/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.353 - (hide annotations) (download)
Sun Nov 7 21:52:34 2010 UTC (3 years, 8 months ago) by blueness
Branch: MAIN
Changes since 1.352: +8 -1 lines
hardened-sources-2.6.32-r25 based on 2.6.32.25 + genpatches + grsecurity-2.2.0-2.6.32.25-201011062054

(Portage version: 2.1.9.24/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.353 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.352 2010/11/02 17:52:21 blueness Exp $
4    
5     *hardened-sources-2.6.32-r25 (07 Nov 2010)
6    
7     07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
8     +hardened-sources-2.6.32-r25.ebuild:
9     hardened-sources-2.6.32-r25 based on 2.6.32.25 + genpatches +
10     grsecurity-2.2.0-2.6.32.25-201011062054
11 blueness 1.352
12     *hardened-sources-2.6.35-r6 (02 Nov 2010)
13     *hardened-sources-2.6.32-r24 (02 Nov 2010)
14    
15     02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
16     +hardened-sources-2.6.32-r24.ebuild, +hardened-sources-2.6.35-r6.ebuild:
17     hardened-sources-2.6.32-r24 based on 2.6.32.25 + genpatches +
18     grsecurity-2.2.0-2.6.32.25-201010311944
19     hardened-sources-2.6.35-r6 based on 2.6.35.8 + genpatches +
20     grsecurity-2.2.0-2.6.35.8-201010311944
21 blueness 1.351
22     02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
23     hardened-sources-2.6.32-r23.ebuild:
24     ppc64 stable, bug #343535
25 blueness 1.350
26     *hardened-sources-2.6.35-r5 (24 Oct 2010)
27     *hardened-sources-2.6.32-r23 (24 Oct 2010)
28    
29     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
30     +hardened-sources-2.6.32-r23.ebuild, +hardened-sources-2.6.35-r5.ebuild:
31     hardened-sources-2.6.32-r23 based on 2.6.32.24 + genpatches +
32     grsec-2.2.0-2.6.32.24-201010232009
33     hardened-sources-2.6.35-r5 based on 2.6.35.7 + genpatches +
34     grsec-2.2.0-2.6.35.7-201010232009
35 blueness 1.349
36     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
37     hardened-sources-2.6.32-r22.ebuild:
38     Broken on ppc/ppc64, bug #341915#c6
39 blueness 1.348
40     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
41     -hardened-sources-2.6.32-r16.ebuild, -hardened-sources-2.6.32-r17.ebuild,
42     -hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.32-r19.ebuild,
43     -hardened-sources-2.6.32-r20.ebuild, -hardened-sources-2.6.32-r21.ebuild,
44     -hardened-sources-2.6.34-r4.ebuild, -hardened-sources-2.6.34-r5.ebuild,
45     -hardened-sources-2.6.35.ebuild, -hardened-sources-2.6.35-r1.ebuild,
46     -hardened-sources-2.6.35-r2.ebuild, -hardened-sources-2.6.35-r3.ebuild:
47     Removing vulnerable kernels where possible, bug #341801
48 blueness 1.347
49     21 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
50     hardened-sources-2.6.32-r22.ebuild:
51     x86 stable, bug #341915
52 blueness 1.346
53     20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
54     hardened-sources-2.6.32-r22.ebuild:
55     amd64 stable, bug #341915
56 blueness 1.345
57     *hardened-sources-2.6.35-r4 (20 Oct 2010)
58     *hardened-sources-2.6.32-r22 (20 Oct 2010)
59    
60     20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
61     +hardened-sources-2.6.32-r22.ebuild, +hardened-sources-2.6.35-r4.ebuild:
62     hardened-sources-2.6.32-r22 based on 2.6.32.24 + genpatches +
63     grsec-2.2.0-2.6.32.24-201010191911
64     hardened-sources-2.6.35-r4 based on 2.6.35.7 + genpatches +
65     grsec-2.2.0-2.6.35.7-201010191911
66     Addresses security bug #341801
67 blueness 1.344
68     *hardened-sources-2.6.35-r3 (16 Oct 2010)
69     *hardened-sources-2.6.32-r21 (16 Oct 2010)
70    
71     16 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
72     +hardened-sources-2.6.32-r21.ebuild, +hardened-sources-2.6.35-r3.ebuild:
73     hardened-sources-2.6.32-r21 based on 2.6.32.24 + genpatches +
74     grsec-2.2.0-2.6.32.24-201010121028
75     hardened-sources-2.6.35-r3 based on 2.6.35.7 + genpatches +
76     grsec-2.2.0-2.6.35.7-201010121028
77 blueness 1.343
78     *hardened-sources-2.6.35-r2 (07 Oct 2010)
79    
80     07 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
81     +hardened-sources-2.6.35-r2.ebuild:
82     hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches +
83     grsec-2.2.0-2.6.35.7-201010021153
84 blueness 1.342
85     *hardened-sources-2.6.32-r20 (06 Oct 2010)
86    
87     06 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
88     +hardened-sources-2.6.32-r20.ebuild:
89     hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches +
90     grsec-2.2.0-2.6.32.24-201010021153
91 blueness 1.341
92     *hardened-sources-2.6.35-r1 (30 Sep 2010)
93     *hardened-sources-2.6.32-r19 (30 Sep 2010)
94    
95     30 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
96     +hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild:
97     hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches +
98     grsec-2.2.0-2.6.32.23-201009272133
99     hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches +
100     grsec-2.2.0-2.6.35.6-201009281623
101 blueness 1.340
102     *hardened-sources-2.6.35 (28 Sep 2010)
103    
104     28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
105     +hardened-sources-2.6.35.ebuild:
106     hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
107 blueness 1.339
108     21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
109     -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
110     hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
111     -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
112     Fast track stabilization. See bug #338273. Removed older versions.
113 blueness 1.338
114     *hardened-sources-2.6.34-r6 (17 Sep 2010)
115     *hardened-sources-2.6.32-r18 (17 Sep 2010)
116    
117     17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
118     +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
119     hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
120     grsec-2.2.0-2.6.32.21-201009162222
121     hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
122     grsec-2.2.0-2.6.34.7-201009162222
123     Addresses IA32 syscall exploit.
124 blueness 1.337
125     *hardened-sources-2.6.34-r5 (15 Sep 2010)
126     *hardened-sources-2.6.32-r17 (15 Sep 2010)
127    
128     15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
129     +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
130     hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
131     grsec-2.2.0-2.6.32.21-201009130811
132     hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
133     grsec-2.2.0-2.6.34.6-201009130754
134 blueness 1.336
135     *hardened-sources-2.6.34-r4 (07 Sep 2010)
136     *hardened-sources-2.6.32-r16 (07 Sep 2010)
137    
138     07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
139     +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
140     hardened-sources-2.6.32-r16 based on 2.6.32.21 +
141     grsec-2.2.0-2.6.32.21-201009032133
142     hardened-sources-2.6.34-r4 based on 2.6.34.6 +
143     grsec-2.2.0-2.6.34.6-201009041352
144 blueness 1.335
145     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
146     hardened-sources-2.6.32-r15 based on 2.6.32.21 +
147     grsec-2.2.0-2.6.32.21-201008292122
148     hardened-sources-2.6.34-r3 based on 2.6.34.6 +
149     grsec-2.2.0-2.6.34.6-201008292122
150 blueness 1.334
151     *hardened-sources-2.6.34-r3 (02 Sep 2010)
152     *hardened-sources-2.6.32-r15 (02 Sep 2010)
153    
154     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
155     -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
156     -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
157     +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
158     +hardened-sources-2.6.34-r3.ebuild:
159     Bumps and remove deprecated versions
160 blueness 1.333
161     *hardened-sources-2.6.34-r2 (21 Aug 2010)
162    
163     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
164     +hardened-sources-2.6.34-r2.ebuild:
165     Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
166 blueness 1.332
167     *hardened-sources-2.6.32-r14 (21 Aug 2010)
168    
169     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
170     +hardened-sources-2.6.32-r14.ebuild:
171     Based on vanilla 2.6.32.19 + genpatches +
172     grsec-2.2.0-2.6.32.19-201008131840
173 blueness 1.331
174     *hardened-sources-2.6.32-r13 (14 Aug 2010)
175    
176     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
177     +hardened-sources-2.6.32-r13.ebuild:
178     Based on vanilla 2.6.32.18 + genpatches +
179     grsecurity-2.2.0-2.6.32.18-201008112233
180 robbat2 1.330
181     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
182     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
183 blueness 1.329
184     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
185     hardened-sources-2.6.32-r9.ebuild:
186     Stable ppc64. Bug #326885
187 blueness 1.328
188     *hardened-sources-2.6.32-r12 (24 Jul 2010)
189    
190     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
191     +hardened-sources-2.6.32-r12.ebuild:
192     Parallels fix incorporated into hardened-sources-2.6.34-r1
193 blueness 1.327
194     *hardened-sources-2.6.34-r1 (24 Jul 2010)
195    
196     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
197     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
198     Fixes bug #328275
199 chainsaw 1.326
200     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
201     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
202     on gentoo-dev.
203 jer 1.325
204     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
205     Correct mail address.
206 blueness 1.324
207     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
208     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
209     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
210     -hardened-sources-2.6.32-r8.ebuild:
211     Removing outdated releases
212 fauli 1.323
213     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
214     hardened-sources-2.6.32-r9.ebuild:
215     stable x86, bug 326885
216 blueness 1.322
217     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
218     -hardened-sources-2.6.32-r7.ebuild:
219     Removed for security. Bug #325573
220 blueness 1.321
221     *hardened-sources-2.6.34 (13 Jul 2010)
222    
223     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
224     +hardened-sources-2.6.34.ebuild:
225     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
226 blueness 1.320
227     *hardened-sources-2.6.32-r11 (13 Jul 2010)
228    
229     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
230     +hardened-sources-2.6.32-r11.ebuild:
231     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
232 chainsaw 1.319
233     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
234     Marked stable on AMD64 as requested by Anthony G. Basile
235     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
236     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
237 blueness 1.318
238     *hardened-sources-2.6.32-r10 (30 Jun 2010)
239    
240     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
241     +hardened-sources-2.6.32-r10.ebuild:
242     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
243 blueness 1.317
244     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
245     Added myself to the metadata.xml
246 chainsaw 1.316
247     *hardened-sources-2.6.32-r9 (11 Jun 2010)
248    
249     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
250     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
251 chainsaw 1.315
252     *hardened-sources-2.6.32-r8 (01 Jun 2010)
253    
254     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
255     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
256 chainsaw 1.314
257     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
258     Update SRC_URI to point to mirror network now that the distfile has
259     propagated.
260 chainsaw 1.313
261     *hardened-sources-2.6.32-r7 (26 May 2010)
262    
263     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
264     metadata.xml:
265     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
266     Summers.
267 robbat2 1.312
268     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
269     Update Manifest for deblob support in kernel-2 eclass.
270 nixnut 1.311
271     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
272     ppc stable
273 gengor 1.310
274     29 May 2009; Gordon Malm <gengor@gentoo.org>
275     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
276     Stable amd64/x86 and remove old.
277 gengor 1.309
278     *hardened-sources-2.6.29 (25 May 2009)
279    
280     25 May 2009; Gordon Malm <gengor@gentoo.org>
281     +hardened-sources-2.6.29.ebuild:
282     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
283     release candidates.
284 gengor 1.308
285     *hardened-sources-2.6.28-r9 (25 May 2009)
286    
287     25 May 2009; Gordon Malm <gengor@gentoo.org>
288     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
289     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
290 gengor 1.307
291     *hardened-sources-2.6.28-r8 (18 May 2009)
292    
293     18 May 2009; Gordon Malm <gengor@gentoo.org>
294     +hardened-sources-2.6.28-r8.ebuild:
295     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
296     and #262862 among others.
297 gengor 1.306
298     01 May 2009; Gordon Malm <gengor@gentoo.org>
299     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
300     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
301     Remove unnecessary mirror://gentoo from SRC_URI.
302 nixnut 1.305
303     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
304     ppc stable
305 gengor 1.304
306     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
307     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
308     Stable amd64/x86 and remove old.
309 gengor 1.303
310     *hardened-sources-2.6.28-r7 (27 Mar 2009)
311    
312     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
313     +hardened-sources-2.6.28-r7.ebuild:
314     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
315 gengor 1.302
316     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
317     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
318     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
319     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
320     Stable amd64/x86 and remove old versions.
321 nixnut 1.301
322     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
323     ppc stable
324 gengor 1.300
325     *hardened-sources-2.6.28-r6 (21 Mar 2009)
326    
327     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
328     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
329     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
330 gengor 1.299
331     *hardened-sources-2.6.28-r5 (20 Mar 2009)
332    
333     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
334     +hardened-sources-2.6.28-r5.ebuild:
335     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
336 gengor 1.298
337     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
338     hardened-sources-2.6.28-r4.ebuild:
339     Stable amd64/x86.
340 gengor 1.297
341     *hardened-sources-2.6.28-r4 (18 Mar 2009)
342    
343     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
344     +hardened-sources-2.6.28-r4.ebuild:
345     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
346     compilation with CPA_DEBUG and more.
347 gengor 1.296
348     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
349     hardened-sources-2.6.28-r3.ebuild:
350     Quick stable amd64/x86.
351 gengor 1.295
352     *hardened-sources-2.6.28-r3 (15 Mar 2009)
353    
354     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
355     +hardened-sources-2.6.28-r3.ebuild:
356     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
357 nixnut 1.294
358     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
359     ppc stable
360 gengor 1.293
361     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
362     hardened-sources-2.6.28-r2.ebuild:
363     Stable amd64/x86.
364 gengor 1.292
365     *hardened-sources-2.6.28-r2 (11 Mar 2009)
366    
367     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
368     +hardened-sources-2.6.28-r2.ebuild:
369     Version bump bringing in latest grsecurity patch.
370 gengor 1.291
371     *hardened-sources-2.6.28-r1 (09 Mar 2009)
372    
373     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
374     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
375     Version bump and remove old.
376 nixnut 1.290
377     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
378     ppc stable
379 gengor 1.289
380     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
381     hardened-sources-2.6.27-r8.ebuild:
382     Remove amd64 testing keyword, bug 256226.
383 gengor 1.288
384     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
385     hardened-sources-2.6.27-r8.ebuild:
386     Revert amd64 stable, bug #256226.
387 gengor 1.287
388     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
389     hardened-sources-2.6.27-r8.ebuild:
390     Stable on amd64/x86.
391 gengor 1.286
392     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
393     -hardened-sources-2.6.27-r6.ebuild:
394     Remove old 2.6.27 release.
395 gengor 1.285
396     *hardened-sources-2.6.27-r8 (24 Feb 2009)
397    
398     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
399     +hardened-sources-2.6.27-r8.ebuild:
400     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
401     and probably more.
402 nixnut 1.284
403     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
404     ppc stable
405 gengor 1.283
406     *hardened-sources-2.6.28 (25 Jan 2009)
407    
408     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
409     +hardened-sources-2.6.28.ebuild:
410     Initial 2.6.28 release.
411 gengor 1.282
412     *hardened-sources-2.6.27-r7 (25 Jan 2009)
413    
414     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
415     +hardened-sources-2.6.27-r7.ebuild:
416     Bump to Linux 2.6.27.13.
417 gengor 1.281
418     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
419     hardened-sources-2.6.26-r9.ebuild:
420     Stable amd64/x86.
421 gengor 1.280
422     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
423     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
424     -hardened-sources-2.6.27-r5.ebuild:
425     Remove problem versions.
426 gengor 1.279
427     *hardened-sources-2.6.27-r6 (24 Jan 2009)
428    
429     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
430     +hardened-sources-2.6.27-r6.ebuild:
431     Revert PaX test29 to test30 changes. Fixes bug 256226.
432 gengor 1.277
433     *hardened-sources-2.6.27-r5 (24 Jan 2009)
434    
435     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
436     +hardened-sources-2.6.27-r5.ebuild:
437 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
438 gengor 1.277 254843.
439 gengor 1.276
440     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
441     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
442     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
443     Remove problem versions.
444 nixnut 1.275
445     23 Jan 2009; nixnut <nixnut@gentoo.org>
446     hardened-sources-2.6.25-r13.ebuild:
447     ppc stable
448 gengor 1.274
449     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
450     hardened-sources-2.6.25-r13.ebuild:
451     Fasttrack stable amd64/x86.
452 gengor 1.273
453     *hardened-sources-2.6.26-r9 (21 Jan 2009)
454    
455     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
456     +hardened-sources-2.6.26-r9.ebuild:
457 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
458 gengor 1.272
459     *hardened-sources-2.6.25-r13 (20 Jan 2009)
460    
461     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
462     +hardened-sources-2.6.25-r13.ebuild:
463 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
464 nixnut 1.271
465     20 Jan 2009; nixnut <nixnut@gentoo.org>
466     hardened-sources-2.6.25-r12.ebuild:
467     ppc stable
468 gengor 1.270
469     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
470     hardened-sources-2.6.25-r12.ebuild:
471     Stable amd64/x86.
472 gengor 1.269
473     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
474     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
475     -hardened-sources-2.6.27-r2.ebuild:
476     Clean out old versions.
477 gengor 1.268
478     *hardened-sources-2.6.27-r4 (14 Jan 2009)
479     *hardened-sources-2.6.26-r8 (14 Jan 2009)
480     *hardened-sources-2.6.25-r12 (14 Jan 2009)
481    
482     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
483     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
484     +hardened-sources-2.6.27-r4.ebuild:
485     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
486     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
487     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
488     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
489 nixnut 1.267
490     15 Dec 2008; nixnut <nixnut@gentoo.org>
491     hardened-sources-2.6.25-r11.ebuild:
492     Stable on ppc
493 gengor 1.266
494     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
495     hardened-sources-2.6.25-r11.ebuild:
496     Stable amd64/x86.
497 gengor 1.265
498     *hardened-sources-2.6.27-r3 (07 Dec 2008)
499    
500     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
501     +hardened-sources-2.6.27-r3.ebuild:
502     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
503     Fixes bug #248754, #249729 and #246607.
504 gengor 1.264
505     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
506     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
507     Remove old versions.
508 gengor 1.262
509     *hardened-sources-2.6.26-r7 (03 Dec 2008)
510     *hardened-sources-2.6.25-r11 (03 Dec 2008)
511    
512 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
513     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
514 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
515     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
516     Both include many backports from 2.6.27.{6,7} -stable releases.
517 gengor 1.261
518     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
519     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
520     Remove versions broken on ARCHes != x86/amd64.
521 gengor 1.260
522     *hardened-sources-2.6.27-r2 (24 Nov 2008)
523    
524     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
525     +hardened-sources-2.6.27-r2.ebuild:
526     Bump to Linux 2.6.27.7 and latest grsecurity patch.
527 gengor 1.259
528     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
529     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
530     Remove old versions.
531 gengor 1.258
532     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
533     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
534     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
535 nixnut 1.257
536     16 Nov 2008; nixnut <nixnut@gentoo.org>
537     hardened-sources-2.6.25-r10.ebuild:
538     Stable on ppc
539 gengor 1.256
540     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
541     hardened-sources-2.6.25-r10.ebuild:
542     Stable amd64/x86.
543 gengor 1.255
544     *hardened-sources-2.6.26-r6 (12 Nov 2008)
545    
546     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
547     +hardened-sources-2.6.26-r6.ebuild:
548     Bump to Linux 2.6.26.8 and fix security bug #245650.
549 gengor 1.254
550     *hardened-sources-2.6.25-r10 (12 Nov 2008)
551    
552     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
553     +hardened-sources-2.6.25-r10.ebuild:
554     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
555 gengor 1.253
556     *hardened-sources-2.6.27-r1 (09 Nov 2008)
557    
558     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
559     +hardened-sources-2.6.27-r1.ebuild:
560     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
561 gengor 1.252
562     *hardened-sources-2.6.27 (04 Nov 2008)
563    
564     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
565     +hardened-sources-2.6.27.ebuild:
566     Initial 2.6.27 release.
567 gengor 1.251
568     *hardened-sources-2.6.26-r5 (03 Nov 2008)
569    
570     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
571     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
572     +hardened-sources-2.6.26-r5.ebuild:
573     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
574     Clean out some old versions.
575 nixnut 1.250
576     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
577     Stable on ppc
578 gengor 1.249
579     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
580     hardened-sources-2.6.25-r9.ebuild:
581     Stable on amd64/x86.
582 gengor 1.248
583     *hardened-sources-2.6.25-r9 (26 Oct 2008)
584    
585     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
586     +hardened-sources-2.6.25-r9.ebuild:
587     Update to Linux 2.6.25.19
588 nixnut 1.247
589     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
590     Stable on ppc
591 gengor 1.246
592     *hardened-sources-2.6.26-r4 (14 Oct 2008)
593    
594     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
595     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
596     Update to latest grsecurity patch, fixing building of non-modular kernels.
597 gengor 1.245
598     *hardened-sources-2.6.26-r3 (12 Oct 2008)
599    
600     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
601     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
602     +hardened-sources-2.6.26-r3.ebuild:
603     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
604     2.6.26-r1: Removed.
605     2.6.25-r8: Stable amd64/x86.
606 gengor 1.244
607     *hardened-sources-2.6.25-r8 (09 Oct 2008)
608    
609     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
610     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
611     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
612     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
613 nixnut 1.243
614     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
615     Stable on ppc
616 gengor 1.242
617     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
618     hardened-sources-2.6.25-r7.ebuild:
619     Stable amd64/x86.
620 gengor 1.241
621     *hardened-sources-2.6.26-r2 (13 Sep 2008)
622    
623     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
624     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
625     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
626     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
627 gengor 1.240
628     *hardened-sources-2.6.25-r7 (13 Sep 2008)
629    
630     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
631     +hardened-sources-2.6.25-r7.ebuild:
632     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
633 gengor 1.239
634     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
635     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
636     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
637     hardened-sources-2.6.26-r1.ebuild:
638     Update DESCRIPTION and HGPV_URI.
639 gengor 1.238
640     *hardened-sources-2.6.25-r6 (09 Sep 2008)
641    
642     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
643     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
644     2.6.25-r6: Update to Linux 2.6.25.17.
645     2.6.24-r3: Removed.
646 gengor 1.237
647     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
648     hardened-sources-2.6.25-r5.ebuild:
649     Stable on amd64/x86
650 gengor 1.236
651     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
652     Update my email address.
653 nixnut 1.235
654     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
655     stable on ppc
656 battousai 1.234
657     *hardened-sources-2.6.26-r1 (23 Aug 2008)
658     *hardened-sources-2.6.25-r5 (23 Aug 2008)
659    
660     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
661     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
662     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
663     +hardened-sources-2.6.26-r1.ebuild:
664     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
665     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
666     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
667     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
668     (gengor).
669 solar 1.233
670     *hardened-sources-2.6.26 (18 Aug 2008)
671     *hardened-sources-2.6.25-r4 (18 Aug 2008)
672    
673     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
674     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
675     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
676     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
677     2.6.25-r2: Removed.
678 tove 1.232
679     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
680     Remove phreak from metadata.xml (#96398)
681 solar 1.231
682     *hardened-sources-2.6.25-r3 (31 Jul 2008)
683    
684     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
685     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
686     +hardened-sources-2.6.25-r3.ebuild:
687     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
688     fixes, including security bug #231750.
689 nixnut 1.230
690     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
691     Stable on ppc
692 solar 1.229
693     *hardened-sources-2.6.25-r2 (05 Jul 2008)
694    
695     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
696     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
697     +hardened-sources-2.6.25-r2.ebuild:
698     2.6.23-r4: Stable x86/amd64
699     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
700     2.6.23-r{11,12}: Removed due to multiple vulns.
701     (gengor & kerframil)
702 nixnut 1.228
703     04 Jul 2008; nixnut <nixnut@gentoo.org>
704     hardened-sources-2.6.23-r13.ebuild:
705     Stable on ppc
706 solar 1.227
707     *hardened-sources-2.6.25-r1 (30 Jun 2008)
708    
709     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
710     +hardened-sources-2.6.25-r1.ebuild:
711     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
712     grsecurity release. 2.6.23-r13: x86/amd64 stable
713 solar 1.226
714     *hardened-sources-2.6.25 (17 Jun 2008)
715     *hardened-sources-2.6.24-r3 (17 Jun 2008)
716     *hardened-sources-2.6.23-r13 (17 Jun 2008)
717    
718     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
719     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
720     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
721     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
722     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
723     2.6.25: Initial 2.6.25 release.
724 solar 1.225
725     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
726     - fasttrack to stable x86/amd64
727 swegener 1.224
728     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
729     Fix broken digest for linux-2.6.24.tar.bz2.
730 solar 1.223
731     *hardened-sources-2.6.24-r2 (11 May 2008)
732     *hardened-sources-2.6.23-r12 (11 May 2008)
733    
734     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
735     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
736     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
737     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
738     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
739     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
740     security bugs 219901, 220691, 220975, 220979, 221123. New
741     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
742     should be removed as far as I'm concerned, everything else remove due to
743     vulnerable to numerous security bugs or brokeness.
744 nixnut 1.222
745     10 May 2008; nixnut <nixnut@gentoo.org>
746     hardened-sources-2.6.23-r11.ebuild:
747     Stable on ppc
748 solar 1.221
749     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
750     - -r11 stable on x86/amd64
751 solar 1.220
752     *hardened-sources-2.6.23-r11 (01 May 2008)
753    
754     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
755     - version bump to fix ulgy linux bugs
756 phreak 1.219
757     *hardened-sources-2.6.24-r1 (30 Apr 2008)
758    
759     30 Apr 2008; Christian Heim <phreak@gentoo.org>
760     +hardened-sources-2.6.24-r1.ebuild:
761     Revision bump (thanks to Kerin and Gordon, again), pulling
762     genpatches-2.6.24-7, solving #219089. Additionally contains further security
763     fixes plus some minor updates.
764 phreak 1.218
765     *hardened-sources-2.6.23-r10 (30 Apr 2008)
766    
767     30 Apr 2008; Christian Heim <phreak@gentoo.org>
768     +hardened-sources-2.6.23-r10.ebuild:
769     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
770     Additional contains "various other fixes".
771 phreak 1.217
772     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
773     Update the longdescription in metadata, thanks to Gordon Malm.
774 nixnut 1.216
775     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
776     Stable on ppc wrt bug #213255
777 solar 1.215
778     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
779     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
780     - stable on x86/amd64 per request. Removed obsolete ebuilds
781 phreak 1.214
782     *hardened-sources-2.6.24 (07 Apr 2008)
783    
784     07 Apr 2008; Christian Heim <phreak@gentoo.org>
785     +hardened-sources-2.6.24.ebuild:
786     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
787     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
788     for the many contributions and their continued effort in #216612) based on
789     2.6.24 and genpatches-2.6.24-5.
790    
791     The current ebuild/patchset contains these things:
792     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
793     * Introduces bespoke server and workstation oriented security levels
794     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
795 phreak 1.213
796     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
797     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
798     maintaining it).
799 phreak 1.212
800     24 Mar 2008; Christian Heim <phreak@gentoo.org>
801     hardened-sources-2.4.35-r2.ebuild:
802     Fixing SRC_URI for 2.4.35-r2.
803 phreak 1.211
804     *hardened-sources-2.6.23-r9 (22 Mar 2008)
805    
806     22 Mar 2008; Christian Heim <phreak@gentoo.org>
807     +hardened-sources-2.6.23-r9.ebuild:
808     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
809     * Change the default GIDs for some grsecurity options
810     * Revamp the Hardened [Gentoo] security level and make it the default level
811     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
812     * Fix a recursive lock -- call to capable() within ptrace_attach()
813     * Fix bug that allows audit and iscsi operations to be controlled via netlink
814 solar 1.210
815     *hardened-sources-2.6.23-r8 (27 Feb 2008)
816    
817     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
818     - version bump from Kerin Millar bug 210026
819 solar 1.209
820     17 Feb 2008; <solar@gentoo.org> metadata.xml,
821     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
822     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
823     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
824     - stable on x86 and remove old ebuilds
825 solar 1.207
826     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
827 solar 1.208 - stable on amd64 per request of amd64 lead
828 solar 1.206
829     *hardened-sources-2.6.23-r7 (11 Feb 2008)
830    
831     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
832     - version bump from kerin.millar
833     Changes:
834    
835     * Bump to genpatches-base-2.6.23-9
836     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
837     * Disables COMPAT_VDSO in x86/defconfig
838     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
839 phreak 1.205
840     25 Jan 2008; Christian Heim <phreak@gentoo.org>
841     -hardened-sources-2.6.22-r8.ebuild:
842     Cleaning up old versions.
843 phreak 1.204
844     *hardened-sources-2.6.23-r6 (25 Jan 2008)
845    
846     25 Jan 2008; Christian Heim <phreak@gentoo.org>
847     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
848     Revision bump, pulling in the latest genpatches.
849 phreak 1.203
850     *hardened-sources-2.6.23-r5 (24 Dec 2007)
851    
852     24 Dec 2007; Christian Heim <phreak@gentoo.org>
853     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
854     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
855     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
856     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
857 phreak 1.202
858     24 Dec 2007; Christian Heim <phreak@gentoo.org>
859     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
860     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
861     -hardened-sources-2.6.23-r3.ebuild:
862     Cleaning out some unused, old versions.
863 phreak 1.201
864     24 Dec 2007; Christian Heim <phreak@gentoo.org>
865     hardened-sources-2.6.23-r4.ebuild:
866     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
867     in the tree for long, but there isn't much of a difference between this and
868     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
869 phreak 1.200
870     *hardened-sources-2.6.23-r4 (23 Dec 2007)
871    
872     23 Dec 2007; Christian Heim <phreak@gentoo.org>
873     +hardened-sources-2.6.23-r4.ebuild:
874     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
875 phreak 1.199
876     *hardened-sources-2.6.23-r3 (04 Dec 2007)
877    
878     04 Dec 2007; Christian Heim <phreak@gentoo.org>
879     +hardened-sources-2.6.23-r3.ebuild:
880     Revision bump, pulling in 2.6.23.9.
881 phreak 1.198
882     *hardened-sources-2.6.23-r2 (25 Nov 2007)
883    
884     25 Nov 2007; Christian Heim <phreak@gentoo.org>
885     +hardened-sources-2.6.23-r2.ebuild:
886     Updated patchset, thanks to solar.
887 phreak 1.197
888     *hardened-sources-2.6.23-r1 (31 Oct 2007)
889    
890     31 Oct 2007; Christian Heim <phreak@gentoo.org>
891     +hardened-sources-2.6.23-r1.ebuild:
892     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
893 solar 1.196
894     29 Oct 2007; <solar@gentoo.org> metadata.xml:
895     - update metadata.xml
896 phreak 1.195
897     25 Oct 2007; Christian Heim <phreak@gentoo.org>
898     hardened-sources-2.6.22-r8.ebuild:
899     Marking 2.6.22-r8 stable on amd64 and x86.
900 phreak 1.194
901     21 Oct 2007; Christian Heim <phreak@gentoo.org>
902     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
903     -hardened-sources-2.6.21-r4.ebuild:
904     Removing old ebuilds.
905 phreak 1.193
906     *hardened-sources-2.4.35-r2 (21 Oct 2007)
907    
908     21 Oct 2007; Christian Heim <phreak@gentoo.org>
909     +hardened-sources-2.4.35-r2.ebuild:
910     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
911     patches.
912 phreak 1.192
913     *hardened-sources-2.6.22-r8 (21 Oct 2007)
914    
915     21 Oct 2007; Christian Heim <phreak@gentoo.org>
916     +hardened-sources-2.6.22-r8.ebuild:
917     Yet another new patch, hopefully fixing the remaining issues we had w/
918     2.6.22. Candidate for stabling.
919 phreak 1.191
920     *hardened-sources-2.6.23 (13 Oct 2007)
921    
922     13 Oct 2007; Christian Heim <phreak@gentoo.org>
923     +hardened-sources-2.6.23.ebuild:
924     Initial hardened-sources-2.6.23. If people still have problems w/ bug
925     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
926 phreak 1.190
927     11 Oct 2007; Christian Heim <phreak@gentoo.org>
928     hardened-sources-2.6.20-r10.ebuild:
929     Pulling in yet another new genpatches version, fixing the PWC bug for real.
930 phreak 1.189
931     04 Oct 2007; Christian Heim <phreak@gentoo.org>
932     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
933     Removing old versions.
934 phreak 1.188
935     *hardened-sources-2.6.22-r7 (01 Oct 2007)
936    
937     01 Oct 2007; Christian Heim <phreak@gentoo.org>
938     +hardened-sources-2.6.22-r7.ebuild:
939     Revision bump, pulling in a newer patch. Should fix #194276.
940 phreak 1.187
941     30 Sep 2007; Christian Heim <phreak@gentoo.org>
942     hardened-sources-2.6.20-r10.ebuild:
943     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
944     Mike Doty).
945 phreak 1.186
946     *hardened-sources-2.6.22-r6 (26 Sep 2007)
947    
948     26 Sep 2007; Christian Heim <phreak@gentoo.org>
949     +hardened-sources-2.6.22-r6.ebuild:
950     Revision bump, grabbing up till Linux 2.6.22.9.
951 phreak 1.185
952     24 Sep 2007; Christian Heim <phreak@gentoo.org>
953     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
954     Cleaning up further.
955 phreak 1.184
956     *hardened-sources-2.6.20-r10 (24 Sep 2007)
957    
958     24 Sep 2007; Christian Heim <phreak@gentoo.org>
959     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
960     +hardened-sources-2.6.20-r10.ebuild:
961     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
962     revisions.
963 phreak 1.183
964     *hardened-sources-2.6.22-r5 (22 Sep 2007)
965    
966     22 Sep 2007; Christian Heim <phreak@gentoo.org>
967     +hardened-sources-2.6.22-r5.ebuild:
968     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
969 phreak 1.182
970     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
971     Removing johnm from metadata.xml (see #186467 for reference).
972 phreak 1.181
973     *hardened-sources-2.6.22-r4 (17 Sep 2007)
974    
975     17 Sep 2007; Christian Heim <phreak@gentoo.org>
976     +hardened-sources-2.6.22-r4.ebuild:
977     Revision bump, hopefully fixing all those weird PAX failures.
978 phreak 1.180
979     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
980     Updating the metadata.xml.
981 phreak 1.179
982     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
983     Removing tocharian from metadata due to his retirement (see #71718 for
984     reference).
985 phreak 1.178
986     *hardened-sources-2.6.20-r9 (30 Aug 2007)
987    
988     30 Aug 2007; Christian Heim <phreak@gentoo.org>
989     +hardened-sources-2.6.20-r9.ebuild:
990     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
991 phreak 1.177
992     29 Aug 2007; Christian Heim <phreak@gentoo.org>
993     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
994     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
995     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
996     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
997     -hardened-sources-2.6.22-r2.ebuild:
998     Removing some redundant versions.
999 phreak 1.176
1000     *hardened-sources-2.4.35-r1 (29 Aug 2007)
1001    
1002     29 Aug 2007; Christian Heim <phreak@gentoo.org>
1003     +hardened-sources-2.4.35-r1.ebuild:
1004     Revision bump, new grsecurity patch.
1005 phreak 1.175
1006     *hardened-sources-2.6.20-r8 (26 Aug 2007)
1007    
1008     26 Aug 2007; Christian Heim <phreak@gentoo.org>
1009     +hardened-sources-2.6.20-r8.ebuild:
1010     Revision bump for Linux 2.6.20.17.
1011 phreak 1.174
1012     *hardened-sources-2.6.22-r3 (22 Aug 2007)
1013    
1014     22 Aug 2007; Christian Heim <phreak@gentoo.org>
1015     +hardened-sources-2.6.22-r3.ebuild:
1016     Revision bump for Linux 2.6.22.4.
1017 phreak 1.173
1018     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1019     hardened-sources-2.6.22-r2.ebuild:
1020     Updated patchset, to fix the alignment against 2.6.22.3.
1021 phreak 1.172
1022     *hardened-sources-2.6.22-r2 (16 Aug 2007)
1023    
1024     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1025     +hardened-sources-2.6.22-r2.ebuild:
1026     Revision bump for Linux 2.6.22.3.
1027 phreak 1.171
1028     *hardened-sources-2.4.35 (16 Aug 2007)
1029    
1030     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1031     +hardened-sources-2.4.35.ebuild:
1032     Version bump, initial version for Linux 2.4.35.
1033 phreak 1.170
1034     *hardened-sources-2.6.21-r4 (16 Aug 2007)
1035    
1036     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1037     +hardened-sources-2.6.21-r4.ebuild:
1038     Revision bump for Linux 2.6.21.6.
1039 phreak 1.169
1040     *hardened-sources-2.6.20-r7 (16 Aug 2007)
1041    
1042     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1043     +hardened-sources-2.6.20-r7.ebuild:
1044     Revision bump for Linux 2.6.20.16.
1045 phreak 1.168
1046     *hardened-sources-2.6.22-r1 (13 Aug 2007)
1047    
1048     13 Aug 2007; Christian Heim <phreak@gentoo.org>
1049     +hardened-sources-2.6.22-r1.ebuild:
1050     Yet another revision bump.
1051 phreak 1.167
1052     *hardened-sources-2.6.22 (10 Aug 2007)
1053    
1054     10 Aug 2007; Christian Heim <phreak@gentoo.org>
1055     +hardened-sources-2.6.22.ebuild:
1056     Initial release for 2.6.22. If you are using hardened-sources on a desktop
1057     machine (P4 or newer), be aware you might need to disable
1058     CONFIG_PAX_PAGEEXEC.
1059 phreak 1.166
1060     04 Aug 2007; Christian Heim <phreak@gentoo.org>
1061     hardened-sources-2.6.20-r6.ebuild:
1062     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
1063     2.6.20.15.
1064 phreak 1.165
1065     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1066     hardened-sources-2.6.20-r5.ebuild:
1067     Marking hardened-sources-2.6.20-r5 stable on ppc.
1068 phreak 1.164
1069     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1070     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
1071     Cleanup.
1072 phreak 1.163
1073     *hardened-sources-2.6.20-r6 (08 Jul 2007)
1074    
1075     08 Jul 2007; Christian Heim <phreak@gentoo.org>
1076     +hardened-sources-2.6.20-r6.ebuild:
1077     Revision bump, grabbing yet another stable release.
1078 phreak 1.162
1079     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1080     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
1081     -hardened-sources-2.6.21-r2.ebuild:
1082     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
1083     alpha stable KEYWORD by mistake.
1084 phreak 1.161
1085     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1086     hardened-sources-2.6.20-r5.ebuild:
1087     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
1088     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
1089 phreak 1.160
1090     *hardened-sources-2.6.21-r3 (12 Jun 2007)
1091    
1092     12 Jun 2007; Christian Heim <phreak@gentoo.org>
1093     +hardened-sources-2.6.21-r3.ebuild:
1094     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
1095     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
1096     love.
1097 phreak 1.159
1098     *hardened-sources-2.6.20-r5 (11 Jun 2007)
1099    
1100     11 Jun 2007; Christian Heim <phreak@gentoo.org>
1101     +hardened-sources-2.6.20-r5.ebuild:
1102     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1103     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1104     love.
1105 pappy 1.158
1106     *hardened-sources-2.4.34.5 (11 Jun 2007)
1107    
1108     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1109     +hardened-sources-2.4.34.5.ebuild:
1110     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1111 phreak 1.157
1112     30 May 2007; Christian Heim <phreak@gentoo.org>
1113     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1114     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1115     stale ebuild(s).
1116 phreak 1.156
1117     30 May 2007; Christian Heim <phreak@gentoo.org>
1118     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1119     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1120     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1121     Doing some cleanups, remove stale ebuilds.
1122 phreak 1.155
1123     26 May 2007; Christian Heim <phreak@gentoo.org>
1124     hardened-sources-2.6.21-r2.ebuild:
1125     Fixing the grsecurity patch, had one '};' too much.
1126 phreak 1.154
1127     *hardened-sources-2.6.21-r2 (26 May 2007)
1128    
1129     26 May 2007; Christian Heim <phreak@gentoo.org>
1130     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1131     +hardened-sources-2.6.21-r2.ebuild:
1132     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1133     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1134 phreak 1.153
1135     *hardened-sources-2.6.20-r4 (26 May 2007)
1136    
1137     26 May 2007; Christian Heim <phreak@gentoo.org>
1138     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1139     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1140 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1141 phreak 1.152
1142     15 May 2007; Christian Heim <phreak@gentoo.org>
1143     hardened-sources-2.6.20-r3.ebuild:
1144     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1145     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1146     grsecurity patch fail in that exact same hunk.
1147 phreak 1.151
1148     *hardened-sources-2.6.20-r3 (15 May 2007)
1149    
1150     15 May 2007; Christian Heim <phreak@gentoo.org>
1151     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1152     Revision bump, incorporating Linux 2.6.20.11.
1153    
1154     *hardened-sources-2.6.21-r1 (11 May 2007)
1155    
1156     11 May 2007; Christian Heim <phreak@gentoo.org>
1157     +hardened-sources-2.6.21-r1.ebuild:
1158     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1159     mentioned in #177234.
1160 kevquinn 1.150
1161     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1162     files/digest-hardened-sources-2.6.21, Manifest:
1163     Fix Manifest/digest for linux-2.6.21.tar.bz2
1164 phreak 1.149
1165     06 May 2007; Christian Heim <phreak@gentoo.org>
1166     hardened-sources-2.6.21.ebuild:
1167     Bumping the hardened-patches version, needed for the fix for #177234.
1168 phreak 1.148
1169     *hardened-sources-2.6.21 (02 May 2007)
1170    
1171     02 May 2007; Christian Heim <phreak@gentoo.org>
1172     +hardened-sources-2.6.21.ebuild:
1173     Version bump, Linux 2.6.21-hardened.
1174 phreak 1.147
1175     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1176     hardened-sources-2.6.20-r2.ebuild:
1177     Adding ~ia64 on Ned's request.
1178 phreak 1.146
1179     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1180     hardened-sources-2.6.20-r2.ebuild:
1181     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1182     header line(s).
1183 phreak 1.145
1184     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1185     hardened-sources-2.6.20-r2.ebuild:
1186     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1187 armin76 1.144
1188     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1189    
1190     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1191     +hardened-sources-2.6.20-r2.ebuild:
1192     Version bump, on behalf of phreak
1193 phreak 1.143
1194     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1195    
1196     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1197     +hardened-sources-2.6.20-r1.ebuild:
1198     Revision bump, grabbing a newer grsecurity snapshot.
1199 phreak 1.142
1200     *hardened-sources-2.6.20 (25 Mar 2007)
1201    
1202     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1203     +hardened-sources-2.6.20.ebuild:
1204     Finally a hardened-sources version for 2.6.20; many people have been waiting
1205     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1206     testbox.
1207 chainsaw 1.141
1208     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1209     hardened-sources-2.6.18-r6.ebuild:
1210     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1211 phreak 1.140
1212     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1213    
1214     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1215     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1216     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1217     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1218     supposed to be.
1219 phreak 1.139
1220     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1221     Fixing the Manifest, the previous one was broken (as in still had the
1222     deleted ebuild in it).
1223 phreak 1.138
1224     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1225     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1226     +hardened-sources-2.6.18-r5.ebuild:
1227     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1228     Linux 2.6.18.8. Also cleaning up the older version.
1229    
1230     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1231    
1232     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1233     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1234     +hardened-sources-2.6.18-r5.ebuild:
1235     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1236     Linux 2.6.18.8. Also cleaning up the older version.
1237 phreak 1.137
1238     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1239     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1240     -hardened-sources-2.6.19-r5.ebuild:
1241     Removing some of the old version, that didn't work.
1242 phreak 1.136
1243     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1244    
1245     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1246     +hardened-sources-2.6.19-r6.ebuild:
1247     Revision bump, including a new grsec version fixing #166235.
1248 pappy 1.134
1249     *hardened-sources-2.4.34 (24 Jan 2007)
1250    
1251     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1252 pappy 1.135 Manifest:
1253     updating Manifest with checksums of new tarball and ebuild
1254    
1255     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1256 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1257     I added new hardened sources 2.4 update, this is a critical path
1258     security bugfix - all users of h-s are strongly advised
1259     to update their existing hardened sources to this version.
1260     It contains a fix for a kernel vulnerability that is pertaining
1261     to the PaX changes to virtual memory management, possibly leading
1262     to a local kernel exploit ... see grsecurity.net forums and homepage
1263 phreak 1.133
1264     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1265     files/digest-hardened-sources-2.6.19-r5, Manifest:
1266     Fixing the patch-tarball digest.
1267 phreak 1.132
1268     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1269    
1270     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1271     +hardened-sources-2.6.19-r5.ebuild:
1272     Revision bump, closing the recently discovered PaX expand_stack()
1273     vulnerability.
1274 phreak 1.131
1275     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1276    
1277     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1278     +hardened-sources-2.6.19-r4.ebuild:
1279     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1280     dropping the randomized PID feature.
1281 opfer 1.130
1282     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1283     hardened-sources-2.4.33.4.ebuild:
1284     stable x86, bug #161171
1285 phreak 1.129
1286     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1287    
1288     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1289     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1290     Revision bump for bug #157186 and #158786.
1291 phreak 1.128
1292     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1293    
1294     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1295     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1296     Revision bump for bug #157186.
1297 phreak 1.127
1298     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1299    
1300     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1301     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1302     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1303 phreak 1.126
1304     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1305     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1306     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1307     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1308     hardened-sources-2.6.19-r1.ebuild:
1309     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1310     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1311 pappy 1.125
1312     *hardened-sources-2.4.33.4 (17 Dec 2006)
1313    
1314     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1315     +hardened-sources-2.4.33.4.ebuild:
1316     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1317     and quilting
1318 phreak 1.124
1319     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1320    
1321     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1322     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1323     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1324     for reporting).
1325 phreak 1.123
1326     *hardened-sources-2.6.19 (13 Dec 2006)
1327    
1328     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1329     +hardened-sources-2.6.19.ebuild:
1330     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1331     Brad for providing that prompt update.
1332 phreak 1.122
1333     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1334    
1335     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1336     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1337     +hardened-sources-2.6.18-r3.ebuild:
1338     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1339     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1340 phreak 1.121
1341     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1342     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1343 nixnut 1.120
1344     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1345     Stable on ppc wrt bug 157356
1346 opfer 1.119
1347     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1348     hardened-sources-2.6.18.ebuild:
1349     stable x86, bug #157356
1350 phreak 1.118
1351     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1352    
1353     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1354     +hardened-sources-2.6.18-r2.ebuild:
1355     Revision bump, including 2.6.18.5 (via genpatches) and
1356     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1357     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1358     redesign.
1359 phreak 1.117
1360     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1361     hardened-sources-2.6.18.ebuild:
1362     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1363     of Mike Doty).
1364 phreak 1.116
1365     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1366    
1367     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1368     +hardened-sources-2.6.18-r1.ebuild:
1369     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1370 phreak 1.115
1371     *hardened-sources-2.6.18 (11 Nov 2006)
1372    
1373     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1374     +hardened-sources-2.6.18.ebuild:
1375     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1376 solar 1.114
1377     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1378     - mark amd64 stable also. bug #151877
1379 solar 1.113
1380     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1381     - mark 2.6.17-r1 stable
1382 phreak 1.112
1383     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1384     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1385     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1386 phreak 1.111
1387     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1388    
1389     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1390     +hardened-sources-2.6.17-r1.ebuild:
1391     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1392     grsecurity patch.
1393 phreak 1.110
1394     *hardened-sources-2.6.17 (17 Aug 2006)
1395    
1396     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1397     +hardened-sources-2.6.17.ebuild:
1398     Bumping the hardened-sources-2.6 series to 2.6.17, using
1399     genpatches-2.6.17-6.base.
1400 solar 1.109
1401     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1402     - stable on x86 and amd64
1403 solar 1.108
1404     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1405    
1406     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1407     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1408     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1409     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1410     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1411     crusty ebuilds
1412 johnm 1.107
1413     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1414     hardened-sources-2.6.16-r10.ebuild:
1415     marking stable on x86 and amd64
1416 solar 1.106
1417     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1418     - 2.4.32-r6 stable on x86. RSBAC state unknown
1419 kang 1.105
1420     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1421    
1422     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1423     +hardened-sources-2.4.32-r7.ebuild:
1424     Bump PaX for RSBAC to test-17
1425 johnm 1.104
1426     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1427    
1428     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1429     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1430     hardened-sources-2.6.16 bump to latest -base.
1431 solar 1.103
1432     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1433    
1434     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1435     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1436     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1437     sysctl controlable resource logging
1438 johnm 1.102
1439     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1440    
1441     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1442     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1443     push new 2.6.16 release in preparation for stable
1444 solar 1.101
1445     22 May 2006; <solar@gentoo.org> :
1446     - redigest bug 134002
1447 kang 1.100
1448     *hardened-sources-2.4.32-r5 (16 May 2006)
1449    
1450     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1451     +hardened-sources-2.4.32-r5.ebuild:
1452     Fixes rsbac common patching (new patch in new -r5 patchset)
1453 solar 1.99
1454     *hardened-sources-2.4.32-r4 (13 May 2006)
1455    
1456     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1457     +hardened-sources-2.4.32-r4.ebuild:
1458     - security bumps
1459 johnm 1.98
1460     *hardened-sources-2.6.16-r6 (03 May 2006)
1461    
1462     03 May 2006; John Mylchreest <johnm@gentoo.org>
1463     +hardened-sources-2.6.16-r6.ebuild:
1464     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1465 johnm 1.97
1466     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1467     hardened-sources-2.6.14-r8.ebuild:
1468     fix x86_64 build problem, this will delay the digest issue again for a short
1469     while but it will sort itself out
1470 johnm 1.96
1471     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1472     hardened-sources-2.6.14-r8.ebuild:
1473     bump hardened patchset
1474 antarus 1.94
1475     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1476     files/digest-hardened-sources-2.4.32-r2,
1477     files/digest-hardened-sources-2.4.32-r3,
1478     files/digest-hardened-sources-2.6.14-r8, Manifest:
1479     Fixing duff SHA256 digests: Bug # 131293
1480 johnm 1.93
1481 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1482    
1483     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1484     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1485     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1486     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1487     cleanup of old uneccessary sources
1488    
1489 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1490     fix digest
1491 johnm 1.92
1492     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1493    
1494     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1495     +hardened-sources-2.6.14-r8.ebuild:
1496     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1497 johnm 1.91
1498     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1499     Turning on gpg-signing again, and recomitting
1500 johnm 1.90
1501     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1502    
1503     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1504     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1505     +hardened-sources-2.6.16-r4.ebuild:
1506     Fix numerous security vulns
1507 solar 1.89
1508     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1509    
1510     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1511     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1512     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1513     - security bump for bug #112791. Removed old ebuilds
1514 johnm 1.88
1515     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1516    
1517     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1518     +hardened-sources-2.6.16-r3.ebuild:
1519     Removing silly localversion which I missed
1520 johnm 1.87
1521     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1522    
1523     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1524     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1525     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1526 johnm 1.86
1527     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1528    
1529     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1530     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1531     +hardened-sources-2.6.16-r2.ebuild:
1532     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1533     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1534 johnm 1.85
1535     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1536    
1537     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1538     +hardened-sources-2.6.16-r1.ebuild:
1539     Bumping to include ppc build fix and 2.6.16.3
1540 tsunam 1.84
1541     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1542     hardened-sources-2.6.14-r6.ebuild:
1543     Stable on x86; bug #127718
1544 johnm 1.83
1545     *hardened-sources-2.6.16 (31 Mar 2006)
1546    
1547     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1548     +hardened-sources-2.6.16.ebuild:
1549     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1550     2.6.16.1
1551 cryos 1.82
1552     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1553     hardened-sources-2.6.14-r6.ebuild:
1554     Stable on amd64, bug 127718.
1555 nixnut 1.81
1556     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1557     Stable on ppc. Bug #127718
1558 johnm 1.80
1559     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1560     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1561     -hardened-sources-2.6.14-r4.ebuild:
1562     Cleanup.
1563 johnm 1.79
1564     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1565    
1566     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1567     +hardened-sources-2.6.14-r6.ebuild:
1568     Fixes grsec policy recreation bug and adds a
1569     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1570 solar 1.78
1571     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1572     - stable on x86
1573 hansmi 1.77
1574     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1575     hardened-sources-2.6.14-r5.ebuild:
1576     Stable on ppc.
1577 johnm 1.76
1578     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1579    
1580     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1581     +hardened-sources-2.6.14-r5.ebuild:
1582     fixing every known exploit
1583 solar 1.75
1584     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1585    
1586     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1587     +hardened-sources-2.4.32-r2.ebuild:
1588     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1589 solar 1.74
1590     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1591    
1592     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1593     - version bump for new genpatches which fix up a few sec holes
1594 solar 1.73
1595     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1596    
1597     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1598     - revision bump to add misc vital linux kernel security patches.
1599 johnm 1.72
1600     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1601    
1602     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1603     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1604     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1605 johnm 1.71
1606     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1607     hardened-sources-2.6.14-r2.ebuild:
1608     making x86 & amd64 stable following testing.
1609 johnm 1.70
1610     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1611    
1612     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1613     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1614     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1615     network hooks.
1616 johnm 1.69
1617     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1618     hardened-sources-2.6.14-r1.ebuild:
1619     bumping to stable early for sec fix on x86 & amd64
1620 johnm 1.68
1621     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1622    
1623     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1624     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1625     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1626 solar 1.67
1627     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1628     - stable on x86 security bug #114227 CAN-2005-3257
1629 kang 1.66
1630     *hardened-sources-2.4.32 (19 Nov 2005)
1631    
1632     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1633     +hardened-sources-2.4.32.ebuild:
1634     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1635     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1636     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1637     rsbac >> /etc/portage/package.use)
1638 johnm 1.65
1639     *hardened-sources-2.6.14 (14 Nov 2005)
1640    
1641     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1642     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1643     Bumping 2.6 series to 2.6.14.2
1644 johnm 1.64
1645     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1646    
1647     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1648     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1649     +hardened-sources-2.6.13-r2.ebuild:
1650     Fixes minor build error in ppc.
1651 johnm 1.63
1652     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1653    
1654     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1655     +hardened-sources-2.6.13-r1.ebuild:
1656     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1657     2.6.13.4, fixes some major amd64 stability problems.
1658 johnm 1.62
1659     *hardened-sources-2.6.13 (16 Sep 2005)
1660    
1661     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1662     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1663     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1664     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1665     users should test this thoroughly.
1666 solar 1.61
1667     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1668     - stable on x86
1669 johnm 1.60
1670     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1671    
1672     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1673     +hardened-sources-2.6.11-r15.ebuild:
1674     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1675     grsec redefining curr_ip struct.
1676 solar 1.59
1677     *hardened-sources-2.4.31 (20 Jun 2005)
1678    
1679     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1680     initial import of 2.4.31 tree
1681 johnm 1.58
1682     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1683    
1684     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1685     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1686     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1687     naming scheme to abide by genpatches
1688 johnm 1.57
1689     *hardened-sources-2.6.11-r13 (18 May 2005)
1690    
1691     18 May 2005; John Mylchreest <johnm@gentoo.org>
1692     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1693     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1694     target. sorry about that. Fixes bug #93022
1695 johnm 1.56
1696     *hardened-sources-2.6.11-r12 (17 May 2005)
1697    
1698     17 May 2005; John Mylchreest <johnm@gentoo.org>
1699     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1700     +hardened-sources-2.6.11-r12.ebuild:
1701     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1702     merges in genpatches-base
1703 johnm 1.55
1704     *hardened-sources-2.6.11-r12 (17 May 2005)
1705    
1706     17 May 2005; John Mylchreest <johnm@gentoo.org>
1707     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1708     +hardened-sources-2.6.11-r12.ebuild:
1709     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1710     merges in genpatches-base
1711 solar 1.54
1712     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1713     -files/2.4.27-cmdline-race.patch,
1714     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1715     -files/2.4.28-grsec-binfmt_a.out.patch,
1716     -files/2.4.28-grsec-cmdline-race.patch,
1717     -files/2.4.28-selinux-binfmt_a.out.patch,
1718     -files/2.4.28-selinux-cmdline-race.patch,
1719     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1720     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1721     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1722     cleanup..
1723 solar 1.53
1724     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1725    
1726     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1727     - disable aout by default
1728 solar 1.52
1729     *hardened-sources-2.4.30 (18 Apr 2005)
1730    
1731     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1732     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1733     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1734     use
1735 tocharian 1.50
1736 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1737    
1738     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1739     +hardened-sources-2.4.29.ebuild:
1740     New hardened-patches-2.4-29.0 patchball.
1741     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1742    
1743     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1744    
1745     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1746     +hardened-sources-2.4.28-r5.ebuild:
1747     Added a fix for a PaX vulnerability.
1748    
1749     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1750 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1751     Stable on x86
1752 solar 1.49
1753     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1754     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1755     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1756     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1757     - fixed/added RDEPEND= in all kernel-2 ebuilds
1758 tocharian 1.48
1759     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1760    
1761     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1762     +hardened-sources-2.4.28-r4.ebuild:
1763     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1764     backport of neighbour hash updates.
1765 tocharian 1.47
1766     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1767     hardened-sources-2.4.28-r3.ebuild:
1768     Stable on x86
1769 tseng 1.46
1770     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1771    
1772     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1773     +hardened-sources-2.6.10-r3.ebuild:
1774     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1775     in 2005.0
1776 tocharian 1.45
1777     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1778     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1779     hardened-sources-2.4.28-r2.ebuild:
1780     Mark stable on x86
1781 tocharian 1.44
1782     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1783    
1784     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1785     +hardened-sources-2.4.28-r3.ebuild:
1786     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1787 tocharian 1.43
1788     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1789     hardened-sources-2.4.28.ebuild:
1790     Mark stable on x86.
1791 tocharian 1.42
1792     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1793    
1794     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1795     +hardened-sources-2.4.28-r2.ebuild:
1796     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1797     Mazinger for grsecurity patches as well.
1798 plasmaroo 1.41
1799     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1800    
1801     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1802     Security bump. Thank tocharian for rolling a new patchset...
1803 solar 1.40
1804     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1805     +files/2.4.28-grsec-cmdline-race.patch,
1806     +files/2.4.28-selinux-binfmt_a.out.patch,
1807     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1808     - Round up remaining security patches that appear to be missing in 2.4.28. -
1809     PaX standalone updated to current. hgpv=28.1
1810 solar 1.39
1811     *hardened-sources-2.4.28 (28 Nov 2004)
1812    
1813     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1814     security bump. Thank tocharian for rolling a new patchset
1815 scox 1.31
1816 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1817    
1818     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1819     +hardened-sources-2.4.27-r3.ebuild:
1820     Applies the new 2.4-27.2 patchball which updates
1821     GRSecurity to the 2.0.1 version.
1822    
1823 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1824    
1825     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1826     +hardened-sources-2.4.27-r2.ebuild:
1827     Version bump.
1828     This version uses the new 2.4-27.1 patchball which updates
1829     both the SELinux PaX hooks patch and the SELinux headers.
1830    
1831 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1832    
1833     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1834     +hardened-sources-2.4.27-r1.ebuild,
1835     -hardened-sources-2.4.27.ebuild,
1836     +files/2.4.27-cmdline-race.patch:
1837     Version bump, fix for cmdline race. See bug #59905.
1838    
1839     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1840    
1841     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1842     +hardened-sources-2.4.26-r6.ebuild,
1843     -hardened-sources-2.4.26-r5.ebuild,
1844     -hardened-sources-2.4.26-r4.ebuild,
1845     +files/2.4.26-cmdline-race.patch:
1846     Version bump, fix for cmdline race. See bug #59905.
1847    
1848 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1849    
1850     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1851     +hardened-sources-2.4.27.ebuild,
1852     +files/2.4.27-CAN-2004-0394.patch:
1853     Ported the patchball to the 2.4.27 kernel version.
1854    
1855 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1856    
1857     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1858     +hardened-sources-2.4.26-r5.ebuild:
1859 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1860 scox 1.34 It adds the following features:
1861     - Squashfs
1862     - Ebtables
1863     - Netdev random (core+drivers)
1864     - Watchdog Timer (WDT) fix.
1865    
1866 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1867    
1868     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1869     +hardened-sources-2.4.26-r4.ebuild,
1870     +files/2.4.26-CAN-2004-0415.patch,
1871     -hardened-sources-2.4.26-3:
1872     Version bump, fix for CAN 0415, see bug #59378.
1873    
1874 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1875    
1876     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1877     +hardened-sources-2.4.26-r3.ebuild,
1878     +files/2.4.26-CAN-2004-0497.patch,
1879     -hardened-sources-2.4.26-r2.ebuild:
1880     Version bump, fixed CAN 0497, see bug #56171.
1881    
1882 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1883    
1884     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1885 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1886 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1887     +files/2.4.26-CAN-2004-0535.patch,
1888     -hardened-sources-2.4.26-r1.ebuild:
1889     Fixes for both CAN 0495 and 0535, see bug #54976
1890 pvdabeel 1.27
1891 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1892     hardened-sources-2.4.26-r1.ebuild:
1893     QA - fix use invocation
1894 scox 1.28
1895     *hardened-sources-2.4.26-r1 (22 June 2004)
1896    
1897     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1898     +hardened-sources-2.4.26-r1.ebuild,
1899     +files/2.4.26-CAN-2004-0394.patch,
1900     +files/2.4.26-signal-race.patch,
1901     -hardened-sources-2.4.26.ebuild,
1902     -hardened-sources-2.4.24-r3.ebuild:
1903     Version bump for the CAN-2004-0394 issue and bug #53804
1904     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1905    
1906    
1907 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1908     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1909     Masked hardened-sources-2.4.26.ebuild broken for ppc
1910    
1911     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1912     hardened-sources-2.4.24-r3.ebuild:
1913     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1914 plasmaroo 1.25
1915 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1916    
1917     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1918     +hardened-sources-2.4.26.ebuild:
1919     Updated hardened-sources for the 2.4.26 kernel
1920     Removed broken components, updated almost everything.
1921    
1922 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1923    
1924     17 Apr 2004; <plasmaroo@gentoo.org>
1925     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1926     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1927     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1928     +hardened-sources-2.4.24-r3.ebuild:
1929     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1930     vulnerabilities. Old revisions removed.
1931 plasmaroo 1.24
1932     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1933    
1934     15 Apr 2004; <plasmaroo@gentoo.org>
1935     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1936     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1937     Version bump for the CAN-2004-0109 issue; bug #47881.
1938 aliz 1.23
1939     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1940     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1941     Add eutils to inherit.
1942 plasmaroo 1.22
1943     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1944    
1945     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1946     files/hardened-sources-2.4.24.munmap.patch:
1947     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1948 scox 1.19
1949 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1950 scox 1.26
1951 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1952     hardened-sources-2.4.24.ebuild:
1953     Version bump, updated most of the components.
1954     This release includes the following:
1955    
1956     - Hardened security
1957     - Netfilter patch-o-matic 20031219
1958     - FreeSWAN 2.04 & x509 1.4.8
1959     - EVMS 2.2.2
1960     - XFS 1.3.1
1961     - cryptoloop jari
1962     - grsecurity 2.0-rc4
1963     - SELinux
1964     - PaX 200402060000
1965     - PaX Obscurity 200308302223
1966     - Others...
1967    
1968     Neither -ck nor systrace are included anymore.
1969    
1970 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1971    
1972     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1973     hardened-sources-2.4.22-r2.ebuild:
1974 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1975 scox 1.19
1976     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1977 iggy 1.17
1978     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1979 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1980 iggy 1.16
1981     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1982 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1983     Version bump for the 'do_brk' vulnerability.
1984 iggy 1.15
1985     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1986     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1987     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1988     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1989 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1990 frogger 1.14
1991     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1992     hardened-sources-2.4.22.ebuild:
1993 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1994     components. These are no longer handled in the kernel
1995     so this code was not necessary.
1996 frogger 1.13
1997     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1998     New 2.4.22 based hardened-sources thanks to
1999     Phil West <p.west@computer.org>.
2000    
2001     These sources include:
2002 plasmaroo 1.18 - New SELinux API
2003     - Updated CK-base
2004     - Updated GRSec
2005     - Systrace
2006     - SuperFreeS/WAN 1.99.8
2007     - Propolice kernel build support
2008     - EVMS
2009     - Other various security related patches
2010 frogger 1.11
2011 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
2012    
2013     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
2014     Updated hardened-sources based on the 2.4.21 Linux kernel.
2015     This includes updates to most major components such as:
2016 plasmaroo 1.18 - ck-base-0306300059
2017     - selinux-2.4-2003071106
2018     - grsecurity-2.0-rc1
2019     - Updated IPTables patch-o-matic
2020     - Updated SuperFreeS/WAN
2021    
2022 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
2023     updated patch set ready for the 2.4.21 based kernel.
2024    
2025 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
2026     Initial import of hardened-sources-2.4.20-r4. This revision
2027     includes only a few changes, but one of these is an important
2028     security fix. It is recommended all users of hardened-sources
2029     upgrade to this release.
2030 plasmaroo 1.18
2031 frogger 1.11 - ioperm bug fix
2032     - fixed compilation failure when building without GRSec
2033 plasmaroo 1.18
2034 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
2035     due to time constraints, but is planned for inclusion in the near
2036     future.
2037 msterret 1.10
2038     *hardened-sources-2.4.20-r2 (12 Jun 2003)
2039    
2040     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
2041     hardened-sources-2.4.20-r3.ebuild:
2042 plasmaroo 1.18 Add Header...
2043 frogger 1.9
2044     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2045     hardened-sources-2.4.20-r3.ebuild:
2046     Removed warnings from ebuild. This kernel should be safe to
2047     use at this point.
2048 frogger 1.8
2049     *hardened-sources-2.4.20-r3 (08 Jun 2003)
2050    
2051     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2052     hardened-sources-2.4.20-r3.ebuild:
2053     New revision. Includes the following changes over -r2:
2054 plasmaroo 1.18
2055 frogger 1.8 - ck7-base (O(1), preempt, low latency)
2056     - Super FreeS/WAN 1.99.7rc2
2057     - PaX for the LSM/SELinux branch
2058     - GRSecurity 2.0-pre4 (role based access control)
2059     - Systrace 1.3
2060     - EXT3 fixes
2061     - EVMS 2.0.1
2062     - GCC 3.1+ compile optimizations
2063     - ProPolice kernel build support
2064     - Hashing table security fixes
2065 frogger 1.3
2066     *hardened-sources-2.4.20-r1 (09 Apr 2003)
2067 frogger 1.7
2068     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
2069     Initial import of hardened-sources-r2. This new
2070     ebuild includes many new performance and security
2071     related patches. As in -r1, it will patch in
2072     LSM/SELinux if "selinux" is in USE, otherwise it
2073     will patch in GRSecurity. The following patches
2074     are included in this revision:
2075 plasmaroo 1.18
2076 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
2077     (pulled from the base CK patch)
2078     - ptrace exploit patch for the LSM kernel
2079     (the GRSec patch already fixes this)
2080     - LSM 2.4-2003040709
2081     - SELinux 2.4-2003040709
2082     - Systrace v1.2
2083     - IPTables patch-o-matic base patches - 20030107
2084     - CryptoAPI 2.4.20.1 w/ loop-jari patch
2085     - Super FreeS/WAN 1.99.6.1
2086     - GRSecurity 1.9.9g
2087     - MPPE
2088     - EXT3 data journal fix
2089     - CIPE 1.5.4
2090 frogger 1.6
2091     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2092     hardened-sources-2.4.20-r1.ebuild, manifest:
2093 plasmaroo 1.18 Updated to install flask components correctly for selinux.
2094 frogger 1.5
2095     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2096     hardened-sources-2.4.20-r1.ebuild:
2097     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2098     is patched in instead. Ptrace patches for selinux have also been added. In
2099     either case, systrace support will be patched in as well.
2100 frogger 1.3
2101     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2102     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2103 plasmaroo 1.18 Revision bump for new sources.
2104 frogger 1.4
2105 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2106 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
2107 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2108 method 1.1
2109 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
2110    
2111 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2112     hardened-sources-2.4.20.ebuild:
2113 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20