/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.350 - (hide annotations) (download)
Sun Oct 24 17:17:18 2010 UTC (3 years, 9 months ago) by blueness
Branch: MAIN
Changes since 1.349: +11 -1 lines
hardened-sources-2.6.32-r23 based on 2.6.32.24 + genpatches + grsec-2.2.0-2.6.32.24-201010232009
hardened-sources-2.6.35-r5 based on 2.6.35.7 + genpatches + grsec-2.2.0-2.6.35.7-201010232009

(Portage version: 2.1.9.16/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.350 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.349 2010/10/24 10:24:23 blueness Exp $
4    
5     *hardened-sources-2.6.35-r5 (24 Oct 2010)
6     *hardened-sources-2.6.32-r23 (24 Oct 2010)
7    
8     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
9     +hardened-sources-2.6.32-r23.ebuild, +hardened-sources-2.6.35-r5.ebuild:
10     hardened-sources-2.6.32-r23 based on 2.6.32.24 + genpatches +
11     grsec-2.2.0-2.6.32.24-201010232009
12     hardened-sources-2.6.35-r5 based on 2.6.35.7 + genpatches +
13     grsec-2.2.0-2.6.35.7-201010232009
14 blueness 1.349
15     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
16     hardened-sources-2.6.32-r22.ebuild:
17     Broken on ppc/ppc64, bug #341915#c6
18 blueness 1.348
19     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
20     -hardened-sources-2.6.32-r16.ebuild, -hardened-sources-2.6.32-r17.ebuild,
21     -hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.32-r19.ebuild,
22     -hardened-sources-2.6.32-r20.ebuild, -hardened-sources-2.6.32-r21.ebuild,
23     -hardened-sources-2.6.34-r4.ebuild, -hardened-sources-2.6.34-r5.ebuild,
24     -hardened-sources-2.6.35.ebuild, -hardened-sources-2.6.35-r1.ebuild,
25     -hardened-sources-2.6.35-r2.ebuild, -hardened-sources-2.6.35-r3.ebuild:
26     Removing vulnerable kernels where possible, bug #341801
27 blueness 1.347
28     21 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
29     hardened-sources-2.6.32-r22.ebuild:
30     x86 stable, bug #341915
31 blueness 1.346
32     20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
33     hardened-sources-2.6.32-r22.ebuild:
34     amd64 stable, bug #341915
35 blueness 1.345
36     *hardened-sources-2.6.35-r4 (20 Oct 2010)
37     *hardened-sources-2.6.32-r22 (20 Oct 2010)
38    
39     20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
40     +hardened-sources-2.6.32-r22.ebuild, +hardened-sources-2.6.35-r4.ebuild:
41     hardened-sources-2.6.32-r22 based on 2.6.32.24 + genpatches +
42     grsec-2.2.0-2.6.32.24-201010191911
43     hardened-sources-2.6.35-r4 based on 2.6.35.7 + genpatches +
44     grsec-2.2.0-2.6.35.7-201010191911
45     Addresses security bug #341801
46 blueness 1.344
47     *hardened-sources-2.6.35-r3 (16 Oct 2010)
48     *hardened-sources-2.6.32-r21 (16 Oct 2010)
49    
50     16 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
51     +hardened-sources-2.6.32-r21.ebuild, +hardened-sources-2.6.35-r3.ebuild:
52     hardened-sources-2.6.32-r21 based on 2.6.32.24 + genpatches +
53     grsec-2.2.0-2.6.32.24-201010121028
54     hardened-sources-2.6.35-r3 based on 2.6.35.7 + genpatches +
55     grsec-2.2.0-2.6.35.7-201010121028
56 blueness 1.343
57     *hardened-sources-2.6.35-r2 (07 Oct 2010)
58    
59     07 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
60     +hardened-sources-2.6.35-r2.ebuild:
61     hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches +
62     grsec-2.2.0-2.6.35.7-201010021153
63 blueness 1.342
64     *hardened-sources-2.6.32-r20 (06 Oct 2010)
65    
66     06 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
67     +hardened-sources-2.6.32-r20.ebuild:
68     hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches +
69     grsec-2.2.0-2.6.32.24-201010021153
70 blueness 1.341
71     *hardened-sources-2.6.35-r1 (30 Sep 2010)
72     *hardened-sources-2.6.32-r19 (30 Sep 2010)
73    
74     30 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
75     +hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild:
76     hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches +
77     grsec-2.2.0-2.6.32.23-201009272133
78     hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches +
79     grsec-2.2.0-2.6.35.6-201009281623
80 blueness 1.340
81     *hardened-sources-2.6.35 (28 Sep 2010)
82    
83     28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
84     +hardened-sources-2.6.35.ebuild:
85     hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
86 blueness 1.339
87     21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
88     -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
89     hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
90     -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
91     Fast track stabilization. See bug #338273. Removed older versions.
92 blueness 1.338
93     *hardened-sources-2.6.34-r6 (17 Sep 2010)
94     *hardened-sources-2.6.32-r18 (17 Sep 2010)
95    
96     17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
97     +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
98     hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
99     grsec-2.2.0-2.6.32.21-201009162222
100     hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
101     grsec-2.2.0-2.6.34.7-201009162222
102     Addresses IA32 syscall exploit.
103 blueness 1.337
104     *hardened-sources-2.6.34-r5 (15 Sep 2010)
105     *hardened-sources-2.6.32-r17 (15 Sep 2010)
106    
107     15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
108     +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
109     hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
110     grsec-2.2.0-2.6.32.21-201009130811
111     hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
112     grsec-2.2.0-2.6.34.6-201009130754
113 blueness 1.336
114     *hardened-sources-2.6.34-r4 (07 Sep 2010)
115     *hardened-sources-2.6.32-r16 (07 Sep 2010)
116    
117     07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
118     +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
119     hardened-sources-2.6.32-r16 based on 2.6.32.21 +
120     grsec-2.2.0-2.6.32.21-201009032133
121     hardened-sources-2.6.34-r4 based on 2.6.34.6 +
122     grsec-2.2.0-2.6.34.6-201009041352
123 blueness 1.335
124     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
125     hardened-sources-2.6.32-r15 based on 2.6.32.21 +
126     grsec-2.2.0-2.6.32.21-201008292122
127     hardened-sources-2.6.34-r3 based on 2.6.34.6 +
128     grsec-2.2.0-2.6.34.6-201008292122
129 blueness 1.334
130     *hardened-sources-2.6.34-r3 (02 Sep 2010)
131     *hardened-sources-2.6.32-r15 (02 Sep 2010)
132    
133     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
134     -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
135     -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
136     +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
137     +hardened-sources-2.6.34-r3.ebuild:
138     Bumps and remove deprecated versions
139 blueness 1.333
140     *hardened-sources-2.6.34-r2 (21 Aug 2010)
141    
142     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
143     +hardened-sources-2.6.34-r2.ebuild:
144     Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
145 blueness 1.332
146     *hardened-sources-2.6.32-r14 (21 Aug 2010)
147    
148     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
149     +hardened-sources-2.6.32-r14.ebuild:
150     Based on vanilla 2.6.32.19 + genpatches +
151     grsec-2.2.0-2.6.32.19-201008131840
152 blueness 1.331
153     *hardened-sources-2.6.32-r13 (14 Aug 2010)
154    
155     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
156     +hardened-sources-2.6.32-r13.ebuild:
157     Based on vanilla 2.6.32.18 + genpatches +
158     grsecurity-2.2.0-2.6.32.18-201008112233
159 robbat2 1.330
160     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
161     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
162 blueness 1.329
163     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
164     hardened-sources-2.6.32-r9.ebuild:
165     Stable ppc64. Bug #326885
166 blueness 1.328
167     *hardened-sources-2.6.32-r12 (24 Jul 2010)
168    
169     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
170     +hardened-sources-2.6.32-r12.ebuild:
171     Parallels fix incorporated into hardened-sources-2.6.34-r1
172 blueness 1.327
173     *hardened-sources-2.6.34-r1 (24 Jul 2010)
174    
175     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
176     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
177     Fixes bug #328275
178 chainsaw 1.326
179     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
180     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
181     on gentoo-dev.
182 jer 1.325
183     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
184     Correct mail address.
185 blueness 1.324
186     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
187     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
188     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
189     -hardened-sources-2.6.32-r8.ebuild:
190     Removing outdated releases
191 fauli 1.323
192     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
193     hardened-sources-2.6.32-r9.ebuild:
194     stable x86, bug 326885
195 blueness 1.322
196     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
197     -hardened-sources-2.6.32-r7.ebuild:
198     Removed for security. Bug #325573
199 blueness 1.321
200     *hardened-sources-2.6.34 (13 Jul 2010)
201    
202     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
203     +hardened-sources-2.6.34.ebuild:
204     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
205 blueness 1.320
206     *hardened-sources-2.6.32-r11 (13 Jul 2010)
207    
208     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
209     +hardened-sources-2.6.32-r11.ebuild:
210     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
211 chainsaw 1.319
212     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
213     Marked stable on AMD64 as requested by Anthony G. Basile
214     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
215     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
216 blueness 1.318
217     *hardened-sources-2.6.32-r10 (30 Jun 2010)
218    
219     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
220     +hardened-sources-2.6.32-r10.ebuild:
221     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
222 blueness 1.317
223     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
224     Added myself to the metadata.xml
225 chainsaw 1.316
226     *hardened-sources-2.6.32-r9 (11 Jun 2010)
227    
228     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
229     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
230 chainsaw 1.315
231     *hardened-sources-2.6.32-r8 (01 Jun 2010)
232    
233     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
234     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
235 chainsaw 1.314
236     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
237     Update SRC_URI to point to mirror network now that the distfile has
238     propagated.
239 chainsaw 1.313
240     *hardened-sources-2.6.32-r7 (26 May 2010)
241    
242     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
243     metadata.xml:
244     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
245     Summers.
246 robbat2 1.312
247     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
248     Update Manifest for deblob support in kernel-2 eclass.
249 nixnut 1.311
250     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
251     ppc stable
252 gengor 1.310
253     29 May 2009; Gordon Malm <gengor@gentoo.org>
254     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
255     Stable amd64/x86 and remove old.
256 gengor 1.309
257     *hardened-sources-2.6.29 (25 May 2009)
258    
259     25 May 2009; Gordon Malm <gengor@gentoo.org>
260     +hardened-sources-2.6.29.ebuild:
261     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
262     release candidates.
263 gengor 1.308
264     *hardened-sources-2.6.28-r9 (25 May 2009)
265    
266     25 May 2009; Gordon Malm <gengor@gentoo.org>
267     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
268     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
269 gengor 1.307
270     *hardened-sources-2.6.28-r8 (18 May 2009)
271    
272     18 May 2009; Gordon Malm <gengor@gentoo.org>
273     +hardened-sources-2.6.28-r8.ebuild:
274     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
275     and #262862 among others.
276 gengor 1.306
277     01 May 2009; Gordon Malm <gengor@gentoo.org>
278     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
279     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
280     Remove unnecessary mirror://gentoo from SRC_URI.
281 nixnut 1.305
282     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
283     ppc stable
284 gengor 1.304
285     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
286     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
287     Stable amd64/x86 and remove old.
288 gengor 1.303
289     *hardened-sources-2.6.28-r7 (27 Mar 2009)
290    
291     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
292     +hardened-sources-2.6.28-r7.ebuild:
293     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
294 gengor 1.302
295     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
296     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
297     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
298     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
299     Stable amd64/x86 and remove old versions.
300 nixnut 1.301
301     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
302     ppc stable
303 gengor 1.300
304     *hardened-sources-2.6.28-r6 (21 Mar 2009)
305    
306     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
307     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
308     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
309 gengor 1.299
310     *hardened-sources-2.6.28-r5 (20 Mar 2009)
311    
312     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
313     +hardened-sources-2.6.28-r5.ebuild:
314     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
315 gengor 1.298
316     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
317     hardened-sources-2.6.28-r4.ebuild:
318     Stable amd64/x86.
319 gengor 1.297
320     *hardened-sources-2.6.28-r4 (18 Mar 2009)
321    
322     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
323     +hardened-sources-2.6.28-r4.ebuild:
324     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
325     compilation with CPA_DEBUG and more.
326 gengor 1.296
327     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
328     hardened-sources-2.6.28-r3.ebuild:
329     Quick stable amd64/x86.
330 gengor 1.295
331     *hardened-sources-2.6.28-r3 (15 Mar 2009)
332    
333     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
334     +hardened-sources-2.6.28-r3.ebuild:
335     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
336 nixnut 1.294
337     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
338     ppc stable
339 gengor 1.293
340     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
341     hardened-sources-2.6.28-r2.ebuild:
342     Stable amd64/x86.
343 gengor 1.292
344     *hardened-sources-2.6.28-r2 (11 Mar 2009)
345    
346     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
347     +hardened-sources-2.6.28-r2.ebuild:
348     Version bump bringing in latest grsecurity patch.
349 gengor 1.291
350     *hardened-sources-2.6.28-r1 (09 Mar 2009)
351    
352     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
353     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
354     Version bump and remove old.
355 nixnut 1.290
356     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
357     ppc stable
358 gengor 1.289
359     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
360     hardened-sources-2.6.27-r8.ebuild:
361     Remove amd64 testing keyword, bug 256226.
362 gengor 1.288
363     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
364     hardened-sources-2.6.27-r8.ebuild:
365     Revert amd64 stable, bug #256226.
366 gengor 1.287
367     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
368     hardened-sources-2.6.27-r8.ebuild:
369     Stable on amd64/x86.
370 gengor 1.286
371     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
372     -hardened-sources-2.6.27-r6.ebuild:
373     Remove old 2.6.27 release.
374 gengor 1.285
375     *hardened-sources-2.6.27-r8 (24 Feb 2009)
376    
377     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
378     +hardened-sources-2.6.27-r8.ebuild:
379     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
380     and probably more.
381 nixnut 1.284
382     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
383     ppc stable
384 gengor 1.283
385     *hardened-sources-2.6.28 (25 Jan 2009)
386    
387     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
388     +hardened-sources-2.6.28.ebuild:
389     Initial 2.6.28 release.
390 gengor 1.282
391     *hardened-sources-2.6.27-r7 (25 Jan 2009)
392    
393     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
394     +hardened-sources-2.6.27-r7.ebuild:
395     Bump to Linux 2.6.27.13.
396 gengor 1.281
397     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
398     hardened-sources-2.6.26-r9.ebuild:
399     Stable amd64/x86.
400 gengor 1.280
401     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
402     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
403     -hardened-sources-2.6.27-r5.ebuild:
404     Remove problem versions.
405 gengor 1.279
406     *hardened-sources-2.6.27-r6 (24 Jan 2009)
407    
408     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
409     +hardened-sources-2.6.27-r6.ebuild:
410     Revert PaX test29 to test30 changes. Fixes bug 256226.
411 gengor 1.277
412     *hardened-sources-2.6.27-r5 (24 Jan 2009)
413    
414     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
415     +hardened-sources-2.6.27-r5.ebuild:
416 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
417 gengor 1.277 254843.
418 gengor 1.276
419     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
420     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
421     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
422     Remove problem versions.
423 nixnut 1.275
424     23 Jan 2009; nixnut <nixnut@gentoo.org>
425     hardened-sources-2.6.25-r13.ebuild:
426     ppc stable
427 gengor 1.274
428     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
429     hardened-sources-2.6.25-r13.ebuild:
430     Fasttrack stable amd64/x86.
431 gengor 1.273
432     *hardened-sources-2.6.26-r9 (21 Jan 2009)
433    
434     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
435     +hardened-sources-2.6.26-r9.ebuild:
436 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
437 gengor 1.272
438     *hardened-sources-2.6.25-r13 (20 Jan 2009)
439    
440     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
441     +hardened-sources-2.6.25-r13.ebuild:
442 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
443 nixnut 1.271
444     20 Jan 2009; nixnut <nixnut@gentoo.org>
445     hardened-sources-2.6.25-r12.ebuild:
446     ppc stable
447 gengor 1.270
448     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
449     hardened-sources-2.6.25-r12.ebuild:
450     Stable amd64/x86.
451 gengor 1.269
452     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
453     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
454     -hardened-sources-2.6.27-r2.ebuild:
455     Clean out old versions.
456 gengor 1.268
457     *hardened-sources-2.6.27-r4 (14 Jan 2009)
458     *hardened-sources-2.6.26-r8 (14 Jan 2009)
459     *hardened-sources-2.6.25-r12 (14 Jan 2009)
460    
461     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
462     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
463     +hardened-sources-2.6.27-r4.ebuild:
464     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
465     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
466     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
467     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
468 nixnut 1.267
469     15 Dec 2008; nixnut <nixnut@gentoo.org>
470     hardened-sources-2.6.25-r11.ebuild:
471     Stable on ppc
472 gengor 1.266
473     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
474     hardened-sources-2.6.25-r11.ebuild:
475     Stable amd64/x86.
476 gengor 1.265
477     *hardened-sources-2.6.27-r3 (07 Dec 2008)
478    
479     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
480     +hardened-sources-2.6.27-r3.ebuild:
481     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
482     Fixes bug #248754, #249729 and #246607.
483 gengor 1.264
484     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
485     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
486     Remove old versions.
487 gengor 1.262
488     *hardened-sources-2.6.26-r7 (03 Dec 2008)
489     *hardened-sources-2.6.25-r11 (03 Dec 2008)
490    
491 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
492     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
493 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
494     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
495     Both include many backports from 2.6.27.{6,7} -stable releases.
496 gengor 1.261
497     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
498     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
499     Remove versions broken on ARCHes != x86/amd64.
500 gengor 1.260
501     *hardened-sources-2.6.27-r2 (24 Nov 2008)
502    
503     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
504     +hardened-sources-2.6.27-r2.ebuild:
505     Bump to Linux 2.6.27.7 and latest grsecurity patch.
506 gengor 1.259
507     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
508     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
509     Remove old versions.
510 gengor 1.258
511     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
512     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
513     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
514 nixnut 1.257
515     16 Nov 2008; nixnut <nixnut@gentoo.org>
516     hardened-sources-2.6.25-r10.ebuild:
517     Stable on ppc
518 gengor 1.256
519     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
520     hardened-sources-2.6.25-r10.ebuild:
521     Stable amd64/x86.
522 gengor 1.255
523     *hardened-sources-2.6.26-r6 (12 Nov 2008)
524    
525     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
526     +hardened-sources-2.6.26-r6.ebuild:
527     Bump to Linux 2.6.26.8 and fix security bug #245650.
528 gengor 1.254
529     *hardened-sources-2.6.25-r10 (12 Nov 2008)
530    
531     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
532     +hardened-sources-2.6.25-r10.ebuild:
533     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
534 gengor 1.253
535     *hardened-sources-2.6.27-r1 (09 Nov 2008)
536    
537     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
538     +hardened-sources-2.6.27-r1.ebuild:
539     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
540 gengor 1.252
541     *hardened-sources-2.6.27 (04 Nov 2008)
542    
543     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
544     +hardened-sources-2.6.27.ebuild:
545     Initial 2.6.27 release.
546 gengor 1.251
547     *hardened-sources-2.6.26-r5 (03 Nov 2008)
548    
549     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
550     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
551     +hardened-sources-2.6.26-r5.ebuild:
552     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
553     Clean out some old versions.
554 nixnut 1.250
555     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
556     Stable on ppc
557 gengor 1.249
558     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
559     hardened-sources-2.6.25-r9.ebuild:
560     Stable on amd64/x86.
561 gengor 1.248
562     *hardened-sources-2.6.25-r9 (26 Oct 2008)
563    
564     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
565     +hardened-sources-2.6.25-r9.ebuild:
566     Update to Linux 2.6.25.19
567 nixnut 1.247
568     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
569     Stable on ppc
570 gengor 1.246
571     *hardened-sources-2.6.26-r4 (14 Oct 2008)
572    
573     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
574     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
575     Update to latest grsecurity patch, fixing building of non-modular kernels.
576 gengor 1.245
577     *hardened-sources-2.6.26-r3 (12 Oct 2008)
578    
579     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
580     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
581     +hardened-sources-2.6.26-r3.ebuild:
582     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
583     2.6.26-r1: Removed.
584     2.6.25-r8: Stable amd64/x86.
585 gengor 1.244
586     *hardened-sources-2.6.25-r8 (09 Oct 2008)
587    
588     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
589     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
590     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
591     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
592 nixnut 1.243
593     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
594     Stable on ppc
595 gengor 1.242
596     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
597     hardened-sources-2.6.25-r7.ebuild:
598     Stable amd64/x86.
599 gengor 1.241
600     *hardened-sources-2.6.26-r2 (13 Sep 2008)
601    
602     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
603     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
604     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
605     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
606 gengor 1.240
607     *hardened-sources-2.6.25-r7 (13 Sep 2008)
608    
609     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
610     +hardened-sources-2.6.25-r7.ebuild:
611     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
612 gengor 1.239
613     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
614     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
615     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
616     hardened-sources-2.6.26-r1.ebuild:
617     Update DESCRIPTION and HGPV_URI.
618 gengor 1.238
619     *hardened-sources-2.6.25-r6 (09 Sep 2008)
620    
621     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
622     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
623     2.6.25-r6: Update to Linux 2.6.25.17.
624     2.6.24-r3: Removed.
625 gengor 1.237
626     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
627     hardened-sources-2.6.25-r5.ebuild:
628     Stable on amd64/x86
629 gengor 1.236
630     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
631     Update my email address.
632 nixnut 1.235
633     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
634     stable on ppc
635 battousai 1.234
636     *hardened-sources-2.6.26-r1 (23 Aug 2008)
637     *hardened-sources-2.6.25-r5 (23 Aug 2008)
638    
639     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
640     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
641     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
642     +hardened-sources-2.6.26-r1.ebuild:
643     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
644     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
645     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
646     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
647     (gengor).
648 solar 1.233
649     *hardened-sources-2.6.26 (18 Aug 2008)
650     *hardened-sources-2.6.25-r4 (18 Aug 2008)
651    
652     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
653     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
654     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
655     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
656     2.6.25-r2: Removed.
657 tove 1.232
658     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
659     Remove phreak from metadata.xml (#96398)
660 solar 1.231
661     *hardened-sources-2.6.25-r3 (31 Jul 2008)
662    
663     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
664     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
665     +hardened-sources-2.6.25-r3.ebuild:
666     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
667     fixes, including security bug #231750.
668 nixnut 1.230
669     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
670     Stable on ppc
671 solar 1.229
672     *hardened-sources-2.6.25-r2 (05 Jul 2008)
673    
674     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
675     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
676     +hardened-sources-2.6.25-r2.ebuild:
677     2.6.23-r4: Stable x86/amd64
678     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
679     2.6.23-r{11,12}: Removed due to multiple vulns.
680     (gengor & kerframil)
681 nixnut 1.228
682     04 Jul 2008; nixnut <nixnut@gentoo.org>
683     hardened-sources-2.6.23-r13.ebuild:
684     Stable on ppc
685 solar 1.227
686     *hardened-sources-2.6.25-r1 (30 Jun 2008)
687    
688     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
689     +hardened-sources-2.6.25-r1.ebuild:
690     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
691     grsecurity release. 2.6.23-r13: x86/amd64 stable
692 solar 1.226
693     *hardened-sources-2.6.25 (17 Jun 2008)
694     *hardened-sources-2.6.24-r3 (17 Jun 2008)
695     *hardened-sources-2.6.23-r13 (17 Jun 2008)
696    
697     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
698     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
699     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
700     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
701     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
702     2.6.25: Initial 2.6.25 release.
703 solar 1.225
704     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
705     - fasttrack to stable x86/amd64
706 swegener 1.224
707     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
708     Fix broken digest for linux-2.6.24.tar.bz2.
709 solar 1.223
710     *hardened-sources-2.6.24-r2 (11 May 2008)
711     *hardened-sources-2.6.23-r12 (11 May 2008)
712    
713     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
714     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
715     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
716     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
717     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
718     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
719     security bugs 219901, 220691, 220975, 220979, 221123. New
720     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
721     should be removed as far as I'm concerned, everything else remove due to
722     vulnerable to numerous security bugs or brokeness.
723 nixnut 1.222
724     10 May 2008; nixnut <nixnut@gentoo.org>
725     hardened-sources-2.6.23-r11.ebuild:
726     Stable on ppc
727 solar 1.221
728     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
729     - -r11 stable on x86/amd64
730 solar 1.220
731     *hardened-sources-2.6.23-r11 (01 May 2008)
732    
733     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
734     - version bump to fix ulgy linux bugs
735 phreak 1.219
736     *hardened-sources-2.6.24-r1 (30 Apr 2008)
737    
738     30 Apr 2008; Christian Heim <phreak@gentoo.org>
739     +hardened-sources-2.6.24-r1.ebuild:
740     Revision bump (thanks to Kerin and Gordon, again), pulling
741     genpatches-2.6.24-7, solving #219089. Additionally contains further security
742     fixes plus some minor updates.
743 phreak 1.218
744     *hardened-sources-2.6.23-r10 (30 Apr 2008)
745    
746     30 Apr 2008; Christian Heim <phreak@gentoo.org>
747     +hardened-sources-2.6.23-r10.ebuild:
748     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
749     Additional contains "various other fixes".
750 phreak 1.217
751     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
752     Update the longdescription in metadata, thanks to Gordon Malm.
753 nixnut 1.216
754     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
755     Stable on ppc wrt bug #213255
756 solar 1.215
757     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
758     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
759     - stable on x86/amd64 per request. Removed obsolete ebuilds
760 phreak 1.214
761     *hardened-sources-2.6.24 (07 Apr 2008)
762    
763     07 Apr 2008; Christian Heim <phreak@gentoo.org>
764     +hardened-sources-2.6.24.ebuild:
765     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
766     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
767     for the many contributions and their continued effort in #216612) based on
768     2.6.24 and genpatches-2.6.24-5.
769    
770     The current ebuild/patchset contains these things:
771     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
772     * Introduces bespoke server and workstation oriented security levels
773     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
774 phreak 1.213
775     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
776     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
777     maintaining it).
778 phreak 1.212
779     24 Mar 2008; Christian Heim <phreak@gentoo.org>
780     hardened-sources-2.4.35-r2.ebuild:
781     Fixing SRC_URI for 2.4.35-r2.
782 phreak 1.211
783     *hardened-sources-2.6.23-r9 (22 Mar 2008)
784    
785     22 Mar 2008; Christian Heim <phreak@gentoo.org>
786     +hardened-sources-2.6.23-r9.ebuild:
787     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
788     * Change the default GIDs for some grsecurity options
789     * Revamp the Hardened [Gentoo] security level and make it the default level
790     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
791     * Fix a recursive lock -- call to capable() within ptrace_attach()
792     * Fix bug that allows audit and iscsi operations to be controlled via netlink
793 solar 1.210
794     *hardened-sources-2.6.23-r8 (27 Feb 2008)
795    
796     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
797     - version bump from Kerin Millar bug 210026
798 solar 1.209
799     17 Feb 2008; <solar@gentoo.org> metadata.xml,
800     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
801     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
802     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
803     - stable on x86 and remove old ebuilds
804 solar 1.207
805     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
806 solar 1.208 - stable on amd64 per request of amd64 lead
807 solar 1.206
808     *hardened-sources-2.6.23-r7 (11 Feb 2008)
809    
810     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
811     - version bump from kerin.millar
812     Changes:
813    
814     * Bump to genpatches-base-2.6.23-9
815     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
816     * Disables COMPAT_VDSO in x86/defconfig
817     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
818 phreak 1.205
819     25 Jan 2008; Christian Heim <phreak@gentoo.org>
820     -hardened-sources-2.6.22-r8.ebuild:
821     Cleaning up old versions.
822 phreak 1.204
823     *hardened-sources-2.6.23-r6 (25 Jan 2008)
824    
825     25 Jan 2008; Christian Heim <phreak@gentoo.org>
826     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
827     Revision bump, pulling in the latest genpatches.
828 phreak 1.203
829     *hardened-sources-2.6.23-r5 (24 Dec 2007)
830    
831     24 Dec 2007; Christian Heim <phreak@gentoo.org>
832     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
833     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
834     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
835     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
836 phreak 1.202
837     24 Dec 2007; Christian Heim <phreak@gentoo.org>
838     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
839     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
840     -hardened-sources-2.6.23-r3.ebuild:
841     Cleaning out some unused, old versions.
842 phreak 1.201
843     24 Dec 2007; Christian Heim <phreak@gentoo.org>
844     hardened-sources-2.6.23-r4.ebuild:
845     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
846     in the tree for long, but there isn't much of a difference between this and
847     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
848 phreak 1.200
849     *hardened-sources-2.6.23-r4 (23 Dec 2007)
850    
851     23 Dec 2007; Christian Heim <phreak@gentoo.org>
852     +hardened-sources-2.6.23-r4.ebuild:
853     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
854 phreak 1.199
855     *hardened-sources-2.6.23-r3 (04 Dec 2007)
856    
857     04 Dec 2007; Christian Heim <phreak@gentoo.org>
858     +hardened-sources-2.6.23-r3.ebuild:
859     Revision bump, pulling in 2.6.23.9.
860 phreak 1.198
861     *hardened-sources-2.6.23-r2 (25 Nov 2007)
862    
863     25 Nov 2007; Christian Heim <phreak@gentoo.org>
864     +hardened-sources-2.6.23-r2.ebuild:
865     Updated patchset, thanks to solar.
866 phreak 1.197
867     *hardened-sources-2.6.23-r1 (31 Oct 2007)
868    
869     31 Oct 2007; Christian Heim <phreak@gentoo.org>
870     +hardened-sources-2.6.23-r1.ebuild:
871     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
872 solar 1.196
873     29 Oct 2007; <solar@gentoo.org> metadata.xml:
874     - update metadata.xml
875 phreak 1.195
876     25 Oct 2007; Christian Heim <phreak@gentoo.org>
877     hardened-sources-2.6.22-r8.ebuild:
878     Marking 2.6.22-r8 stable on amd64 and x86.
879 phreak 1.194
880     21 Oct 2007; Christian Heim <phreak@gentoo.org>
881     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
882     -hardened-sources-2.6.21-r4.ebuild:
883     Removing old ebuilds.
884 phreak 1.193
885     *hardened-sources-2.4.35-r2 (21 Oct 2007)
886    
887     21 Oct 2007; Christian Heim <phreak@gentoo.org>
888     +hardened-sources-2.4.35-r2.ebuild:
889     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
890     patches.
891 phreak 1.192
892     *hardened-sources-2.6.22-r8 (21 Oct 2007)
893    
894     21 Oct 2007; Christian Heim <phreak@gentoo.org>
895     +hardened-sources-2.6.22-r8.ebuild:
896     Yet another new patch, hopefully fixing the remaining issues we had w/
897     2.6.22. Candidate for stabling.
898 phreak 1.191
899     *hardened-sources-2.6.23 (13 Oct 2007)
900    
901     13 Oct 2007; Christian Heim <phreak@gentoo.org>
902     +hardened-sources-2.6.23.ebuild:
903     Initial hardened-sources-2.6.23. If people still have problems w/ bug
904     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
905 phreak 1.190
906     11 Oct 2007; Christian Heim <phreak@gentoo.org>
907     hardened-sources-2.6.20-r10.ebuild:
908     Pulling in yet another new genpatches version, fixing the PWC bug for real.
909 phreak 1.189
910     04 Oct 2007; Christian Heim <phreak@gentoo.org>
911     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
912     Removing old versions.
913 phreak 1.188
914     *hardened-sources-2.6.22-r7 (01 Oct 2007)
915    
916     01 Oct 2007; Christian Heim <phreak@gentoo.org>
917     +hardened-sources-2.6.22-r7.ebuild:
918     Revision bump, pulling in a newer patch. Should fix #194276.
919 phreak 1.187
920     30 Sep 2007; Christian Heim <phreak@gentoo.org>
921     hardened-sources-2.6.20-r10.ebuild:
922     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
923     Mike Doty).
924 phreak 1.186
925     *hardened-sources-2.6.22-r6 (26 Sep 2007)
926    
927     26 Sep 2007; Christian Heim <phreak@gentoo.org>
928     +hardened-sources-2.6.22-r6.ebuild:
929     Revision bump, grabbing up till Linux 2.6.22.9.
930 phreak 1.185
931     24 Sep 2007; Christian Heim <phreak@gentoo.org>
932     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
933     Cleaning up further.
934 phreak 1.184
935     *hardened-sources-2.6.20-r10 (24 Sep 2007)
936    
937     24 Sep 2007; Christian Heim <phreak@gentoo.org>
938     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
939     +hardened-sources-2.6.20-r10.ebuild:
940     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
941     revisions.
942 phreak 1.183
943     *hardened-sources-2.6.22-r5 (22 Sep 2007)
944    
945     22 Sep 2007; Christian Heim <phreak@gentoo.org>
946     +hardened-sources-2.6.22-r5.ebuild:
947     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
948 phreak 1.182
949     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
950     Removing johnm from metadata.xml (see #186467 for reference).
951 phreak 1.181
952     *hardened-sources-2.6.22-r4 (17 Sep 2007)
953    
954     17 Sep 2007; Christian Heim <phreak@gentoo.org>
955     +hardened-sources-2.6.22-r4.ebuild:
956     Revision bump, hopefully fixing all those weird PAX failures.
957 phreak 1.180
958     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
959     Updating the metadata.xml.
960 phreak 1.179
961     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
962     Removing tocharian from metadata due to his retirement (see #71718 for
963     reference).
964 phreak 1.178
965     *hardened-sources-2.6.20-r9 (30 Aug 2007)
966    
967     30 Aug 2007; Christian Heim <phreak@gentoo.org>
968     +hardened-sources-2.6.20-r9.ebuild:
969     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
970 phreak 1.177
971     29 Aug 2007; Christian Heim <phreak@gentoo.org>
972     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
973     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
974     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
975     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
976     -hardened-sources-2.6.22-r2.ebuild:
977     Removing some redundant versions.
978 phreak 1.176
979     *hardened-sources-2.4.35-r1 (29 Aug 2007)
980    
981     29 Aug 2007; Christian Heim <phreak@gentoo.org>
982     +hardened-sources-2.4.35-r1.ebuild:
983     Revision bump, new grsecurity patch.
984 phreak 1.175
985     *hardened-sources-2.6.20-r8 (26 Aug 2007)
986    
987     26 Aug 2007; Christian Heim <phreak@gentoo.org>
988     +hardened-sources-2.6.20-r8.ebuild:
989     Revision bump for Linux 2.6.20.17.
990 phreak 1.174
991     *hardened-sources-2.6.22-r3 (22 Aug 2007)
992    
993     22 Aug 2007; Christian Heim <phreak@gentoo.org>
994     +hardened-sources-2.6.22-r3.ebuild:
995     Revision bump for Linux 2.6.22.4.
996 phreak 1.173
997     16 Aug 2007; Christian Heim <phreak@gentoo.org>
998     hardened-sources-2.6.22-r2.ebuild:
999     Updated patchset, to fix the alignment against 2.6.22.3.
1000 phreak 1.172
1001     *hardened-sources-2.6.22-r2 (16 Aug 2007)
1002    
1003     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1004     +hardened-sources-2.6.22-r2.ebuild:
1005     Revision bump for Linux 2.6.22.3.
1006 phreak 1.171
1007     *hardened-sources-2.4.35 (16 Aug 2007)
1008    
1009     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1010     +hardened-sources-2.4.35.ebuild:
1011     Version bump, initial version for Linux 2.4.35.
1012 phreak 1.170
1013     *hardened-sources-2.6.21-r4 (16 Aug 2007)
1014    
1015     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1016     +hardened-sources-2.6.21-r4.ebuild:
1017     Revision bump for Linux 2.6.21.6.
1018 phreak 1.169
1019     *hardened-sources-2.6.20-r7 (16 Aug 2007)
1020    
1021     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1022     +hardened-sources-2.6.20-r7.ebuild:
1023     Revision bump for Linux 2.6.20.16.
1024 phreak 1.168
1025     *hardened-sources-2.6.22-r1 (13 Aug 2007)
1026    
1027     13 Aug 2007; Christian Heim <phreak@gentoo.org>
1028     +hardened-sources-2.6.22-r1.ebuild:
1029     Yet another revision bump.
1030 phreak 1.167
1031     *hardened-sources-2.6.22 (10 Aug 2007)
1032    
1033     10 Aug 2007; Christian Heim <phreak@gentoo.org>
1034     +hardened-sources-2.6.22.ebuild:
1035     Initial release for 2.6.22. If you are using hardened-sources on a desktop
1036     machine (P4 or newer), be aware you might need to disable
1037     CONFIG_PAX_PAGEEXEC.
1038 phreak 1.166
1039     04 Aug 2007; Christian Heim <phreak@gentoo.org>
1040     hardened-sources-2.6.20-r6.ebuild:
1041     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
1042     2.6.20.15.
1043 phreak 1.165
1044     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1045     hardened-sources-2.6.20-r5.ebuild:
1046     Marking hardened-sources-2.6.20-r5 stable on ppc.
1047 phreak 1.164
1048     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1049     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
1050     Cleanup.
1051 phreak 1.163
1052     *hardened-sources-2.6.20-r6 (08 Jul 2007)
1053    
1054     08 Jul 2007; Christian Heim <phreak@gentoo.org>
1055     +hardened-sources-2.6.20-r6.ebuild:
1056     Revision bump, grabbing yet another stable release.
1057 phreak 1.162
1058     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1059     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
1060     -hardened-sources-2.6.21-r2.ebuild:
1061     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
1062     alpha stable KEYWORD by mistake.
1063 phreak 1.161
1064     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1065     hardened-sources-2.6.20-r5.ebuild:
1066     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
1067     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
1068 phreak 1.160
1069     *hardened-sources-2.6.21-r3 (12 Jun 2007)
1070    
1071     12 Jun 2007; Christian Heim <phreak@gentoo.org>
1072     +hardened-sources-2.6.21-r3.ebuild:
1073     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
1074     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
1075     love.
1076 phreak 1.159
1077     *hardened-sources-2.6.20-r5 (11 Jun 2007)
1078    
1079     11 Jun 2007; Christian Heim <phreak@gentoo.org>
1080     +hardened-sources-2.6.20-r5.ebuild:
1081     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1082     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1083     love.
1084 pappy 1.158
1085     *hardened-sources-2.4.34.5 (11 Jun 2007)
1086    
1087     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1088     +hardened-sources-2.4.34.5.ebuild:
1089     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1090 phreak 1.157
1091     30 May 2007; Christian Heim <phreak@gentoo.org>
1092     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1093     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1094     stale ebuild(s).
1095 phreak 1.156
1096     30 May 2007; Christian Heim <phreak@gentoo.org>
1097     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1098     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1099     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1100     Doing some cleanups, remove stale ebuilds.
1101 phreak 1.155
1102     26 May 2007; Christian Heim <phreak@gentoo.org>
1103     hardened-sources-2.6.21-r2.ebuild:
1104     Fixing the grsecurity patch, had one '};' too much.
1105 phreak 1.154
1106     *hardened-sources-2.6.21-r2 (26 May 2007)
1107    
1108     26 May 2007; Christian Heim <phreak@gentoo.org>
1109     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1110     +hardened-sources-2.6.21-r2.ebuild:
1111     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1112     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1113 phreak 1.153
1114     *hardened-sources-2.6.20-r4 (26 May 2007)
1115    
1116     26 May 2007; Christian Heim <phreak@gentoo.org>
1117     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1118     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1119 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1120 phreak 1.152
1121     15 May 2007; Christian Heim <phreak@gentoo.org>
1122     hardened-sources-2.6.20-r3.ebuild:
1123     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1124     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1125     grsecurity patch fail in that exact same hunk.
1126 phreak 1.151
1127     *hardened-sources-2.6.20-r3 (15 May 2007)
1128    
1129     15 May 2007; Christian Heim <phreak@gentoo.org>
1130     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1131     Revision bump, incorporating Linux 2.6.20.11.
1132    
1133     *hardened-sources-2.6.21-r1 (11 May 2007)
1134    
1135     11 May 2007; Christian Heim <phreak@gentoo.org>
1136     +hardened-sources-2.6.21-r1.ebuild:
1137     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1138     mentioned in #177234.
1139 kevquinn 1.150
1140     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1141     files/digest-hardened-sources-2.6.21, Manifest:
1142     Fix Manifest/digest for linux-2.6.21.tar.bz2
1143 phreak 1.149
1144     06 May 2007; Christian Heim <phreak@gentoo.org>
1145     hardened-sources-2.6.21.ebuild:
1146     Bumping the hardened-patches version, needed for the fix for #177234.
1147 phreak 1.148
1148     *hardened-sources-2.6.21 (02 May 2007)
1149    
1150     02 May 2007; Christian Heim <phreak@gentoo.org>
1151     +hardened-sources-2.6.21.ebuild:
1152     Version bump, Linux 2.6.21-hardened.
1153 phreak 1.147
1154     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1155     hardened-sources-2.6.20-r2.ebuild:
1156     Adding ~ia64 on Ned's request.
1157 phreak 1.146
1158     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1159     hardened-sources-2.6.20-r2.ebuild:
1160     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1161     header line(s).
1162 phreak 1.145
1163     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1164     hardened-sources-2.6.20-r2.ebuild:
1165     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1166 armin76 1.144
1167     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1168    
1169     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1170     +hardened-sources-2.6.20-r2.ebuild:
1171     Version bump, on behalf of phreak
1172 phreak 1.143
1173     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1174    
1175     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1176     +hardened-sources-2.6.20-r1.ebuild:
1177     Revision bump, grabbing a newer grsecurity snapshot.
1178 phreak 1.142
1179     *hardened-sources-2.6.20 (25 Mar 2007)
1180    
1181     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1182     +hardened-sources-2.6.20.ebuild:
1183     Finally a hardened-sources version for 2.6.20; many people have been waiting
1184     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1185     testbox.
1186 chainsaw 1.141
1187     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1188     hardened-sources-2.6.18-r6.ebuild:
1189     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1190 phreak 1.140
1191     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1192    
1193     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1194     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1195     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1196     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1197     supposed to be.
1198 phreak 1.139
1199     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1200     Fixing the Manifest, the previous one was broken (as in still had the
1201     deleted ebuild in it).
1202 phreak 1.138
1203     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1204     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1205     +hardened-sources-2.6.18-r5.ebuild:
1206     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1207     Linux 2.6.18.8. Also cleaning up the older version.
1208    
1209     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1210    
1211     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1212     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1213     +hardened-sources-2.6.18-r5.ebuild:
1214     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1215     Linux 2.6.18.8. Also cleaning up the older version.
1216 phreak 1.137
1217     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1218     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1219     -hardened-sources-2.6.19-r5.ebuild:
1220     Removing some of the old version, that didn't work.
1221 phreak 1.136
1222     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1223    
1224     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1225     +hardened-sources-2.6.19-r6.ebuild:
1226     Revision bump, including a new grsec version fixing #166235.
1227 pappy 1.134
1228     *hardened-sources-2.4.34 (24 Jan 2007)
1229    
1230     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1231 pappy 1.135 Manifest:
1232     updating Manifest with checksums of new tarball and ebuild
1233    
1234     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1235 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1236     I added new hardened sources 2.4 update, this is a critical path
1237     security bugfix - all users of h-s are strongly advised
1238     to update their existing hardened sources to this version.
1239     It contains a fix for a kernel vulnerability that is pertaining
1240     to the PaX changes to virtual memory management, possibly leading
1241     to a local kernel exploit ... see grsecurity.net forums and homepage
1242 phreak 1.133
1243     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1244     files/digest-hardened-sources-2.6.19-r5, Manifest:
1245     Fixing the patch-tarball digest.
1246 phreak 1.132
1247     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1248    
1249     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1250     +hardened-sources-2.6.19-r5.ebuild:
1251     Revision bump, closing the recently discovered PaX expand_stack()
1252     vulnerability.
1253 phreak 1.131
1254     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1255    
1256     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1257     +hardened-sources-2.6.19-r4.ebuild:
1258     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1259     dropping the randomized PID feature.
1260 opfer 1.130
1261     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1262     hardened-sources-2.4.33.4.ebuild:
1263     stable x86, bug #161171
1264 phreak 1.129
1265     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1266    
1267     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1268     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1269     Revision bump for bug #157186 and #158786.
1270 phreak 1.128
1271     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1272    
1273     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1274     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1275     Revision bump for bug #157186.
1276 phreak 1.127
1277     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1278    
1279     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1280     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1281     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1282 phreak 1.126
1283     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1284     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1285     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1286     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1287     hardened-sources-2.6.19-r1.ebuild:
1288     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1289     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1290 pappy 1.125
1291     *hardened-sources-2.4.33.4 (17 Dec 2006)
1292    
1293     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1294     +hardened-sources-2.4.33.4.ebuild:
1295     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1296     and quilting
1297 phreak 1.124
1298     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1299    
1300     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1301     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1302     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1303     for reporting).
1304 phreak 1.123
1305     *hardened-sources-2.6.19 (13 Dec 2006)
1306    
1307     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1308     +hardened-sources-2.6.19.ebuild:
1309     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1310     Brad for providing that prompt update.
1311 phreak 1.122
1312     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1313    
1314     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1315     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1316     +hardened-sources-2.6.18-r3.ebuild:
1317     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1318     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1319 phreak 1.121
1320     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1321     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1322 nixnut 1.120
1323     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1324     Stable on ppc wrt bug 157356
1325 opfer 1.119
1326     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1327     hardened-sources-2.6.18.ebuild:
1328     stable x86, bug #157356
1329 phreak 1.118
1330     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1331    
1332     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1333     +hardened-sources-2.6.18-r2.ebuild:
1334     Revision bump, including 2.6.18.5 (via genpatches) and
1335     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1336     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1337     redesign.
1338 phreak 1.117
1339     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1340     hardened-sources-2.6.18.ebuild:
1341     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1342     of Mike Doty).
1343 phreak 1.116
1344     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1345    
1346     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1347     +hardened-sources-2.6.18-r1.ebuild:
1348     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1349 phreak 1.115
1350     *hardened-sources-2.6.18 (11 Nov 2006)
1351    
1352     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1353     +hardened-sources-2.6.18.ebuild:
1354     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1355 solar 1.114
1356     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1357     - mark amd64 stable also. bug #151877
1358 solar 1.113
1359     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1360     - mark 2.6.17-r1 stable
1361 phreak 1.112
1362     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1363     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1364     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1365 phreak 1.111
1366     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1367    
1368     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1369     +hardened-sources-2.6.17-r1.ebuild:
1370     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1371     grsecurity patch.
1372 phreak 1.110
1373     *hardened-sources-2.6.17 (17 Aug 2006)
1374    
1375     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1376     +hardened-sources-2.6.17.ebuild:
1377     Bumping the hardened-sources-2.6 series to 2.6.17, using
1378     genpatches-2.6.17-6.base.
1379 solar 1.109
1380     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1381     - stable on x86 and amd64
1382 solar 1.108
1383     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1384    
1385     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1386     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1387     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1388     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1389     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1390     crusty ebuilds
1391 johnm 1.107
1392     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1393     hardened-sources-2.6.16-r10.ebuild:
1394     marking stable on x86 and amd64
1395 solar 1.106
1396     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1397     - 2.4.32-r6 stable on x86. RSBAC state unknown
1398 kang 1.105
1399     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1400    
1401     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1402     +hardened-sources-2.4.32-r7.ebuild:
1403     Bump PaX for RSBAC to test-17
1404 johnm 1.104
1405     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1406    
1407     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1408     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1409     hardened-sources-2.6.16 bump to latest -base.
1410 solar 1.103
1411     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1412    
1413     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1414     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1415     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1416     sysctl controlable resource logging
1417 johnm 1.102
1418     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1419    
1420     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1421     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1422     push new 2.6.16 release in preparation for stable
1423 solar 1.101
1424     22 May 2006; <solar@gentoo.org> :
1425     - redigest bug 134002
1426 kang 1.100
1427     *hardened-sources-2.4.32-r5 (16 May 2006)
1428    
1429     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1430     +hardened-sources-2.4.32-r5.ebuild:
1431     Fixes rsbac common patching (new patch in new -r5 patchset)
1432 solar 1.99
1433     *hardened-sources-2.4.32-r4 (13 May 2006)
1434    
1435     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1436     +hardened-sources-2.4.32-r4.ebuild:
1437     - security bumps
1438 johnm 1.98
1439     *hardened-sources-2.6.16-r6 (03 May 2006)
1440    
1441     03 May 2006; John Mylchreest <johnm@gentoo.org>
1442     +hardened-sources-2.6.16-r6.ebuild:
1443     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1444 johnm 1.97
1445     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1446     hardened-sources-2.6.14-r8.ebuild:
1447     fix x86_64 build problem, this will delay the digest issue again for a short
1448     while but it will sort itself out
1449 johnm 1.96
1450     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1451     hardened-sources-2.6.14-r8.ebuild:
1452     bump hardened patchset
1453 antarus 1.94
1454     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1455     files/digest-hardened-sources-2.4.32-r2,
1456     files/digest-hardened-sources-2.4.32-r3,
1457     files/digest-hardened-sources-2.6.14-r8, Manifest:
1458     Fixing duff SHA256 digests: Bug # 131293
1459 johnm 1.93
1460 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1461    
1462     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1463     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1464     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1465     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1466     cleanup of old uneccessary sources
1467    
1468 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1469     fix digest
1470 johnm 1.92
1471     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1472    
1473     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1474     +hardened-sources-2.6.14-r8.ebuild:
1475     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1476 johnm 1.91
1477     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1478     Turning on gpg-signing again, and recomitting
1479 johnm 1.90
1480     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1481    
1482     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1483     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1484     +hardened-sources-2.6.16-r4.ebuild:
1485     Fix numerous security vulns
1486 solar 1.89
1487     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1488    
1489     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1490     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1491     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1492     - security bump for bug #112791. Removed old ebuilds
1493 johnm 1.88
1494     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1495    
1496     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1497     +hardened-sources-2.6.16-r3.ebuild:
1498     Removing silly localversion which I missed
1499 johnm 1.87
1500     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1501    
1502     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1503     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1504     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1505 johnm 1.86
1506     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1507    
1508     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1509     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1510     +hardened-sources-2.6.16-r2.ebuild:
1511     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1512     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1513 johnm 1.85
1514     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1515    
1516     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1517     +hardened-sources-2.6.16-r1.ebuild:
1518     Bumping to include ppc build fix and 2.6.16.3
1519 tsunam 1.84
1520     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1521     hardened-sources-2.6.14-r6.ebuild:
1522     Stable on x86; bug #127718
1523 johnm 1.83
1524     *hardened-sources-2.6.16 (31 Mar 2006)
1525    
1526     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1527     +hardened-sources-2.6.16.ebuild:
1528     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1529     2.6.16.1
1530 cryos 1.82
1531     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1532     hardened-sources-2.6.14-r6.ebuild:
1533     Stable on amd64, bug 127718.
1534 nixnut 1.81
1535     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1536     Stable on ppc. Bug #127718
1537 johnm 1.80
1538     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1539     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1540     -hardened-sources-2.6.14-r4.ebuild:
1541     Cleanup.
1542 johnm 1.79
1543     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1544    
1545     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1546     +hardened-sources-2.6.14-r6.ebuild:
1547     Fixes grsec policy recreation bug and adds a
1548     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1549 solar 1.78
1550     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1551     - stable on x86
1552 hansmi 1.77
1553     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1554     hardened-sources-2.6.14-r5.ebuild:
1555     Stable on ppc.
1556 johnm 1.76
1557     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1558    
1559     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1560     +hardened-sources-2.6.14-r5.ebuild:
1561     fixing every known exploit
1562 solar 1.75
1563     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1564    
1565     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1566     +hardened-sources-2.4.32-r2.ebuild:
1567     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1568 solar 1.74
1569     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1570    
1571     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1572     - version bump for new genpatches which fix up a few sec holes
1573 solar 1.73
1574     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1575    
1576     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1577     - revision bump to add misc vital linux kernel security patches.
1578 johnm 1.72
1579     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1580    
1581     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1582     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1583     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1584 johnm 1.71
1585     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1586     hardened-sources-2.6.14-r2.ebuild:
1587     making x86 & amd64 stable following testing.
1588 johnm 1.70
1589     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1590    
1591     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1592     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1593     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1594     network hooks.
1595 johnm 1.69
1596     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1597     hardened-sources-2.6.14-r1.ebuild:
1598     bumping to stable early for sec fix on x86 & amd64
1599 johnm 1.68
1600     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1601    
1602     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1603     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1604     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1605 solar 1.67
1606     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1607     - stable on x86 security bug #114227 CAN-2005-3257
1608 kang 1.66
1609     *hardened-sources-2.4.32 (19 Nov 2005)
1610    
1611     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1612     +hardened-sources-2.4.32.ebuild:
1613     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1614     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1615     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1616     rsbac >> /etc/portage/package.use)
1617 johnm 1.65
1618     *hardened-sources-2.6.14 (14 Nov 2005)
1619    
1620     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1621     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1622     Bumping 2.6 series to 2.6.14.2
1623 johnm 1.64
1624     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1625    
1626     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1627     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1628     +hardened-sources-2.6.13-r2.ebuild:
1629     Fixes minor build error in ppc.
1630 johnm 1.63
1631     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1632    
1633     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1634     +hardened-sources-2.6.13-r1.ebuild:
1635     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1636     2.6.13.4, fixes some major amd64 stability problems.
1637 johnm 1.62
1638     *hardened-sources-2.6.13 (16 Sep 2005)
1639    
1640     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1641     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1642     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1643     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1644     users should test this thoroughly.
1645 solar 1.61
1646     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1647     - stable on x86
1648 johnm 1.60
1649     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1650    
1651     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1652     +hardened-sources-2.6.11-r15.ebuild:
1653     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1654     grsec redefining curr_ip struct.
1655 solar 1.59
1656     *hardened-sources-2.4.31 (20 Jun 2005)
1657    
1658     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1659     initial import of 2.4.31 tree
1660 johnm 1.58
1661     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1662    
1663     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1664     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1665     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1666     naming scheme to abide by genpatches
1667 johnm 1.57
1668     *hardened-sources-2.6.11-r13 (18 May 2005)
1669    
1670     18 May 2005; John Mylchreest <johnm@gentoo.org>
1671     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1672     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1673     target. sorry about that. Fixes bug #93022
1674 johnm 1.56
1675     *hardened-sources-2.6.11-r12 (17 May 2005)
1676    
1677     17 May 2005; John Mylchreest <johnm@gentoo.org>
1678     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1679     +hardened-sources-2.6.11-r12.ebuild:
1680     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1681     merges in genpatches-base
1682 johnm 1.55
1683     *hardened-sources-2.6.11-r12 (17 May 2005)
1684    
1685     17 May 2005; John Mylchreest <johnm@gentoo.org>
1686     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1687     +hardened-sources-2.6.11-r12.ebuild:
1688     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1689     merges in genpatches-base
1690 solar 1.54
1691     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1692     -files/2.4.27-cmdline-race.patch,
1693     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1694     -files/2.4.28-grsec-binfmt_a.out.patch,
1695     -files/2.4.28-grsec-cmdline-race.patch,
1696     -files/2.4.28-selinux-binfmt_a.out.patch,
1697     -files/2.4.28-selinux-cmdline-race.patch,
1698     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1699     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1700     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1701     cleanup..
1702 solar 1.53
1703     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1704    
1705     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1706     - disable aout by default
1707 solar 1.52
1708     *hardened-sources-2.4.30 (18 Apr 2005)
1709    
1710     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1711     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1712     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1713     use
1714 tocharian 1.50
1715 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1716    
1717     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1718     +hardened-sources-2.4.29.ebuild:
1719     New hardened-patches-2.4-29.0 patchball.
1720     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1721    
1722     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1723    
1724     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1725     +hardened-sources-2.4.28-r5.ebuild:
1726     Added a fix for a PaX vulnerability.
1727    
1728     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1729 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1730     Stable on x86
1731 solar 1.49
1732     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1733     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1734     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1735     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1736     - fixed/added RDEPEND= in all kernel-2 ebuilds
1737 tocharian 1.48
1738     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1739    
1740     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1741     +hardened-sources-2.4.28-r4.ebuild:
1742     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1743     backport of neighbour hash updates.
1744 tocharian 1.47
1745     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1746     hardened-sources-2.4.28-r3.ebuild:
1747     Stable on x86
1748 tseng 1.46
1749     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1750    
1751     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1752     +hardened-sources-2.6.10-r3.ebuild:
1753     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1754     in 2005.0
1755 tocharian 1.45
1756     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1757     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1758     hardened-sources-2.4.28-r2.ebuild:
1759     Mark stable on x86
1760 tocharian 1.44
1761     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1762    
1763     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1764     +hardened-sources-2.4.28-r3.ebuild:
1765     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1766 tocharian 1.43
1767     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1768     hardened-sources-2.4.28.ebuild:
1769     Mark stable on x86.
1770 tocharian 1.42
1771     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1772    
1773     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1774     +hardened-sources-2.4.28-r2.ebuild:
1775     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1776     Mazinger for grsecurity patches as well.
1777 plasmaroo 1.41
1778     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1779    
1780     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1781     Security bump. Thank tocharian for rolling a new patchset...
1782 solar 1.40
1783     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1784     +files/2.4.28-grsec-cmdline-race.patch,
1785     +files/2.4.28-selinux-binfmt_a.out.patch,
1786     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1787     - Round up remaining security patches that appear to be missing in 2.4.28. -
1788     PaX standalone updated to current. hgpv=28.1
1789 solar 1.39
1790     *hardened-sources-2.4.28 (28 Nov 2004)
1791    
1792     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1793     security bump. Thank tocharian for rolling a new patchset
1794 scox 1.31
1795 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1796    
1797     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1798     +hardened-sources-2.4.27-r3.ebuild:
1799     Applies the new 2.4-27.2 patchball which updates
1800     GRSecurity to the 2.0.1 version.
1801    
1802 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1803    
1804     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1805     +hardened-sources-2.4.27-r2.ebuild:
1806     Version bump.
1807     This version uses the new 2.4-27.1 patchball which updates
1808     both the SELinux PaX hooks patch and the SELinux headers.
1809    
1810 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1811    
1812     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1813     +hardened-sources-2.4.27-r1.ebuild,
1814     -hardened-sources-2.4.27.ebuild,
1815     +files/2.4.27-cmdline-race.patch:
1816     Version bump, fix for cmdline race. See bug #59905.
1817    
1818     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1819    
1820     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1821     +hardened-sources-2.4.26-r6.ebuild,
1822     -hardened-sources-2.4.26-r5.ebuild,
1823     -hardened-sources-2.4.26-r4.ebuild,
1824     +files/2.4.26-cmdline-race.patch:
1825     Version bump, fix for cmdline race. See bug #59905.
1826    
1827 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1828    
1829     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1830     +hardened-sources-2.4.27.ebuild,
1831     +files/2.4.27-CAN-2004-0394.patch:
1832     Ported the patchball to the 2.4.27 kernel version.
1833    
1834 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1835    
1836     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1837     +hardened-sources-2.4.26-r5.ebuild:
1838 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1839 scox 1.34 It adds the following features:
1840     - Squashfs
1841     - Ebtables
1842     - Netdev random (core+drivers)
1843     - Watchdog Timer (WDT) fix.
1844    
1845 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1846    
1847     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1848     +hardened-sources-2.4.26-r4.ebuild,
1849     +files/2.4.26-CAN-2004-0415.patch,
1850     -hardened-sources-2.4.26-3:
1851     Version bump, fix for CAN 0415, see bug #59378.
1852    
1853 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1854    
1855     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1856     +hardened-sources-2.4.26-r3.ebuild,
1857     +files/2.4.26-CAN-2004-0497.patch,
1858     -hardened-sources-2.4.26-r2.ebuild:
1859     Version bump, fixed CAN 0497, see bug #56171.
1860    
1861 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1862    
1863     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1864 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1865 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1866     +files/2.4.26-CAN-2004-0535.patch,
1867     -hardened-sources-2.4.26-r1.ebuild:
1868     Fixes for both CAN 0495 and 0535, see bug #54976
1869 pvdabeel 1.27
1870 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1871     hardened-sources-2.4.26-r1.ebuild:
1872     QA - fix use invocation
1873 scox 1.28
1874     *hardened-sources-2.4.26-r1 (22 June 2004)
1875    
1876     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1877     +hardened-sources-2.4.26-r1.ebuild,
1878     +files/2.4.26-CAN-2004-0394.patch,
1879     +files/2.4.26-signal-race.patch,
1880     -hardened-sources-2.4.26.ebuild,
1881     -hardened-sources-2.4.24-r3.ebuild:
1882     Version bump for the CAN-2004-0394 issue and bug #53804
1883     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1884    
1885    
1886 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1887     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1888     Masked hardened-sources-2.4.26.ebuild broken for ppc
1889    
1890     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1891     hardened-sources-2.4.24-r3.ebuild:
1892     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1893 plasmaroo 1.25
1894 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1895    
1896     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1897     +hardened-sources-2.4.26.ebuild:
1898     Updated hardened-sources for the 2.4.26 kernel
1899     Removed broken components, updated almost everything.
1900    
1901 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1902    
1903     17 Apr 2004; <plasmaroo@gentoo.org>
1904     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1905     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1906     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1907     +hardened-sources-2.4.24-r3.ebuild:
1908     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1909     vulnerabilities. Old revisions removed.
1910 plasmaroo 1.24
1911     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1912    
1913     15 Apr 2004; <plasmaroo@gentoo.org>
1914     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1915     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1916     Version bump for the CAN-2004-0109 issue; bug #47881.
1917 aliz 1.23
1918     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1919     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1920     Add eutils to inherit.
1921 plasmaroo 1.22
1922     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1923    
1924     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1925     files/hardened-sources-2.4.24.munmap.patch:
1926     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1927 scox 1.19
1928 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1929 scox 1.26
1930 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1931     hardened-sources-2.4.24.ebuild:
1932     Version bump, updated most of the components.
1933     This release includes the following:
1934    
1935     - Hardened security
1936     - Netfilter patch-o-matic 20031219
1937     - FreeSWAN 2.04 & x509 1.4.8
1938     - EVMS 2.2.2
1939     - XFS 1.3.1
1940     - cryptoloop jari
1941     - grsecurity 2.0-rc4
1942     - SELinux
1943     - PaX 200402060000
1944     - PaX Obscurity 200308302223
1945     - Others...
1946    
1947     Neither -ck nor systrace are included anymore.
1948    
1949 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1950    
1951     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1952     hardened-sources-2.4.22-r2.ebuild:
1953 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1954 scox 1.19
1955     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1956 iggy 1.17
1957     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1958 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1959 iggy 1.16
1960     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1961 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1962     Version bump for the 'do_brk' vulnerability.
1963 iggy 1.15
1964     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1965     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1966     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1967     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1968 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1969 frogger 1.14
1970     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1971     hardened-sources-2.4.22.ebuild:
1972 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1973     components. These are no longer handled in the kernel
1974     so this code was not necessary.
1975 frogger 1.13
1976     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1977     New 2.4.22 based hardened-sources thanks to
1978     Phil West <p.west@computer.org>.
1979    
1980     These sources include:
1981 plasmaroo 1.18 - New SELinux API
1982     - Updated CK-base
1983     - Updated GRSec
1984     - Systrace
1985     - SuperFreeS/WAN 1.99.8
1986     - Propolice kernel build support
1987     - EVMS
1988     - Other various security related patches
1989 frogger 1.11
1990 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1991    
1992     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1993     Updated hardened-sources based on the 2.4.21 Linux kernel.
1994     This includes updates to most major components such as:
1995 plasmaroo 1.18 - ck-base-0306300059
1996     - selinux-2.4-2003071106
1997     - grsecurity-2.0-rc1
1998     - Updated IPTables patch-o-matic
1999     - Updated SuperFreeS/WAN
2000    
2001 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
2002     updated patch set ready for the 2.4.21 based kernel.
2003    
2004 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
2005     Initial import of hardened-sources-2.4.20-r4. This revision
2006     includes only a few changes, but one of these is an important
2007     security fix. It is recommended all users of hardened-sources
2008     upgrade to this release.
2009 plasmaroo 1.18
2010 frogger 1.11 - ioperm bug fix
2011     - fixed compilation failure when building without GRSec
2012 plasmaroo 1.18
2013 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
2014     due to time constraints, but is planned for inclusion in the near
2015     future.
2016 msterret 1.10
2017     *hardened-sources-2.4.20-r2 (12 Jun 2003)
2018    
2019     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
2020     hardened-sources-2.4.20-r3.ebuild:
2021 plasmaroo 1.18 Add Header...
2022 frogger 1.9
2023     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2024     hardened-sources-2.4.20-r3.ebuild:
2025     Removed warnings from ebuild. This kernel should be safe to
2026     use at this point.
2027 frogger 1.8
2028     *hardened-sources-2.4.20-r3 (08 Jun 2003)
2029    
2030     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2031     hardened-sources-2.4.20-r3.ebuild:
2032     New revision. Includes the following changes over -r2:
2033 plasmaroo 1.18
2034 frogger 1.8 - ck7-base (O(1), preempt, low latency)
2035     - Super FreeS/WAN 1.99.7rc2
2036     - PaX for the LSM/SELinux branch
2037     - GRSecurity 2.0-pre4 (role based access control)
2038     - Systrace 1.3
2039     - EXT3 fixes
2040     - EVMS 2.0.1
2041     - GCC 3.1+ compile optimizations
2042     - ProPolice kernel build support
2043     - Hashing table security fixes
2044 frogger 1.3
2045     *hardened-sources-2.4.20-r1 (09 Apr 2003)
2046 frogger 1.7
2047     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
2048     Initial import of hardened-sources-r2. This new
2049     ebuild includes many new performance and security
2050     related patches. As in -r1, it will patch in
2051     LSM/SELinux if "selinux" is in USE, otherwise it
2052     will patch in GRSecurity. The following patches
2053     are included in this revision:
2054 plasmaroo 1.18
2055 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
2056     (pulled from the base CK patch)
2057     - ptrace exploit patch for the LSM kernel
2058     (the GRSec patch already fixes this)
2059     - LSM 2.4-2003040709
2060     - SELinux 2.4-2003040709
2061     - Systrace v1.2
2062     - IPTables patch-o-matic base patches - 20030107
2063     - CryptoAPI 2.4.20.1 w/ loop-jari patch
2064     - Super FreeS/WAN 1.99.6.1
2065     - GRSecurity 1.9.9g
2066     - MPPE
2067     - EXT3 data journal fix
2068     - CIPE 1.5.4
2069 frogger 1.6
2070     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2071     hardened-sources-2.4.20-r1.ebuild, manifest:
2072 plasmaroo 1.18 Updated to install flask components correctly for selinux.
2073 frogger 1.5
2074     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2075     hardened-sources-2.4.20-r1.ebuild:
2076     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2077     is patched in instead. Ptrace patches for selinux have also been added. In
2078     either case, systrace support will be patched in as well.
2079 frogger 1.3
2080     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2081     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2082 plasmaroo 1.18 Revision bump for new sources.
2083 frogger 1.4
2084 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2085 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
2086 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2087 method 1.1
2088 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
2089    
2090 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2091     hardened-sources-2.4.20.ebuild:
2092 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20