardened-sources thanks to
1964     Phil West <p.west@computer.org>.
1965    
1966     These sources include:
1967 plasmaroo 1.18 - New SELinux API
1968     - Updated CK-base
1969     - Updated GRSec
1970     - Systrace
1971     - SuperFreeS/WAN 1.99.8
1972     - Propolice kernel build support
1973     - EVMS
1974     - Other various security related patches
1975 frogger 1.11
1976 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1977    
1978     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1979     Updated hardened-sources based on the 2.4.21 Linux kernel.
1980     This includes updates to most major components such as:
1981 plasmaroo 1.18 - ck-base-0306300059
1982     - selinux-2.4-2003071106
1983     - grsecurity-2.0-rc1
1984     - Updated IPTables patch-o-matic
1985     - Updated SuperFreeS/WAN
1986    
1987 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1988     updated patch set ready for the 2.4.21 based kernel.
1989    
1990 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1991     Initial import of hardened-sources-2.4.20-r4. This revision
1992     includes only a few changes, but one of these is an important
1993     security fix. It is recommended all users of hardened-sources
1994     upgrade to this release.
1995 plasmaroo 1.18
1996 frogger 1.11 - ioperm bug fix
1997     - fixed compilation failure when building without GRSec
1998 plasmaroo 1.18
1999 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
2000     due to time constraints, but is planned for inclusion in the near
2001     future.
2002 msterret 1.10
2003     *hardened-sources-2.4.20-r2 (12 Jun 2003)
2004    
2005     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
2006     hardened-sources-2.4.20-r3.ebuild:
2007 plasmaroo 1.18 Add Header...
2008 frogger 1.9
2009     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2010     hardened-sources-2.4.20-r3.ebuild:
2011     Removed warnings from ebuild. This kernel should be safe to
2012     use at this point.
2013 frogger 1.8
2014     *hardened-sources-2.4.20-r3 (08 Jun 2003)
2015    
2016     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2017     hardened-sources-2.4.20-r3.ebuild:
2018     New revision. Includes the following changes over -r2:
2019 plasmaroo 1.18
2020 frogger 1.8 - ck7-base (O(1), preempt, low latency)
2021     - Super FreeS/WAN 1.99.7rc2
2022     - PaX for the LSM/SELinux branch
2023     - GRSecurity 2.0-pre4 (role based access control)
2024     - Systrace 1.3
2025     - EXT3 fixes
2026     - EVMS 2.0.1
2027     - GCC 3.1+ compile optimizations
2028     - ProPolice kernel build support
2029     - Hashing table security fixes
2030 frogger 1.3
2031     *hardened-sources-2.4.20-r1 (09 Apr 2003)
2032 frogger 1.7
2033     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
2034     Initial import of hardened-sources-r2. This new
2035     ebuild includes many new performance and security
2036     related patches. As in -r1, it will patch in
2037     LSM/SELinux if "selinux" is in USE, otherwise it
2038     will patch in GRSecurity. The following patches
2039     are included in this revision:
2040 plasmaroo 1.18
2041 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
2042     (pulled from the base CK patch)
2043     - ptrace exploit patch for the LSM kernel
2044     (the GRSec patch already fixes this)
2045     - LSM 2.4-2003040709
2046     - SELinux 2.4-2003040709
2047     - Systrace v1.2
2048     - IPTables patch-o-matic base patches - 20030107
2049     - CryptoAPI 2.4.20.1 w/ loop-jari patch
2050     - Super FreeS/WAN 1.99.6.1
2051     - GRSecurity 1.9.9g
2052     - MPPE
2053     - EXT3 data journal fix
2054     - CIPE 1.5.4
2055 frogger 1.6
2056     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2057     hardened-sources-2.4.20-r1.ebuild, manifest:
2058 plasmaroo 1.18 Updated to install flask components correctly for selinux.
2059 frogger 1.5
2060     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2061     hardened-sources-2.4.20-r1.ebuild:
2062     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2063     is patched in instead. Ptrace patches for selinux have also been added. In
2064     either case, systrace support will be patched in as well.
2065 frogger 1.3
2066     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2067     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2068 plasmaroo 1.18 Revision bump for new sources.
2069 frogger 1.4
2070 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2071 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
2072 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2073 method 1.1
2074 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
2075    
2076 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2077     hardened-sources-2.4.20.ebuild:
2078 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20