/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.362 - (hide annotations) (download)
Mon Nov 29 01:31:22 2010 UTC (3 years, 9 months ago) by blueness
Branch: MAIN
Changes since 1.361: +8 -1 lines
hardened-sources-2.6.36-r3 based on 2.6.36.1 + genpatches + grsecurity-2.2.1-2.6.36.1-201011261834

(Portage version: 2.1.9.24/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.362 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.361 2010/11/29 01:28:19 blueness Exp $
4    
5     *hardened-sources-2.6.36-r3 (29 Nov 2010)
6    
7     29 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
8     +hardened-sources-2.6.36-r3.ebuild:
9     hardened-sources-2.6.36-r3 based on 2.6.36.1 + genpatches +
10     grsecurity-2.2.1-2.6.36.1-201011261834
11 blueness 1.361
12     *hardened-sources-2.6.32-r28 (29 Nov 2010)
13    
14     29 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
15     +hardened-sources-2.6.32-r28.ebuild:
16     hardened-sources-2.6.32-r28 based on 2.6.32.26 + genpatches +
17     grsecurity-2.2.1-2.6.32.26-201011261834
18 robbat2 1.360
19     28 Nov 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
20     Update Manifest for deblob 2.6.36.
21 blueness 1.359
22     *hardened-sources-2.6.36-r2 (18 Nov 2010)
23    
24     18 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
25     +hardened-sources-2.6.36-r2.ebuild:
26     hardened-sources-2.6.36-r2 based on 2.6.36 + genpatches +
27     grsecurity-2.2.0-2.6.36-201011151726
28 blueness 1.358
29     *hardened-sources-2.6.32-r27 (18 Nov 2010)
30    
31     18 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
32     +hardened-sources-2.6.32-r27.ebuild:
33     hardened-sources-2.6.32-r27 based on 2.6.32.25 + genpatches +
34     grsecurity-2.2.0-2.6.32.25-201011151726
35 blueness 1.357
36     *hardened-sources-2.6.36-r1 (14 Nov 2010)
37    
38     14 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
39     +hardened-sources-2.6.36-r1.ebuild:
40     hardened-sources-2.6.36-r1 based on 2.6.36 + genpatches +
41     grsecurity-2.2.0-2.6.36-201011131640
42 blueness 1.356
43     *hardened-sources-2.6.32-r26 (14 Nov 2010)
44    
45     14 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
46     +hardened-sources-2.6.32-r26.ebuild:
47     hardened-sources-2.6.32-r26 based on 2.6.32.25 + genpatches +
48     grsecurity-2.2.0-2.6.32.25-201011131640
49 blueness 1.355
50     *hardened-sources-2.6.36 (07 Nov 2010)
51    
52     07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
53     +hardened-sources-2.6.36.ebuild:
54     hardened-sources-2.6.36 based on 2.6.36 + genpatches +
55     grsecurity-2.2.0-2.6.36-201011062054
56 blueness 1.354
57     *hardened-sources-2.6.35-r7 (07 Nov 2010)
58    
59     07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
60     +hardened-sources-2.6.35-r7.ebuild:
61     hardened-sources-2.6.35-r7 based on 2.6.35.8 + genpatches +
62     grsecurity-2.2.0-2.6.35.8-201011062054
63 blueness 1.353
64     *hardened-sources-2.6.32-r25 (07 Nov 2010)
65    
66     07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
67     +hardened-sources-2.6.32-r25.ebuild:
68     hardened-sources-2.6.32-r25 based on 2.6.32.25 + genpatches +
69     grsecurity-2.2.0-2.6.32.25-201011062054
70 blueness 1.352
71     *hardened-sources-2.6.35-r6 (02 Nov 2010)
72     *hardened-sources-2.6.32-r24 (02 Nov 2010)
73    
74     02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
75     +hardened-sources-2.6.32-r24.ebuild, +hardened-sources-2.6.35-r6.ebuild:
76     hardened-sources-2.6.32-r24 based on 2.6.32.25 + genpatches +
77     grsecurity-2.2.0-2.6.32.25-201010311944
78     hardened-sources-2.6.35-r6 based on 2.6.35.8 + genpatches +
79     grsecurity-2.2.0-2.6.35.8-201010311944
80 blueness 1.351
81     02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
82     hardened-sources-2.6.32-r23.ebuild:
83     ppc64 stable, bug #343535
84 blueness 1.350
85     *hardened-sources-2.6.35-r5 (24 Oct 2010)
86     *hardened-sources-2.6.32-r23 (24 Oct 2010)
87    
88     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
89     +hardened-sources-2.6.32-r23.ebuild, +hardened-sources-2.6.35-r5.ebuild:
90     hardened-sources-2.6.32-r23 based on 2.6.32.24 + genpatches +
91     grsec-2.2.0-2.6.32.24-201010232009
92     hardened-sources-2.6.35-r5 based on 2.6.35.7 + genpatches +
93     grsec-2.2.0-2.6.35.7-201010232009
94 blueness 1.349
95     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
96     hardened-sources-2.6.32-r22.ebuild:
97     Broken on ppc/ppc64, bug #341915#c6
98 blueness 1.348
99     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
100     -hardened-sources-2.6.32-r16.ebuild, -hardened-sources-2.6.32-r17.ebuild,
101     -hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.32-r19.ebuild,
102     -hardened-sources-2.6.32-r20.ebuild, -hardened-sources-2.6.32-r21.ebuild,
103     -hardened-sources-2.6.34-r4.ebuild, -hardened-sources-2.6.34-r5.ebuild,
104     -hardened-sources-2.6.35.ebuild, -hardened-sources-2.6.35-r1.ebuild,
105     -hardened-sources-2.6.35-r2.ebuild, -hardened-sources-2.6.35-r3.ebuild:
106     Removing vulnerable kernels where possible, bug #341801
107 blueness 1.347
108     21 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
109     hardened-sources-2.6.32-r22.ebuild:
110     x86 stable, bug #341915
111 blueness 1.346
112     20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
113     hardened-sources-2.6.32-r22.ebuild:
114     amd64 stable, bug #341915
115 blueness 1.345
116     *hardened-sources-2.6.35-r4 (20 Oct 2010)
117     *hardened-sources-2.6.32-r22 (20 Oct 2010)
118    
119     20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
120     +hardened-sources-2.6.32-r22.ebuild, +hardened-sources-2.6.35-r4.ebuild:
121     hardened-sources-2.6.32-r22 based on 2.6.32.24 + genpatches +
122     grsec-2.2.0-2.6.32.24-201010191911
123     hardened-sources-2.6.35-r4 based on 2.6.35.7 + genpatches +
124     grsec-2.2.0-2.6.35.7-201010191911
125     Addresses security bug #341801
126 blueness 1.344
127     *hardened-sources-2.6.35-r3 (16 Oct 2010)
128     *hardened-sources-2.6.32-r21 (16 Oct 2010)
129    
130     16 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
131     +hardened-sources-2.6.32-r21.ebuild, +hardened-sources-2.6.35-r3.ebuild:
132     hardened-sources-2.6.32-r21 based on 2.6.32.24 + genpatches +
133     grsec-2.2.0-2.6.32.24-201010121028
134     hardened-sources-2.6.35-r3 based on 2.6.35.7 + genpatches +
135     grsec-2.2.0-2.6.35.7-201010121028
136 blueness 1.343
137     *hardened-sources-2.6.35-r2 (07 Oct 2010)
138    
139     07 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
140     +hardened-sources-2.6.35-r2.ebuild:
141     hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches +
142     grsec-2.2.0-2.6.35.7-201010021153
143 blueness 1.342
144     *hardened-sources-2.6.32-r20 (06 Oct 2010)
145    
146     06 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
147     +hardened-sources-2.6.32-r20.ebuild:
148     hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches +
149     grsec-2.2.0-2.6.32.24-201010021153
150 blueness 1.341
151     *hardened-sources-2.6.35-r1 (30 Sep 2010)
152     *hardened-sources-2.6.32-r19 (30 Sep 2010)
153    
154     30 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
155     +hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild:
156     hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches +
157     grsec-2.2.0-2.6.32.23-201009272133
158     hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches +
159     grsec-2.2.0-2.6.35.6-201009281623
160 blueness 1.340
161     *hardened-sources-2.6.35 (28 Sep 2010)
162    
163     28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
164     +hardened-sources-2.6.35.ebuild:
165     hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
166 blueness 1.339
167     21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
168     -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
169     hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
170     -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
171     Fast track stabilization. See bug #338273. Removed older versions.
172 blueness 1.338
173     *hardened-sources-2.6.34-r6 (17 Sep 2010)
174     *hardened-sources-2.6.32-r18 (17 Sep 2010)
175    
176     17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
177     +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
178     hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
179     grsec-2.2.0-2.6.32.21-201009162222
180     hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
181     grsec-2.2.0-2.6.34.7-201009162222
182     Addresses IA32 syscall exploit.
183 blueness 1.337
184     *hardened-sources-2.6.34-r5 (15 Sep 2010)
185     *hardened-sources-2.6.32-r17 (15 Sep 2010)
186    
187     15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
188     +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
189     hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
190     grsec-2.2.0-2.6.32.21-201009130811
191     hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
192     grsec-2.2.0-2.6.34.6-201009130754
193 blueness 1.336
194     *hardened-sources-2.6.34-r4 (07 Sep 2010)
195     *hardened-sources-2.6.32-r16 (07 Sep 2010)
196    
197     07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
198     +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
199     hardened-sources-2.6.32-r16 based on 2.6.32.21 +
200     grsec-2.2.0-2.6.32.21-201009032133
201     hardened-sources-2.6.34-r4 based on 2.6.34.6 +
202     grsec-2.2.0-2.6.34.6-201009041352
203 blueness 1.335
204     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
205     hardened-sources-2.6.32-r15 based on 2.6.32.21 +
206     grsec-2.2.0-2.6.32.21-201008292122
207     hardened-sources-2.6.34-r3 based on 2.6.34.6 +
208     grsec-2.2.0-2.6.34.6-201008292122
209 blueness 1.334
210     *hardened-sources-2.6.34-r3 (02 Sep 2010)
211     *hardened-sources-2.6.32-r15 (02 Sep 2010)
212    
213     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
214     -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
215     -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
216     +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
217     +hardened-sources-2.6.34-r3.ebuild:
218     Bumps and remove deprecated versions
219 blueness 1.333
220     *hardened-sources-2.6.34-r2 (21 Aug 2010)
221    
222     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
223     +hardened-sources-2.6.34-r2.ebuild:
224     Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
225 blueness 1.332
226     *hardened-sources-2.6.32-r14 (21 Aug 2010)
227    
228     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
229     +hardened-sources-2.6.32-r14.ebuild:
230     Based on vanilla 2.6.32.19 + genpatches +
231     grsec-2.2.0-2.6.32.19-201008131840
232 blueness 1.331
233     *hardened-sources-2.6.32-r13 (14 Aug 2010)
234    
235     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
236     +hardened-sources-2.6.32-r13.ebuild:
237     Based on vanilla 2.6.32.18 + genpatches +
238     grsecurity-2.2.0-2.6.32.18-201008112233
239 robbat2 1.330
240     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
241     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
242 blueness 1.329
243     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
244     hardened-sources-2.6.32-r9.ebuild:
245     Stable ppc64. Bug #326885
246 blueness 1.328
247     *hardened-sources-2.6.32-r12 (24 Jul 2010)
248    
249     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
250     +hardened-sources-2.6.32-r12.ebuild:
251     Parallels fix incorporated into hardened-sources-2.6.34-r1
252 blueness 1.327
253     *hardened-sources-2.6.34-r1 (24 Jul 2010)
254    
255     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
256     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
257     Fixes bug #328275
258 chainsaw 1.326
259     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
260     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
261     on gentoo-dev.
262 jer 1.325
263     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
264     Correct mail address.
265 blueness 1.324
266     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
267     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
268     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
269     -hardened-sources-2.6.32-r8.ebuild:
270     Removing outdated releases
271 fauli 1.323
272     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
273     hardened-sources-2.6.32-r9.ebuild:
274     stable x86, bug 326885
275 blueness 1.322
276     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
277     -hardened-sources-2.6.32-r7.ebuild:
278     Removed for security. Bug #325573
279 blueness 1.321
280     *hardened-sources-2.6.34 (13 Jul 2010)
281    
282     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
283     +hardened-sources-2.6.34.ebuild:
284     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
285 blueness 1.320
286     *hardened-sources-2.6.32-r11 (13 Jul 2010)
287    
288     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
289     +hardened-sources-2.6.32-r11.ebuild:
290     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
291 chainsaw 1.319
292     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
293     Marked stable on AMD64 as requested by Anthony G. Basile
294     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
295     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
296 blueness 1.318
297     *hardened-sources-2.6.32-r10 (30 Jun 2010)
298    
299     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
300     +hardened-sources-2.6.32-r10.ebuild:
301     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
302 blueness 1.317
303     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
304     Added myself to the metadata.xml
305 chainsaw 1.316
306     *hardened-sources-2.6.32-r9 (11 Jun 2010)
307    
308     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
309     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
310 chainsaw 1.315
311     *hardened-sources-2.6.32-r8 (01 Jun 2010)
312    
313     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
314     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
315 chainsaw 1.314
316     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
317     Update SRC_URI to point to mirror network now that the distfile has
318     propagated.
319 chainsaw 1.313
320     *hardened-sources-2.6.32-r7 (26 May 2010)
321    
322     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
323     metadata.xml:
324     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
325     Summers.
326 robbat2 1.312
327     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
328     Update Manifest for deblob support in kernel-2 eclass.
329 nixnut 1.311
330     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
331     ppc stable
332 gengor 1.310
333     29 May 2009; Gordon Malm <gengor@gentoo.org>
334     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
335     Stable amd64/x86 and remove old.
336 gengor 1.309
337     *hardened-sources-2.6.29 (25 May 2009)
338    
339     25 May 2009; Gordon Malm <gengor@gentoo.org>
340     +hardened-sources-2.6.29.ebuild:
341     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
342     release candidates.
343 gengor 1.308
344     *hardened-sources-2.6.28-r9 (25 May 2009)
345    
346     25 May 2009; Gordon Malm <gengor@gentoo.org>
347     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
348     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
349 gengor 1.307
350     *hardened-sources-2.6.28-r8 (18 May 2009)
351    
352     18 May 2009; Gordon Malm <gengor@gentoo.org>
353     +hardened-sources-2.6.28-r8.ebuild:
354     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
355     and #262862 among others.
356 gengor 1.306
357     01 May 2009; Gordon Malm <gengor@gentoo.org>
358     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
359     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
360     Remove unnecessary mirror://gentoo from SRC_URI.
361 nixnut 1.305
362     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
363     ppc stable
364 gengor 1.304
365     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
366     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
367     Stable amd64/x86 and remove old.
368 gengor 1.303
369     *hardened-sources-2.6.28-r7 (27 Mar 2009)
370    
371     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
372     +hardened-sources-2.6.28-r7.ebuild:
373     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
374 gengor 1.302
375     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
376     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
377     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
378     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
379     Stable amd64/x86 and remove old versions.
380 nixnut 1.301
381     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
382     ppc stable
383 gengor 1.300
384     *hardened-sources-2.6.28-r6 (21 Mar 2009)
385    
386     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
387     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
388     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
389 gengor 1.299
390     *hardened-sources-2.6.28-r5 (20 Mar 2009)
391    
392     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
393     +hardened-sources-2.6.28-r5.ebuild:
394     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
395 gengor 1.298
396     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
397     hardened-sources-2.6.28-r4.ebuild:
398     Stable amd64/x86.
399 gengor 1.297
400     *hardened-sources-2.6.28-r4 (18 Mar 2009)
401    
402     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
403     +hardened-sources-2.6.28-r4.ebuild:
404     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
405     compilation with CPA_DEBUG and more.
406 gengor 1.296
407     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
408     hardened-sources-2.6.28-r3.ebuild:
409     Quick stable amd64/x86.
410 gengor 1.295
411     *hardened-sources-2.6.28-r3 (15 Mar 2009)
412    
413     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
414     +hardened-sources-2.6.28-r3.ebuild:
415     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
416 nixnut 1.294
417     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
418     ppc stable
419 gengor 1.293
420     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
421     hardened-sources-2.6.28-r2.ebuild:
422     Stable amd64/x86.
423 gengor 1.292
424     *hardened-sources-2.6.28-r2 (11 Mar 2009)
425    
426     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
427     +hardened-sources-2.6.28-r2.ebuild:
428     Version bump bringing in latest grsecurity patch.
429 gengor 1.291
430     *hardened-sources-2.6.28-r1 (09 Mar 2009)
431    
432     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
433     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
434     Version bump and remove old.
435 nixnut 1.290
436     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
437     ppc stable
438 gengor 1.289
439     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
440     hardened-sources-2.6.27-r8.ebuild:
441     Remove amd64 testing keyword, bug 256226.
442 gengor 1.288
443     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
444     hardened-sources-2.6.27-r8.ebuild:
445     Revert amd64 stable, bug #256226.
446 gengor 1.287
447     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
448     hardened-sources-2.6.27-r8.ebuild:
449     Stable on amd64/x86.
450 gengor 1.286
451     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
452     -hardened-sources-2.6.27-r6.ebuild:
453     Remove old 2.6.27 release.
454 gengor 1.285
455     *hardened-sources-2.6.27-r8 (24 Feb 2009)
456    
457     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
458     +hardened-sources-2.6.27-r8.ebuild:
459     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
460     and probably more.
461 nixnut 1.284
462     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
463     ppc stable
464 gengor 1.283
465     *hardened-sources-2.6.28 (25 Jan 2009)
466    
467     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
468     +hardened-sources-2.6.28.ebuild:
469     Initial 2.6.28 release.
470 gengor 1.282
471     *hardened-sources-2.6.27-r7 (25 Jan 2009)
472    
473     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
474     +hardened-sources-2.6.27-r7.ebuild:
475     Bump to Linux 2.6.27.13.
476 gengor 1.281
477     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
478     hardened-sources-2.6.26-r9.ebuild:
479     Stable amd64/x86.
480 gengor 1.280
481     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
482     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
483     -hardened-sources-2.6.27-r5.ebuild:
484     Remove problem versions.
485 gengor 1.279
486     *hardened-sources-2.6.27-r6 (24 Jan 2009)
487    
488     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
489     +hardened-sources-2.6.27-r6.ebuild:
490     Revert PaX test29 to test30 changes. Fixes bug 256226.
491 gengor 1.277
492     *hardened-sources-2.6.27-r5 (24 Jan 2009)
493    
494     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
495     +hardened-sources-2.6.27-r5.ebuild:
496 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
497 gengor 1.277 254843.
498 gengor 1.276
499     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
500     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
501     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
502     Remove problem versions.
503 nixnut 1.275
504     23 Jan 2009; nixnut <nixnut@gentoo.org>
505     hardened-sources-2.6.25-r13.ebuild:
506     ppc stable
507 gengor 1.274
508     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
509     hardened-sources-2.6.25-r13.ebuild:
510     Fasttrack stable amd64/x86.
511 gengor 1.273
512     *hardened-sources-2.6.26-r9 (21 Jan 2009)
513    
514     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
515     +hardened-sources-2.6.26-r9.ebuild:
516 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
517 gengor 1.272
518     *hardened-sources-2.6.25-r13 (20 Jan 2009)
519    
520     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
521     +hardened-sources-2.6.25-r13.ebuild:
522 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
523 nixnut 1.271
524     20 Jan 2009; nixnut <nixnut@gentoo.org>
525     hardened-sources-2.6.25-r12.ebuild:
526     ppc stable
527 gengor 1.270
528     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
529     hardened-sources-2.6.25-r12.ebuild:
530     Stable amd64/x86.
531 gengor 1.269
532     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
533     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
534     -hardened-sources-2.6.27-r2.ebuild:
535     Clean out old versions.
536 gengor 1.268
537     *hardened-sources-2.6.27-r4 (14 Jan 2009)
538     *hardened-sources-2.6.26-r8 (14 Jan 2009)
539     *hardened-sources-2.6.25-r12 (14 Jan 2009)
540    
541     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
542     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
543     +hardened-sources-2.6.27-r4.ebuild:
544     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
545     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
546     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
547     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
548 nixnut 1.267
549     15 Dec 2008; nixnut <nixnut@gentoo.org>
550     hardened-sources-2.6.25-r11.ebuild:
551     Stable on ppc
552 gengor 1.266
553     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
554     hardened-sources-2.6.25-r11.ebuild:
555     Stable amd64/x86.
556 gengor 1.265
557     *hardened-sources-2.6.27-r3 (07 Dec 2008)
558    
559     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
560     +hardened-sources-2.6.27-r3.ebuild:
561     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
562     Fixes bug #248754, #249729 and #246607.
563 gengor 1.264
564     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
565     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
566     Remove old versions.
567 gengor 1.262
568     *hardened-sources-2.6.26-r7 (03 Dec 2008)
569     *hardened-sources-2.6.25-r11 (03 Dec 2008)
570    
571 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
572     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
573 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
574     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
575     Both include many backports from 2.6.27.{6,7} -stable releases.
576 gengor 1.261
577     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
578     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
579     Remove versions broken on ARCHes != x86/amd64.
580 gengor 1.260
581     *hardened-sources-2.6.27-r2 (24 Nov 2008)
582    
583     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
584     +hardened-sources-2.6.27-r2.ebuild:
585     Bump to Linux 2.6.27.7 and latest grsecurity patch.
586 gengor 1.259
587     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
588     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
589     Remove old versions.
590 gengor 1.258
591     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
592     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
593     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
594 nixnut 1.257
595     16 Nov 2008; nixnut <nixnut@gentoo.org>
596     hardened-sources-2.6.25-r10.ebuild:
597     Stable on ppc
598 gengor 1.256
599     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
600     hardened-sources-2.6.25-r10.ebuild:
601     Stable amd64/x86.
602 gengor 1.255
603     *hardened-sources-2.6.26-r6 (12 Nov 2008)
604    
605     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
606     +hardened-sources-2.6.26-r6.ebuild:
607     Bump to Linux 2.6.26.8 and fix security bug #245650.
608 gengor 1.254
609     *hardened-sources-2.6.25-r10 (12 Nov 2008)
610    
611     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
612     +hardened-sources-2.6.25-r10.ebuild:
613     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
614 gengor 1.253
615     *hardened-sources-2.6.27-r1 (09 Nov 2008)
616    
617     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
618     +hardened-sources-2.6.27-r1.ebuild:
619     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
620 gengor 1.252
621     *hardened-sources-2.6.27 (04 Nov 2008)
622    
623     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
624     +hardened-sources-2.6.27.ebuild:
625     Initial 2.6.27 release.
626 gengor 1.251
627     *hardened-sources-2.6.26-r5 (03 Nov 2008)
628    
629     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
630     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
631     +hardened-sources-2.6.26-r5.ebuild:
632     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
633     Clean out some old versions.
634 nixnut 1.250
635     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
636     Stable on ppc
637 gengor 1.249
638     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
639     hardened-sources-2.6.25-r9.ebuild:
640     Stable on amd64/x86.
641 gengor 1.248
642     *hardened-sources-2.6.25-r9 (26 Oct 2008)
643    
644     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
645     +hardened-sources-2.6.25-r9.ebuild:
646     Update to Linux 2.6.25.19
647 nixnut 1.247
648     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
649     Stable on ppc
650 gengor 1.246
651     *hardened-sources-2.6.26-r4 (14 Oct 2008)
652    
653     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
654     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
655     Update to latest grsecurity patch, fixing building of non-modular kernels.
656 gengor 1.245
657     *hardened-sources-2.6.26-r3 (12 Oct 2008)
658    
659     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
660     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
661     +hardened-sources-2.6.26-r3.ebuild:
662     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
663     2.6.26-r1: Removed.
664     2.6.25-r8: Stable amd64/x86.
665 gengor 1.244
666     *hardened-sources-2.6.25-r8 (09 Oct 2008)
667    
668     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
669     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
670     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
671     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
672 nixnut 1.243
673     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
674     Stable on ppc
675 gengor 1.242
676     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
677     hardened-sources-2.6.25-r7.ebuild:
678     Stable amd64/x86.
679 gengor 1.241
680     *hardened-sources-2.6.26-r2 (13 Sep 2008)
681    
682     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
683     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
684     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
685     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
686 gengor 1.240
687     *hardened-sources-2.6.25-r7 (13 Sep 2008)
688    
689     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
690     +hardened-sources-2.6.25-r7.ebuild:
691     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
692 gengor 1.239
693     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
694     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
695     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
696     hardened-sources-2.6.26-r1.ebuild:
697     Update DESCRIPTION and HGPV_URI.
698 gengor 1.238
699     *hardened-sources-2.6.25-r6 (09 Sep 2008)
700    
701     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
702     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
703     2.6.25-r6: Update to Linux 2.6.25.17.
704     2.6.24-r3: Removed.
705 gengor 1.237
706     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
707     hardened-sources-2.6.25-r5.ebuild:
708     Stable on amd64/x86
709 gengor 1.236
710     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
711     Update my email address.
712 nixnut 1.235
713     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
714     stable on ppc
715 battousai 1.234
716     *hardened-sources-2.6.26-r1 (23 Aug 2008)
717     *hardened-sources-2.6.25-r5 (23 Aug 2008)
718    
719     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
720     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
721     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
722     +hardened-sources-2.6.26-r1.ebuild:
723     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
724     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
725     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
726     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
727     (gengor).
728 solar 1.233
729     *hardened-sources-2.6.26 (18 Aug 2008)
730     *hardened-sources-2.6.25-r4 (18 Aug 2008)
731    
732     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
733     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
734     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
735     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
736     2.6.25-r2: Removed.
737 tove 1.232
738     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
739     Remove phreak from metadata.xml (#96398)
740 solar 1.231
741     *hardened-sources-2.6.25-r3 (31 Jul 2008)
742    
743     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
744     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
745     +hardened-sources-2.6.25-r3.ebuild:
746     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
747     fixes, including security bug #231750.
748 nixnut 1.230
749     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
750     Stable on ppc
751 solar 1.229
752     *hardened-sources-2.6.25-r2 (05 Jul 2008)
753    
754     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
755     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
756     +hardened-sources-2.6.25-r2.ebuild:
757     2.6.23-r4: Stable x86/amd64
758     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
759     2.6.23-r{11,12}: Removed due to multiple vulns.
760     (gengor & kerframil)
761 nixnut 1.228
762     04 Jul 2008; nixnut <nixnut@gentoo.org>
763     hardened-sources-2.6.23-r13.ebuild:
764     Stable on ppc
765 solar 1.227
766     *hardened-sources-2.6.25-r1 (30 Jun 2008)
767    
768     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
769     +hardened-sources-2.6.25-r1.ebuild:
770     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
771     grsecurity release. 2.6.23-r13: x86/amd64 stable
772 solar 1.226
773     *hardened-sources-2.6.25 (17 Jun 2008)
774     *hardened-sources-2.6.24-r3 (17 Jun 2008)
775     *hardened-sources-2.6.23-r13 (17 Jun 2008)
776    
777     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
778     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
779     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
780     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
781     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
782     2.6.25: Initial 2.6.25 release.
783 solar 1.225
784     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
785     - fasttrack to stable x86/amd64
786 swegener 1.224
787     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
788     Fix broken digest for linux-2.6.24.tar.bz2.
789 solar 1.223
790     *hardened-sources-2.6.24-r2 (11 May 2008)
791     *hardened-sources-2.6.23-r12 (11 May 2008)
792    
793     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
794     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
795     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
796     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
797     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
798     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
799     security bugs 219901, 220691, 220975, 220979, 221123. New
800     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
801     should be removed as far as I'm concerned, everything else remove due to
802     vulnerable to numerous security bugs or brokeness.
803 nixnut 1.222
804     10 May 2008; nixnut <nixnut@gentoo.org>
805     hardened-sources-2.6.23-r11.ebuild:
806     Stable on ppc
807 solar 1.221
808     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
809     - -r11 stable on x86/amd64
810 solar 1.220
811     *hardened-sources-2.6.23-r11 (01 May 2008)
812    
813     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
814     - version bump to fix ulgy linux bugs
815 phreak 1.219
816     *hardened-sources-2.6.24-r1 (30 Apr 2008)
817    
818     30 Apr 2008; Christian Heim <phreak@gentoo.org>
819     +hardened-sources-2.6.24-r1.ebuild:
820     Revision bump (thanks to Kerin and Gordon, again), pulling
821     genpatches-2.6.24-7, solving #219089. Additionally contains further security
822     fixes plus some minor updates.
823 phreak 1.218
824     *hardened-sources-2.6.23-r10 (30 Apr 2008)
825    
826     30 Apr 2008; Christian Heim <phreak@gentoo.org>
827     +hardened-sources-2.6.23-r10.ebuild:
828     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
829     Additional contains "various other fixes".
830 phreak 1.217
831     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
832     Update the longdescription in metadata, thanks to Gordon Malm.
833 nixnut 1.216
834     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
835     Stable on ppc wrt bug #213255
836 solar 1.215
837     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
838     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
839     - stable on x86/amd64 per request. Removed obsolete ebuilds
840 phreak 1.214
841     *hardened-sources-2.6.24 (07 Apr 2008)
842    
843     07 Apr 2008; Christian Heim <phreak@gentoo.org>
844     +hardened-sources-2.6.24.ebuild:
845     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
846     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
847     for the many contributions and their continued effort in #216612) based on
848     2.6.24 and genpatches-2.6.24-5.
849    
850     The current ebuild/patchset contains these things:
851     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
852     * Introduces bespoke server and workstation oriented security levels
853     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
854 phreak 1.213
855     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
856     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
857     maintaining it).
858 phreak 1.212
859     24 Mar 2008; Christian Heim <phreak@gentoo.org>
860     hardened-sources-2.4.35-r2.ebuild:
861     Fixing SRC_URI for 2.4.35-r2.
862 phreak 1.211
863     *hardened-sources-2.6.23-r9 (22 Mar 2008)
864    
865     22 Mar 2008; Christian Heim <phreak@gentoo.org>
866     +hardened-sources-2.6.23-r9.ebuild:
867     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
868     * Change the default GIDs for some grsecurity options
869     * Revamp the Hardened [Gentoo] security level and make it the default level
870     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
871     * Fix a recursive lock -- call to capable() within ptrace_attach()
872     * Fix bug that allows audit and iscsi operations to be controlled via netlink
873 solar 1.210
874     *hardened-sources-2.6.23-r8 (27 Feb 2008)
875    
876     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
877     - version bump from Kerin Millar bug 210026
878 solar 1.209
879     17 Feb 2008; <solar@gentoo.org> metadata.xml,
880     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
881     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
882     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
883     - stable on x86 and remove old ebuilds
884 solar 1.207
885     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
886 solar 1.208 - stable on amd64 per request of amd64 lead
887 solar 1.206
888     *hardened-sources-2.6.23-r7 (11 Feb 2008)
889    
890     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
891     - version bump from kerin.millar
892     Changes:
893    
894     * Bump to genpatches-base-2.6.23-9
895     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
896     * Disables COMPAT_VDSO in x86/defconfig
897     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
898 phreak 1.205
899     25 Jan 2008; Christian Heim <phreak@gentoo.org>
900     -hardened-sources-2.6.22-r8.ebuild:
901     Cleaning up old versions.
902 phreak 1.204
903     *hardened-sources-2.6.23-r6 (25 Jan 2008)
904    
905     25 Jan 2008; Christian Heim <phreak@gentoo.org>
906     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
907     Revision bump, pulling in the latest genpatches.
908 phreak 1.203
909     *hardened-sources-2.6.23-r5 (24 Dec 2007)
910    
911     24 Dec 2007; Christian Heim <phreak@gentoo.org>
912     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
913     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
914     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
915     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
916 phreak 1.202
917     24 Dec 2007; Christian Heim <phreak@gentoo.org>
918     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
919     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
920     -hardened-sources-2.6.23-r3.ebuild:
921     Cleaning out some unused, old versions.
922 phreak 1.201
923     24 Dec 2007; Christian Heim <phreak@gentoo.org>
924     hardened-sources-2.6.23-r4.ebuild:
925     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
926     in the tree for long, but there isn't much of a difference between this and
927     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
928 phreak 1.200
929     *hardened-sources-2.6.23-r4 (23 Dec 2007)
930    
931     23 Dec 2007; Christian Heim <phreak@gentoo.org>
932     +hardened-sources-2.6.23-r4.ebuild:
933     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
934 phreak 1.199
935     *hardened-sources-2.6.23-r3 (04 Dec 2007)
936    
937     04 Dec 2007; Christian Heim <phreak@gentoo.org>
938     +hardened-sources-2.6.23-r3.ebuild:
939     Revision bump, pulling in 2.6.23.9.
940 phreak 1.198
941     *hardened-sources-2.6.23-r2 (25 Nov 2007)
942    
943     25 Nov 2007; Christian Heim <phreak@gentoo.org>
944     +hardened-sources-2.6.23-r2.ebuild:
945     Updated patchset, thanks to solar.
946 phreak 1.197
947     *hardened-sources-2.6.23-r1 (31 Oct 2007)
948    
949     31 Oct 2007; Christian Heim <phreak@gentoo.org>
950     +hardened-sources-2.6.23-r1.ebuild:
951     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
952 solar 1.196
953     29 Oct 2007; <solar@gentoo.org> metadata.xml:
954     - update metadata.xml
955 phreak 1.195
956     25 Oct 2007; Christian Heim <phreak@gentoo.org>
957     hardened-sources-2.6.22-r8.ebuild:
958     Marking 2.6.22-r8 stable on amd64 and x86.
959 phreak 1.194
960     21 Oct 2007; Christian Heim <phreak@gentoo.org>
961     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
962     -hardened-sources-2.6.21-r4.ebuild:
963     Removing old ebuilds.
964 phreak 1.193
965     *hardened-sources-2.4.35-r2 (21 Oct 2007)
966    
967     21 Oct 2007; Christian Heim <phreak@gentoo.org>
968     +hardened-sources-2.4.35-r2.ebuild:
969     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
970     patches.
971 phreak 1.192
972     *hardened-sources-2.6.22-r8 (21 Oct 2007)
973    
974     21 Oct 2007; Christian Heim <phreak@gentoo.org>
975     +hardened-sources-2.6.22-r8.ebuild:
976     Yet another new patch, hopefully fixing the remaining issues we had w/
977     2.6.22. Candidate for stabling.
978 phreak 1.191
979     *hardened-sources-2.6.23 (13 Oct 2007)
980    
981     13 Oct 2007; Christian Heim <phreak@gentoo.org>
982     +hardened-sources-2.6.23.ebuild:
983     Initial hardened-sources-2.6.23. If people still have problems w/ bug
984     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
985 phreak 1.190
986     11 Oct 2007; Christian Heim <phreak@gentoo.org>
987     hardened-sources-2.6.20-r10.ebuild:
988     Pulling in yet another new genpatches version, fixing the PWC bug for real.
989 phreak 1.189
990     04 Oct 2007; Christian Heim <phreak@gentoo.org>
991     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
992     Removing old versions.
993 phreak 1.188
994     *hardened-sources-2.6.22-r7 (01 Oct 2007)
995    
996     01 Oct 2007; Christian Heim <phreak@gentoo.org>
997     +hardened-sources-2.6.22-r7.ebuild:
998     Revision bump, pulling in a newer patch. Should fix #194276.
999 phreak 1.187
1000     30 Sep 2007; Christian Heim <phreak@gentoo.org>
1001     hardened-sources-2.6.20-r10.ebuild:
1002     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
1003     Mike Doty).
1004 phreak 1.186
1005     *hardened-sources-2.6.22-r6 (26 Sep 2007)
1006    
1007     26 Sep 2007; Christian Heim <phreak@gentoo.org>
1008     +hardened-sources-2.6.22-r6.ebuild:
1009     Revision bump, grabbing up till Linux 2.6.22.9.
1010 phreak 1.185
1011     24 Sep 2007; Christian Heim <phreak@gentoo.org>
1012     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
1013     Cleaning up further.
1014 phreak 1.184
1015     *hardened-sources-2.6.20-r10 (24 Sep 2007)
1016    
1017     24 Sep 2007; Christian Heim <phreak@gentoo.org>
1018     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
1019     +hardened-sources-2.6.20-r10.ebuild:
1020     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
1021     revisions.
1022 phreak 1.183
1023     *hardened-sources-2.6.22-r5 (22 Sep 2007)
1024    
1025     22 Sep 2007; Christian Heim <phreak@gentoo.org>
1026     +hardened-sources-2.6.22-r5.ebuild:
1027     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
1028 phreak 1.182
1029     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1030     Removing johnm from metadata.xml (see #186467 for reference).
1031 phreak 1.181
1032     *hardened-sources-2.6.22-r4 (17 Sep 2007)
1033    
1034     17 Sep 2007; Christian Heim <phreak@gentoo.org>
1035     +hardened-sources-2.6.22-r4.ebuild:
1036     Revision bump, hopefully fixing all those weird PAX failures.
1037 phreak 1.180
1038     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1039     Updating the metadata.xml.
1040 phreak 1.179
1041     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1042     Removing tocharian from metadata due to his retirement (see #71718 for
1043     reference).
1044 phreak 1.178
1045     *hardened-sources-2.6.20-r9 (30 Aug 2007)
1046    
1047     30 Aug 2007; Christian Heim <phreak@gentoo.org>
1048     +hardened-sources-2.6.20-r9.ebuild:
1049     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
1050 phreak 1.177
1051     29 Aug 2007; Christian Heim <phreak@gentoo.org>
1052     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
1053     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
1054     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
1055     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
1056     -hardened-sources-2.6.22-r2.ebuild:
1057     Removing some redundant versions.
1058 phreak 1.176
1059     *hardened-sources-2.4.35-r1 (29 Aug 2007)
1060    
1061     29 Aug 2007; Christian Heim <phreak@gentoo.org>
1062     +hardened-sources-2.4.35-r1.ebuild:
1063     Revision bump, new grsecurity patch.
1064 phreak 1.175
1065     *hardened-sources-2.6.20-r8 (26 Aug 2007)
1066    
1067     26 Aug 2007; Christian Heim <phreak@gentoo.org>
1068     +hardened-sources-2.6.20-r8.ebuild:
1069     Revision bump for Linux 2.6.20.17.
1070 phreak 1.174
1071     *hardened-sources-2.6.22-r3 (22 Aug 2007)
1072    
1073     22 Aug 2007; Christian Heim <phreak@gentoo.org>
1074     +hardened-sources-2.6.22-r3.ebuild:
1075     Revision bump for Linux 2.6.22.4.
1076 phreak 1.173
1077     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1078     hardened-sources-2.6.22-r2.ebuild:
1079     Updated patchset, to fix the alignment against 2.6.22.3.
1080 phreak 1.172
1081     *hardened-sources-2.6.22-r2 (16 Aug 2007)
1082    
1083     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1084     +hardened-sources-2.6.22-r2.ebuild:
1085     Revision bump for Linux 2.6.22.3.
1086 phreak 1.171
1087     *hardened-sources-2.4.35 (16 Aug 2007)
1088    
1089     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1090     +hardened-sources-2.4.35.ebuild:
1091     Version bump, initial version for Linux 2.4.35.
1092 phreak 1.170
1093     *hardened-sources-2.6.21-r4 (16 Aug 2007)
1094    
1095     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1096     +hardened-sources-2.6.21-r4.ebuild:
1097     Revision bump for Linux 2.6.21.6.
1098 phreak 1.169
1099     *hardened-sources-2.6.20-r7 (16 Aug 2007)
1100    
1101     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1102     +hardened-sources-2.6.20-r7.ebuild:
1103     Revision bump for Linux 2.6.20.16.
1104 phreak 1.168
1105     *hardened-sources-2.6.22-r1 (13 Aug 2007)
1106    
1107     13 Aug 2007; Christian Heim <phreak@gentoo.org>
1108     +hardened-sources-2.6.22-r1.ebuild:
1109     Yet another revision bump.
1110 phreak 1.167
1111     *hardened-sources-2.6.22 (10 Aug 2007)
1112    
1113     10 Aug 2007; Christian Heim <phreak@gentoo.org>
1114     +hardened-sources-2.6.22.ebuild:
1115     Initial release for 2.6.22. If you are using hardened-sources on a desktop
1116     machine (P4 or newer), be aware you might need to disable
1117     CONFIG_PAX_PAGEEXEC.
1118 phreak 1.166
1119     04 Aug 2007; Christian Heim <phreak@gentoo.org>
1120     hardened-sources-2.6.20-r6.ebuild:
1121     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
1122     2.6.20.15.
1123 phreak 1.165
1124     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1125     hardened-sources-2.6.20-r5.ebuild:
1126     Marking hardened-sources-2.6.20-r5 stable on ppc.
1127 phreak 1.164
1128     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1129     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
1130     Cleanup.
1131 phreak 1.163
1132     *hardened-sources-2.6.20-r6 (08 Jul 2007)
1133    
1134     08 Jul 2007; Christian Heim <phreak@gentoo.org>
1135     +hardened-sources-2.6.20-r6.ebuild:
1136     Revision bump, grabbing yet another stable release.
1137 phreak 1.162
1138     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1139     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
1140     -hardened-sources-2.6.21-r2.ebuild:
1141     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
1142     alpha stable KEYWORD by mistake.
1143 phreak 1.161
1144     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1145     hardened-sources-2.6.20-r5.ebuild:
1146     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
1147     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
1148 phreak 1.160
1149     *hardened-sources-2.6.21-r3 (12 Jun 2007)
1150    
1151     12 Jun 2007; Christian Heim <phreak@gentoo.org>
1152     +hardened-sources-2.6.21-r3.ebuild:
1153     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
1154     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
1155     love.
1156 phreak 1.159
1157     *hardened-sources-2.6.20-r5 (11 Jun 2007)
1158    
1159     11 Jun 2007; Christian Heim <phreak@gentoo.org>
1160     +hardened-sources-2.6.20-r5.ebuild:
1161     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1162     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1163     love.
1164 pappy 1.158
1165     *hardened-sources-2.4.34.5 (11 Jun 2007)
1166    
1167     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1168     +hardened-sources-2.4.34.5.ebuild:
1169     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1170 phreak 1.157
1171     30 May 2007; Christian Heim <phreak@gentoo.org>
1172     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1173     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1174     stale ebuild(s).
1175 phreak 1.156
1176     30 May 2007; Christian Heim <phreak@gentoo.org>
1177     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1178     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1179     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1180     Doing some cleanups, remove stale ebuilds.
1181 phreak 1.155
1182     26 May 2007; Christian Heim <phreak@gentoo.org>
1183     hardened-sources-2.6.21-r2.ebuild:
1184     Fixing the grsecurity patch, had one '};' too much.
1185 phreak 1.154
1186     *hardened-sources-2.6.21-r2 (26 May 2007)
1187    
1188     26 May 2007; Christian Heim <phreak@gentoo.org>
1189     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1190     +hardened-sources-2.6.21-r2.ebuild:
1191     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1192     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1193 phreak 1.153
1194     *hardened-sources-2.6.20-r4 (26 May 2007)
1195    
1196     26 May 2007; Christian Heim <phreak@gentoo.org>
1197     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1198     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1199 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1200 phreak 1.152
1201     15 May 2007; Christian Heim <phreak@gentoo.org>
1202     hardened-sources-2.6.20-r3.ebuild:
1203     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1204     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1205     grsecurity patch fail in that exact same hunk.
1206 phreak 1.151
1207     *hardened-sources-2.6.20-r3 (15 May 2007)
1208    
1209     15 May 2007; Christian Heim <phreak@gentoo.org>
1210     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1211     Revision bump, incorporating Linux 2.6.20.11.
1212    
1213     *hardened-sources-2.6.21-r1 (11 May 2007)
1214    
1215     11 May 2007; Christian Heim <phreak@gentoo.org>
1216     +hardened-sources-2.6.21-r1.ebuild:
1217     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1218     mentioned in #177234.
1219 kevquinn 1.150
1220     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1221     files/digest-hardened-sources-2.6.21, Manifest:
1222     Fix Manifest/digest for linux-2.6.21.tar.bz2
1223 phreak 1.149
1224     06 May 2007; Christian Heim <phreak@gentoo.org>
1225     hardened-sources-2.6.21.ebuild:
1226     Bumping the hardened-patches version, needed for the fix for #177234.
1227 phreak 1.148
1228     *hardened-sources-2.6.21 (02 May 2007)
1229    
1230     02 May 2007; Christian Heim <phreak@gentoo.org>
1231     +hardened-sources-2.6.21.ebuild:
1232     Version bump, Linux 2.6.21-hardened.
1233 phreak 1.147
1234     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1235     hardened-sources-2.6.20-r2.ebuild:
1236     Adding ~ia64 on Ned's request.
1237 phreak 1.146
1238     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1239     hardened-sources-2.6.20-r2.ebuild:
1240     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1241     header line(s).
1242 phreak 1.145
1243     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1244     hardened-sources-2.6.20-r2.ebuild:
1245     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1246 armin76 1.144
1247     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1248    
1249     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1250     +hardened-sources-2.6.20-r2.ebuild:
1251     Version bump, on behalf of phreak
1252 phreak 1.143
1253     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1254    
1255     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1256     +hardened-sources-2.6.20-r1.ebuild:
1257     Revision bump, grabbing a newer grsecurity snapshot.
1258 phreak 1.142
1259     *hardened-sources-2.6.20 (25 Mar 2007)
1260    
1261     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1262     +hardened-sources-2.6.20.ebuild:
1263     Finally a hardened-sources version for 2.6.20; many people have been waiting
1264     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1265     testbox.
1266 chainsaw 1.141
1267     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1268     hardened-sources-2.6.18-r6.ebuild:
1269     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1270 phreak 1.140
1271     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1272    
1273     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1274     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1275     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1276     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1277     supposed to be.
1278 phreak 1.139
1279     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1280     Fixing the Manifest, the previous one was broken (as in still had the
1281     deleted ebuild in it).
1282 phreak 1.138
1283     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1284     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1285     +hardened-sources-2.6.18-r5.ebuild:
1286     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1287     Linux 2.6.18.8. Also cleaning up the older version.
1288    
1289     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1290    
1291     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1292     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1293     +hardened-sources-2.6.18-r5.ebuild:
1294     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1295     Linux 2.6.18.8. Also cleaning up the older version.
1296 phreak 1.137
1297     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1298     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1299     -hardened-sources-2.6.19-r5.ebuild:
1300     Removing some of the old version, that didn't work.
1301 phreak 1.136
1302     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1303    
1304     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1305     +hardened-sources-2.6.19-r6.ebuild:
1306     Revision bump, including a new grsec version fixing #166235.
1307 pappy 1.134
1308     *hardened-sources-2.4.34 (24 Jan 2007)
1309    
1310     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1311 pappy 1.135 Manifest:
1312     updating Manifest with checksums of new tarball and ebuild
1313    
1314     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1315 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1316     I added new hardened sources 2.4 update, this is a critical path
1317     security bugfix - all users of h-s are strongly advised
1318     to update their existing hardened sources to this version.
1319     It contains a fix for a kernel vulnerability that is pertaining
1320     to the PaX changes to virtual memory management, possibly leading
1321     to a local kernel exploit ... see grsecurity.net forums and homepage
1322 phreak 1.133
1323     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1324     files/digest-hardened-sources-2.6.19-r5, Manifest:
1325     Fixing the patch-tarball digest.
1326 phreak 1.132
1327     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1328    
1329     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1330     +hardened-sources-2.6.19-r5.ebuild:
1331     Revision bump, closing the recently discovered PaX expand_stack()
1332     vulnerability.
1333 phreak 1.131
1334     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1335    
1336     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1337     +hardened-sources-2.6.19-r4.ebuild:
1338     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1339     dropping the randomized PID feature.
1340 opfer 1.130
1341     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1342     hardened-sources-2.4.33.4.ebuild:
1343     stable x86, bug #161171
1344 phreak 1.129
1345     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1346    
1347     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1348     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1349     Revision bump for bug #157186 and #158786.
1350 phreak 1.128
1351     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1352    
1353     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1354     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1355     Revision bump for bug #157186.
1356 phreak 1.127
1357     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1358    
1359     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1360     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1361     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1362 phreak 1.126
1363     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1364     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1365     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1366     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1367     hardened-sources-2.6.19-r1.ebuild:
1368     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1369     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1370 pappy 1.125
1371     *hardened-sources-2.4.33.4 (17 Dec 2006)
1372    
1373     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1374     +hardened-sources-2.4.33.4.ebuild:
1375     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1376     and quilting
1377 phreak 1.124
1378     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1379    
1380     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1381     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1382     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1383     for reporting).
1384 phreak 1.123
1385     *hardened-sources-2.6.19 (13 Dec 2006)
1386    
1387     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1388     +hardened-sources-2.6.19.ebuild:
1389     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1390     Brad for providing that prompt update.
1391 phreak 1.122
1392     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1393    
1394     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1395     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1396     +hardened-sources-2.6.18-r3.ebuild:
1397     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1398     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1399 phreak 1.121
1400     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1401     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1402 nixnut 1.120
1403     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1404     Stable on ppc wrt bug 157356
1405 opfer 1.119
1406     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1407     hardened-sources-2.6.18.ebuild:
1408     stable x86, bug #157356
1409 phreak 1.118
1410     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1411    
1412     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1413     +hardened-sources-2.6.18-r2.ebuild:
1414     Revision bump, including 2.6.18.5 (via genpatches) and
1415     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1416     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1417     redesign.
1418 phreak 1.117
1419     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1420     hardened-sources-2.6.18.ebuild:
1421     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1422     of Mike Doty).
1423 phreak 1.116
1424     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1425    
1426     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1427     +hardened-sources-2.6.18-r1.ebuild:
1428     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1429 phreak 1.115
1430     *hardened-sources-2.6.18 (11 Nov 2006)
1431    
1432     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1433     +hardened-sources-2.6.18.ebuild:
1434     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1435 solar 1.114
1436     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1437     - mark amd64 stable also. bug #151877
1438 solar 1.113
1439     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1440     - mark 2.6.17-r1 stable
1441 phreak 1.112
1442     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1443     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1444     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1445 phreak 1.111
1446     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1447    
1448     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1449     +hardened-sources-2.6.17-r1.ebuild:
1450     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1451     grsecurity patch.
1452 phreak 1.110
1453     *hardened-sources-2.6.17 (17 Aug 2006)
1454    
1455     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1456     +hardened-sources-2.6.17.ebuild:
1457     Bumping the hardened-sources-2.6 series to 2.6.17, using
1458     genpatches-2.6.17-6.base.
1459 solar 1.109
1460     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1461     - stable on x86 and amd64
1462 solar 1.108
1463     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1464    
1465     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1466     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1467     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1468     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1469     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1470     crusty ebuilds
1471 johnm 1.107
1472     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1473     hardened-sources-2.6.16-r10.ebuild:
1474     marking stable on x86 and amd64
1475 solar 1.106
1476     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1477     - 2.4.32-r6 stable on x86. RSBAC state unknown
1478 kang 1.105
1479     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1480    
1481     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1482     +hardened-sources-2.4.32-r7.ebuild:
1483     Bump PaX for RSBAC to test-17
1484 johnm 1.104
1485     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1486    
1487     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1488     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1489     hardened-sources-2.6.16 bump to latest -base.
1490 solar 1.103
1491     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1492    
1493     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1494     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1495     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1496     sysctl controlable resource logging
1497 johnm 1.102
1498     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1499    
1500     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1501     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1502     push new 2.6.16 release in preparation for stable
1503 solar 1.101
1504     22 May 2006; <solar@gentoo.org> :
1505     - redigest bug 134002
1506 kang 1.100
1507     *hardened-sources-2.4.32-r5 (16 May 2006)
1508    
1509     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1510     +hardened-sources-2.4.32-r5.ebuild:
1511     Fixes rsbac common patching (new patch in new -r5 patchset)
1512 solar 1.99
1513     *hardened-sources-2.4.32-r4 (13 May 2006)
1514    
1515     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1516     +hardened-sources-2.4.32-r4.ebuild:
1517     - security bumps
1518 johnm 1.98
1519     *hardened-sources-2.6.16-r6 (03 May 2006)
1520    
1521     03 May 2006; John Mylchreest <johnm@gentoo.org>
1522     +hardened-sources-2.6.16-r6.ebuild:
1523     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1524 johnm 1.97
1525     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1526     hardened-sources-2.6.14-r8.ebuild:
1527     fix x86_64 build problem, this will delay the digest issue again for a short
1528     while but it will sort itself out
1529 johnm 1.96
1530     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1531     hardened-sources-2.6.14-r8.ebuild:
1532     bump hardened patchset
1533 antarus 1.94
1534     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1535     files/digest-hardened-sources-2.4.32-r2,
1536     files/digest-hardened-sources-2.4.32-r3,
1537     files/digest-hardened-sources-2.6.14-r8, Manifest:
1538     Fixing duff SHA256 digests: Bug # 131293
1539 johnm 1.93
1540 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1541    
1542     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1543     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1544     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1545     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1546     cleanup of old uneccessary sources
1547    
1548 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1549     fix digest
1550 johnm 1.92
1551     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1552    
1553     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1554     +hardened-sources-2.6.14-r8.ebuild:
1555     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1556 johnm 1.91
1557     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1558     Turning on gpg-signing again, and recomitting
1559 johnm 1.90
1560     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1561    
1562     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1563     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1564     +hardened-sources-2.6.16-r4.ebuild:
1565     Fix numerous security vulns
1566 solar 1.89
1567     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1568    
1569     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1570     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1571     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1572     - security bump for bug #112791. Removed old ebuilds
1573 johnm 1.88
1574     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1575    
1576     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1577     +hardened-sources-2.6.16-r3.ebuild:
1578     Removing silly localversion which I missed
1579 johnm 1.87
1580     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1581    
1582     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1583     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1584     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1585 johnm 1.86
1586     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1587    
1588     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1589     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1590     +hardened-sources-2.6.16-r2.ebuild:
1591     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1592     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1593 johnm 1.85
1594     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1595    
1596     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1597     +hardened-sources-2.6.16-r1.ebuild:
1598     Bumping to include ppc build fix and 2.6.16.3
1599 tsunam 1.84
1600     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1601     hardened-sources-2.6.14-r6.ebuild:
1602     Stable on x86; bug #127718
1603 johnm 1.83
1604     *hardened-sources-2.6.16 (31 Mar 2006)
1605    
1606     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1607     +hardened-sources-2.6.16.ebuild:
1608     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1609     2.6.16.1
1610 cryos 1.82
1611     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1612     hardened-sources-2.6.14-r6.ebuild:
1613     Stable on amd64, bug 127718.
1614 nixnut 1.81
1615     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1616     Stable on ppc. Bug #127718
1617 johnm 1.80
1618     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1619     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1620     -hardened-sources-2.6.14-r4.ebuild:
1621     Cleanup.
1622 johnm 1.79
1623     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1624    
1625     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1626     +hardened-sources-2.6.14-r6.ebuild:
1627     Fixes grsec policy recreation bug and adds a
1628     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1629 solar 1.78
1630     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1631     - stable on x86
1632 hansmi 1.77
1633     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1634     hardened-sources-2.6.14-r5.ebuild:
1635     Stable on ppc.
1636 johnm 1.76
1637     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1638    
1639     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1640     +hardened-sources-2.6.14-r5.ebuild:
1641     fixing every known exploit
1642 solar 1.75
1643     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1644    
1645     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1646     +hardened-sources-2.4.32-r2.ebuild:
1647     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1648 solar 1.74
1649     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1650    
1651     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1652     - version bump for new genpatches which fix up a few sec holes
1653 solar 1.73
1654     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1655    
1656     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1657     - revision bump to add misc vital linux kernel security patches.
1658 johnm 1.72
1659     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1660    
1661     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1662     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1663     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1664 johnm 1.71
1665     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1666     hardened-sources-2.6.14-r2.ebuild:
1667     making x86 & amd64 stable following testing.
1668 johnm 1.70
1669     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1670    
1671     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1672     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1673     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1674     network hooks.
1675 johnm 1.69
1676     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1677     hardened-sources-2.6.14-r1.ebuild:
1678     bumping to stable early for sec fix on x86 & amd64
1679 johnm 1.68
1680     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1681    
1682     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1683     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1684     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1685 solar 1.67
1686     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1687     - stable on x86 security bug #114227 CAN-2005-3257
1688 kang 1.66
1689     *hardened-sources-2.4.32 (19 Nov 2005)
1690    
1691     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1692     +hardened-sources-2.4.32.ebuild:
1693     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1694     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1695     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1696     rsbac >> /etc/portage/package.use)
1697 johnm 1.65
1698     *hardened-sources-2.6.14 (14 Nov 2005)
1699    
1700     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1701     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1702     Bumping 2.6 series to 2.6.14.2
1703 johnm 1.64
1704     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1705    
1706     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1707     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1708     +hardened-sources-2.6.13-r2.ebuild:
1709     Fixes minor build error in ppc.
1710 johnm 1.63
1711     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1712    
1713     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1714     +hardened-sources-2.6.13-r1.ebuild:
1715     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1716     2.6.13.4, fixes some major amd64 stability problems.
1717 johnm 1.62
1718     *hardened-sources-2.6.13 (16 Sep 2005)
1719    
1720     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1721     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1722     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1723     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1724     users should test this thoroughly.
1725 solar 1.61
1726     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1727     - stable on x86
1728 johnm 1.60
1729     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1730    
1731     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1732     +hardened-sources-2.6.11-r15.ebuild:
1733     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1734     grsec redefining curr_ip struct.
1735 solar 1.59
1736     *hardened-sources-2.4.31 (20 Jun 2005)
1737    
1738     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1739     initial import of 2.4.31 tree
1740 johnm 1.58
1741     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1742    
1743     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1744     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1745     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1746     naming scheme to abide by genpatches
1747 johnm 1.57
1748     *hardened-sources-2.6.11-r13 (18 May 2005)
1749    
1750     18 May 2005; John Mylchreest <johnm@gentoo.org>
1751     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1752     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1753     target. sorry about that. Fixes bug #93022
1754 johnm 1.56
1755     *hardened-sources-2.6.11-r12 (17 May 2005)
1756    
1757     17 May 2005; John Mylchreest <johnm@gentoo.org>
1758     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1759     +hardened-sources-2.6.11-r12.ebuild:
1760     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1761     merges in genpatches-base
1762 johnm 1.55
1763     *hardened-sources-2.6.11-r12 (17 May 2005)
1764    
1765     17 May 2005; John Mylchreest <johnm@gentoo.org>
1766     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1767     +hardened-sources-2.6.11-r12.ebuild:
1768     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1769     merges in genpatches-base
1770 solar 1.54
1771     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1772     -files/2.4.27-cmdline-race.patch,
1773     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1774     -files/2.4.28-grsec-binfmt_a.out.patch,
1775     -files/2.4.28-grsec-cmdline-race.patch,
1776     -files/2.4.28-selinux-binfmt_a.out.patch,
1777     -files/2.4.28-selinux-cmdline-race.patch,
1778     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1779     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1780     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1781     cleanup..
1782 solar 1.53
1783     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1784    
1785     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1786     - disable aout by default
1787 solar 1.52
1788     *hardened-sources-2.4.30 (18 Apr 2005)
1789    
1790     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1791     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1792     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1793     use
1794 tocharian 1.50
1795 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1796    
1797     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1798     +hardened-sources-2.4.29.ebuild:
1799     New hardened-patches-2.4-29.0 patchball.
1800     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1801    
1802     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1803    
1804     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1805     +hardened-sources-2.4.28-r5.ebuild:
1806     Added a fix for a PaX vulnerability.
1807    
1808     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1809 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1810     Stable on x86
1811 solar 1.49
1812     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1813     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1814     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1815     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1816     - fixed/added RDEPEND= in all kernel-2 ebuilds
1817 tocharian 1.48
1818     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1819    
1820     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1821     +hardened-sources-2.4.28-r4.ebuild:
1822     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1823     backport of neighbour hash updates.
1824 tocharian 1.47
1825     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1826     hardened-sources-2.4.28-r3.ebuild:
1827     Stable on x86
1828 tseng 1.46
1829     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1830    
1831     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1832     +hardened-sources-2.6.10-r3.ebuild:
1833     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1834     in 2005.0
1835 tocharian 1.45
1836     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1837     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1838     hardened-sources-2.4.28-r2.ebuild:
1839     Mark stable on x86
1840 tocharian 1.44
1841     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1842    
1843     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1844     +hardened-sources-2.4.28-r3.ebuild:
1845     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1846 tocharian 1.43
1847     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1848     hardened-sources-2.4.28.ebuild:
1849     Mark stable on x86.
1850 tocharian 1.42
1851     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1852    
1853     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1854     +hardened-sources-2.4.28-r2.ebuild:
1855     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1856     Mazinger for grsecurity patches as well.
1857 plasmaroo 1.41
1858     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1859    
1860     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1861     Security bump. Thank tocharian for rolling a new patchset...
1862 solar 1.40
1863     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1864     +files/2.4.28-grsec-cmdline-race.patch,
1865     +files/2.4.28-selinux-binfmt_a.out.patch,
1866     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1867     - Round up remaining security patches that appear to be missing in 2.4.28. -
1868     PaX standalone updated to current. hgpv=28.1
1869 solar 1.39
1870     *hardened-sources-2.4.28 (28 Nov 2004)
1871    
1872     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1873     security bump. Thank tocharian for rolling a new patchset
1874 scox 1.31
1875 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1876    
1877     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1878     +hardened-sources-2.4.27-r3.ebuild:
1879     Applies the new 2.4-27.2 patchball which updates
1880     GRSecurity to the 2.0.1 version.
1881    
1882 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1883    
1884     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1885     +hardened-sources-2.4.27-r2.ebuild:
1886     Version bump.
1887     This version uses the new 2.4-27.1 patchball which updates
1888     both the SELinux PaX hooks patch and the SELinux headers.
1889    
1890 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1891    
1892     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1893     +hardened-sources-2.4.27-r1.ebuild,
1894     -hardened-sources-2.4.27.ebuild,
1895     +files/2.4.27-cmdline-race.patch:
1896     Version bump, fix for cmdline race. See bug #59905.
1897    
1898     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1899    
1900     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1901     +hardened-sources-2.4.26-r6.ebuild,
1902     -hardened-sources-2.4.26-r5.ebuild,
1903     -hardened-sources-2.4.26-r4.ebuild,
1904     +files/2.4.26-cmdline-race.patch:
1905     Version bump, fix for cmdline race. See bug #59905.
1906    
1907 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1908    
1909     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1910     +hardened-sources-2.4.27.ebuild,
1911     +files/2.4.27-CAN-2004-0394.patch:
1912     Ported the patchball to the 2.4.27 kernel version.
1913    
1914 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1915    
1916     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1917     +hardened-sources-2.4.26-r5.ebuild:
1918 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1919 scox 1.34 It adds the following features:
1920     - Squashfs
1921     - Ebtables
1922     - Netdev random (core+drivers)
1923     - Watchdog Timer (WDT) fix.
1924    
1925 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1926    
1927     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1928     +hardened-sources-2.4.26-r4.ebuild,
1929     +files/2.4.26-CAN-2004-0415.patch,
1930     -hardened-sources-2.4.26-3:
1931     Version bump, fix for CAN 0415, see bug #59378.
1932    
1933 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1934    
1935     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1936     +hardened-sources-2.4.26-r3.ebuild,
1937     +files/2.4.26-CAN-2004-0497.patch,
1938     -hardened-sources-2.4.26-r2.ebuild:
1939     Version bump, fixed CAN 0497, see bug #56171.
1940    
1941 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1942    
1943     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1944 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1945 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1946     +files/2.4.26-CAN-2004-0535.patch,
1947     -hardened-sources-2.4.26-r1.ebuild:
1948     Fixes for both CAN 0495 and 0535, see bug #54976
1949 pvdabeel 1.27
1950 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1951     hardened-sources-2.4.26-r1.ebuild:
1952     QA - fix use invocation
1953 scox 1.28
1954     *hardened-sources-2.4.26-r1 (22 June 2004)
1955    
1956     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1957     +hardened-sources-2.4.26-r1.ebuild,
1958     +files/2.4.26-CAN-2004-0394.patch,
1959     +files/2.4.26-signal-race.patch,
1960     -hardened-sources-2.4.26.ebuild,
1961     -hardened-sources-2.4.24-r3.ebuild:
1962     Version bump for the CAN-2004-0394 issue and bug #53804
1963     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1964    
1965    
1966 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1967     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1968     Masked hardened-sources-2.4.26.ebuild broken for ppc
1969    
1970     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1971     hardened-sources-2.4.24-r3.ebuild:
1972     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1973 plasmaroo 1.25
1974 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1975    
1976     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1977     +hardened-sources-2.4.26.ebuild:
1978     Updated hardened-sources for the 2.4.26 kernel
1979     Removed broken components, updated almost everything.
1980    
1981 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1982    
1983     17 Apr 2004; <plasmaroo@gentoo.org>
1984     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1985     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1986     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1987     +hardened-sources-2.4.24-r3.ebuild:
1988     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1989     vulnerabilities. Old revisions removed.
1990 plasmaroo 1.24
1991     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1992    
1993     15 Apr 2004; <plasmaroo@gentoo.org>
1994     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1995     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1996     Version bump for the CAN-2004-0109 issue; bug #47881.
1997 aliz 1.23
1998     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1999     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
2000     Add eutils to inherit.
2001 plasmaroo 1.22
2002     *hardened-sources-2.4.24-r1 (19 Feb 2004)
2003    
2004     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
2005     files/hardened-sources-2.4.24.munmap.patch:
2006     Added the patch for the mremap/munmap vulnerability. Bug #42024.
2007 scox 1.19
2008 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
2009 scox 1.26
2010 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
2011     hardened-sources-2.4.24.ebuild:
2012     Version bump, updated most of the components.
2013     This release includes the following:
2014    
2015     - Hardened security
2016     - Netfilter patch-o-matic 20031219
2017     - FreeSWAN 2.04 & x509 1.4.8
2018     - EVMS 2.2.2
2019     - XFS 1.3.1
2020     - cryptoloop jari
2021     - grsecurity 2.0-rc4
2022     - SELinux
2023     - PaX 200402060000
2024     - PaX Obscurity 200308302223
2025     - Others...
2026    
2027     Neither -ck nor systrace are included anymore.
2028    
2029 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
2030    
2031     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
2032     hardened-sources-2.4.22-r2.ebuild:
2033 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
2034 scox 1.19
2035     *hardened-sources-2.4.22-r1 (02 Dec 2003)
2036 iggy 1.17
2037     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
2038 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
2039 iggy 1.16
2040     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
2041 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
2042     Version bump for the 'do_brk' vulnerability.
2043 iggy 1.15
2044     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
2045     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
2046     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
2047     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
2048 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
2049 frogger 1.14
2050     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
2051     hardened-sources-2.4.22.ebuild:
2052 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
2053     components. These are no longer handled in the kernel
2054     so this code was not necessary.
2055 frogger 1.13
2056     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
2057     New 2.4.22 based hardened-sources thanks to
2058     Phil West <p.west@computer.org>.
2059    
2060     These sources include:
2061 plasmaroo 1.18 - New SELinux API
2062     - Updated CK-base
2063     - Updated GRSec
2064     - Systrace
2065     - SuperFreeS/WAN 1.99.8
2066     - Propolice kernel build support
2067     - EVMS
2068     - Other various security related patches
2069 frogger 1.11
2070 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
2071    
2072     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
2073     Updated hardened-sources based on the 2.4.21 Linux kernel.
2074     This includes updates to most major components such as:
2075 plasmaroo 1.18 - ck-base-0306300059
2076     - selinux-2.4-2003071106
2077     - grsecurity-2.0-rc1
2078     - Updated IPTables patch-o-matic
2079     - Updated SuperFreeS/WAN
2080    
2081 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
2082     updated patch set ready for the 2.4.21 based kernel.
2083    
2084 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
2085     Initial import of hardened-sources-2.4.20-r4. This revision
2086     includes only a few changes, but one of these is an important
2087     security fix. It is recommended all users of hardened-sources
2088     upgrade to this release.
2089 plasmaroo 1.18
2090 frogger 1.11 - ioperm bug fix
2091     - fixed compilation failure when building without GRSec
2092 plasmaroo 1.18
2093 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
2094     due to time constraints, but is planned for inclusion in the near
2095     future.
2096 msterret 1.10
2097     *hardened-sources-2.4.20-r2 (12 Jun 2003)
2098    
2099     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
2100     hardened-sources-2.4.20-r3.ebuild:
2101 plasmaroo 1.18 Add Header...
2102 frogger 1.9
2103     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2104     hardened-sources-2.4.20-r3.ebuild:
2105     Removed warnings from ebuild. This kernel should be safe to
2106     use at this point.
2107 frogger 1.8
2108     *hardened-sources-2.4.20-r3 (08 Jun 2003)
2109    
2110     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2111     hardened-sources-2.4.20-r3.ebuild:
2112     New revision. Includes the following changes over -r2:
2113 plasmaroo 1.18
2114 frogger 1.8 - ck7-base (O(1), preempt, low latency)
2115     - Super FreeS/WAN 1.99.7rc2
2116     - PaX for the LSM/SELinux branch
2117     - GRSecurity 2.0-pre4 (role based access control)
2118     - Systrace 1.3
2119     - EXT3 fixes
2120     - EVMS 2.0.1
2121     - GCC 3.1+ compile optimizations
2122     - ProPolice kernel build support
2123     - Hashing table security fixes
2124 frogger 1.3
2125     *hardened-sources-2.4.20-r1 (09 Apr 2003)
2126 frogger 1.7
2127     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
2128     Initial import of hardened-sources-r2. This new
2129     ebuild includes many new performance and security
2130     related patches. As in -r1, it will patch in
2131     LSM/SELinux if "selinux" is in USE, otherwise it
2132     will patch in GRSecurity. The following patches
2133     are included in this revision:
2134 plasmaroo 1.18
2135 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
2136     (pulled from the base CK patch)
2137     - ptrace exploit patch for the LSM kernel
2138     (the GRSec patch already fixes this)
2139     - LSM 2.4-2003040709
2140     - SELinux 2.4-2003040709
2141     - Systrace v1.2
2142     - IPTables patch-o-matic base patches - 20030107
2143     - CryptoAPI 2.4.20.1 w/ loop-jari patch
2144     - Super FreeS/WAN 1.99.6.1
2145     - GRSecurity 1.9.9g
2146     - MPPE
2147     - EXT3 data journal fix
2148     - CIPE 1.5.4
2149 frogger 1.6
2150     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2151     hardened-sources-2.4.20-r1.ebuild, manifest:
2152 plasmaroo 1.18 Updated to install flask components correctly for selinux.
2153 frogger 1.5
2154     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2155     hardened-sources-2.4.20-r1.ebuild:
2156     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2157     is patched in instead. Ptrace patches for selinux have also been added. In
2158     either case, systrace support will be patched in as well.
2159 frogger 1.3
2160     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2161     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2162 plasmaroo 1.18 Revision bump for new sources.
2163 frogger 1.4
2164 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2165 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
2166 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2167 method 1.1
2168 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
2169    
2170 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2171     hardened-sources-2.4.20.ebuild:
2172 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20