/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.373 - (hide annotations) (download)
Mon Dec 27 16:32:03 2010 UTC (3 years, 8 months ago) by blueness
Branch: MAIN
Changes since 1.372: +8 -1 lines
Based on vanilla 2.6.32.27 + genpatches-2.6.32-29 + grsecurity-2.2.1-2.6.32.27-201012182005

(Portage version: 2.1.9.26/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.373 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.372 2010/12/21 14:09:55 blueness Exp $
4    
5     *hardened-sources-2.6.32-r32 (27 Dec 2010)
6    
7     27 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
8     +hardened-sources-2.6.32-r32.ebuild:
9     Based on vanilla 2.6.32.27 + genpatches-2.6.32-29 +
10     grsecurity-2.2.1-2.6.32.27-201012182005
11 blueness 1.372
12     21 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
13     -hardened-sources-2.6.32-r24.ebuild, -hardened-sources-2.6.32-r25.ebuild,
14     -hardened-sources-2.6.32-r26.ebuild, -hardened-sources-2.6.32-r27.ebuild,
15     -hardened-sources-2.6.32-r29.ebuild, -hardened-sources-2.6.35-r4.ebuild,
16     -hardened-sources-2.6.35-r5.ebuild, -hardened-sources-2.6.35-r6.ebuild,
17     -hardened-sources-2.6.36.ebuild, -hardened-sources-2.6.36-r1.ebuild,
18     -hardened-sources-2.6.36-r2.ebuild, -hardened-sources-2.6.36-r4.ebuild:
19     Removed deprecated versions
20 blueness 1.371
21     20 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
22     hardened-sources-2.6.32-r31.ebuild, hardened-sources-2.6.36-r6.ebuild:
23     amd64, ppc64, x86 fast track stabilization. See CVE-2010-4258,
24     CVE-2010-3849, CVE-2010-3850
25 blueness 1.370
26     *hardened-sources-2.6.36-r6 (14 Dec 2010)
27    
28     14 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
29     +hardened-sources-2.6.36-r6.ebuild:
30     Based on vanilla 2.6.36.2 + genpatches-2.6.36-7 +
31     grsecurity-2.2.1-2.6.36.2-201012121726
32 blueness 1.369
33     *hardened-sources-2.6.32-r31 (14 Dec 2010)
34    
35     14 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
36     +hardened-sources-2.6.32-r31.ebuild:
37     Based on vanilla 2.6.32.27 + genpatches-2.6.32-29 +
38     grsecurity-2.2.1-2.6.32.27-201012130740
39 blueness 1.368
40     09 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
41     hardened-sources-2.6.32-r30.ebuild, hardened-sources-2.6.36-r5.ebuild:
42     Fixed bug #348238
43 blueness 1.367
44     *hardened-sources-2.6.36-r5 (09 Dec 2010)
45    
46     09 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
47     +hardened-sources-2.6.36-r5.ebuild:
48     Based on vanilla-2.6.36.1 + genpatches-2.6.36-6 +
49     grsecurity-2.2.1-2.6.36.1-201012040057
50 blueness 1.366
51     *hardened-sources-2.6.32-r30 (09 Dec 2010)
52    
53     09 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
54     +hardened-sources-2.6.32-r30.ebuild:
55     Based on vanilla-2.6.32.26 + genpatches-2.6.32-28 +
56     grsecurity-2.2.1-2.6.32.26-201012040057
57 blueness 1.365
58     *hardened-sources-2.6.36-r4 (02 Dec 2010)
59    
60     02 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
61     +hardened-sources-2.6.36-r4.ebuild:
62     Based on vanilla-2.6.36.1 + genpatches-.2.6.36-5 +
63     grsecurity-2.2.1-2.6.36.1-201011280939
64 blueness 1.364
65     *hardened-sources-2.6.32-r29 (02 Dec 2010)
66    
67     02 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
68     +hardened-sources-2.6.32-r29.ebuild:
69     Based on vanilla-2.6.32.26 + genpatches-2.6.32-27 +
70     grsecurity-2.2.1-2.6.32.26-201011280939
71 blueness 1.363
72     30 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
73     -hardened-sources-2.6.32-r28.ebuild, -hardened-sources-2.6.36-r3.ebuild:
74     Removed because of multiple breakage (pulseaudio, install, etc).
75 blueness 1.362
76     *hardened-sources-2.6.36-r3 (29 Nov 2010)
77    
78     29 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
79     +hardened-sources-2.6.36-r3.ebuild:
80     hardened-sources-2.6.36-r3 based on 2.6.36.1 + genpatches +
81     grsecurity-2.2.1-2.6.36.1-201011261834
82 blueness 1.361
83     *hardened-sources-2.6.32-r28 (29 Nov 2010)
84    
85     29 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
86     +hardened-sources-2.6.32-r28.ebuild:
87     hardened-sources-2.6.32-r28 based on 2.6.32.26 + genpatches +
88     grsecurity-2.2.1-2.6.32.26-201011261834
89 robbat2 1.360
90     28 Nov 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
91     Update Manifest for deblob 2.6.36.
92 blueness 1.359
93     *hardened-sources-2.6.36-r2 (18 Nov 2010)
94    
95     18 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
96     +hardened-sources-2.6.36-r2.ebuild:
97     hardened-sources-2.6.36-r2 based on 2.6.36 + genpatches +
98     grsecurity-2.2.0-2.6.36-201011151726
99 blueness 1.358
100     *hardened-sources-2.6.32-r27 (18 Nov 2010)
101    
102     18 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
103     +hardened-sources-2.6.32-r27.ebuild:
104     hardened-sources-2.6.32-r27 based on 2.6.32.25 + genpatches +
105     grsecurity-2.2.0-2.6.32.25-201011151726
106 blueness 1.357
107     *hardened-sources-2.6.36-r1 (14 Nov 2010)
108    
109     14 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
110     +hardened-sources-2.6.36-r1.ebuild:
111     hardened-sources-2.6.36-r1 based on 2.6.36 + genpatches +
112     grsecurity-2.2.0-2.6.36-201011131640
113 blueness 1.356
114     *hardened-sources-2.6.32-r26 (14 Nov 2010)
115    
116     14 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
117     +hardened-sources-2.6.32-r26.ebuild:
118     hardened-sources-2.6.32-r26 based on 2.6.32.25 + genpatches +
119     grsecurity-2.2.0-2.6.32.25-201011131640
120 blueness 1.355
121     *hardened-sources-2.6.36 (07 Nov 2010)
122    
123     07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
124     +hardened-sources-2.6.36.ebuild:
125     hardened-sources-2.6.36 based on 2.6.36 + genpatches +
126     grsecurity-2.2.0-2.6.36-201011062054
127 blueness 1.354
128     *hardened-sources-2.6.35-r7 (07 Nov 2010)
129    
130     07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
131     +hardened-sources-2.6.35-r7.ebuild:
132     hardened-sources-2.6.35-r7 based on 2.6.35.8 + genpatches +
133     grsecurity-2.2.0-2.6.35.8-201011062054
134 blueness 1.353
135     *hardened-sources-2.6.32-r25 (07 Nov 2010)
136    
137     07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
138     +hardened-sources-2.6.32-r25.ebuild:
139     hardened-sources-2.6.32-r25 based on 2.6.32.25 + genpatches +
140     grsecurity-2.2.0-2.6.32.25-201011062054
141 blueness 1.352
142     *hardened-sources-2.6.35-r6 (02 Nov 2010)
143     *hardened-sources-2.6.32-r24 (02 Nov 2010)
144    
145     02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
146     +hardened-sources-2.6.32-r24.ebuild, +hardened-sources-2.6.35-r6.ebuild:
147     hardened-sources-2.6.32-r24 based on 2.6.32.25 + genpatches +
148     grsecurity-2.2.0-2.6.32.25-201010311944
149     hardened-sources-2.6.35-r6 based on 2.6.35.8 + genpatches +
150     grsecurity-2.2.0-2.6.35.8-201010311944
151 blueness 1.351
152     02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
153     hardened-sources-2.6.32-r23.ebuild:
154     ppc64 stable, bug #343535
155 blueness 1.350
156     *hardened-sources-2.6.35-r5 (24 Oct 2010)
157     *hardened-sources-2.6.32-r23 (24 Oct 2010)
158    
159     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
160     +hardened-sources-2.6.32-r23.ebuild, +hardened-sources-2.6.35-r5.ebuild:
161     hardened-sources-2.6.32-r23 based on 2.6.32.24 + genpatches +
162     grsec-2.2.0-2.6.32.24-201010232009
163     hardened-sources-2.6.35-r5 based on 2.6.35.7 + genpatches +
164     grsec-2.2.0-2.6.35.7-201010232009
165 blueness 1.349
166     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
167     hardened-sources-2.6.32-r22.ebuild:
168     Broken on ppc/ppc64, bug #341915#c6
169 blueness 1.348
170     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
171     -hardened-sources-2.6.32-r16.ebuild, -hardened-sources-2.6.32-r17.ebuild,
172     -hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.32-r19.ebuild,
173     -hardened-sources-2.6.32-r20.ebuild, -hardened-sources-2.6.32-r21.ebuild,
174     -hardened-sources-2.6.34-r4.ebuild, -hardened-sources-2.6.34-r5.ebuild,
175     -hardened-sources-2.6.35.ebuild, -hardened-sources-2.6.35-r1.ebuild,
176     -hardened-sources-2.6.35-r2.ebuild, -hardened-sources-2.6.35-r3.ebuild:
177     Removing vulnerable kernels where possible, bug #341801
178 blueness 1.347
179     21 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
180     hardened-sources-2.6.32-r22.ebuild:
181     x86 stable, bug #341915
182 blueness 1.346
183     20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
184     hardened-sources-2.6.32-r22.ebuild:
185     amd64 stable, bug #341915
186 blueness 1.345
187     *hardened-sources-2.6.35-r4 (20 Oct 2010)
188     *hardened-sources-2.6.32-r22 (20 Oct 2010)
189    
190     20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
191     +hardened-sources-2.6.32-r22.ebuild, +hardened-sources-2.6.35-r4.ebuild:
192     hardened-sources-2.6.32-r22 based on 2.6.32.24 + genpatches +
193     grsec-2.2.0-2.6.32.24-201010191911
194     hardened-sources-2.6.35-r4 based on 2.6.35.7 + genpatches +
195     grsec-2.2.0-2.6.35.7-201010191911
196     Addresses security bug #341801
197 blueness 1.344
198     *hardened-sources-2.6.35-r3 (16 Oct 2010)
199     *hardened-sources-2.6.32-r21 (16 Oct 2010)
200    
201     16 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
202     +hardened-sources-2.6.32-r21.ebuild, +hardened-sources-2.6.35-r3.ebuild:
203     hardened-sources-2.6.32-r21 based on 2.6.32.24 + genpatches +
204     grsec-2.2.0-2.6.32.24-201010121028
205     hardened-sources-2.6.35-r3 based on 2.6.35.7 + genpatches +
206     grsec-2.2.0-2.6.35.7-201010121028
207 blueness 1.343
208     *hardened-sources-2.6.35-r2 (07 Oct 2010)
209    
210     07 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
211     +hardened-sources-2.6.35-r2.ebuild:
212     hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches +
213     grsec-2.2.0-2.6.35.7-201010021153
214 blueness 1.342
215     *hardened-sources-2.6.32-r20 (06 Oct 2010)
216    
217     06 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
218     +hardened-sources-2.6.32-r20.ebuild:
219     hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches +
220     grsec-2.2.0-2.6.32.24-201010021153
221 blueness 1.341
222     *hardened-sources-2.6.35-r1 (30 Sep 2010)
223     *hardened-sources-2.6.32-r19 (30 Sep 2010)
224    
225     30 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
226     +hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild:
227     hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches +
228     grsec-2.2.0-2.6.32.23-201009272133
229     hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches +
230     grsec-2.2.0-2.6.35.6-201009281623
231 blueness 1.340
232     *hardened-sources-2.6.35 (28 Sep 2010)
233    
234     28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
235     +hardened-sources-2.6.35.ebuild:
236     hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
237 blueness 1.339
238     21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
239     -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
240     hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
241     -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
242     Fast track stabilization. See bug #338273. Removed older versions.
243 blueness 1.338
244     *hardened-sources-2.6.34-r6 (17 Sep 2010)
245     *hardened-sources-2.6.32-r18 (17 Sep 2010)
246    
247     17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
248     +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
249     hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
250     grsec-2.2.0-2.6.32.21-201009162222
251     hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
252     grsec-2.2.0-2.6.34.7-201009162222
253     Addresses IA32 syscall exploit.
254 blueness 1.337
255     *hardened-sources-2.6.34-r5 (15 Sep 2010)
256     *hardened-sources-2.6.32-r17 (15 Sep 2010)
257    
258     15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
259     +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
260     hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
261     grsec-2.2.0-2.6.32.21-201009130811
262     hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
263     grsec-2.2.0-2.6.34.6-201009130754
264 blueness 1.336
265     *hardened-sources-2.6.34-r4 (07 Sep 2010)
266     *hardened-sources-2.6.32-r16 (07 Sep 2010)
267    
268     07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
269     +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
270     hardened-sources-2.6.32-r16 based on 2.6.32.21 +
271     grsec-2.2.0-2.6.32.21-201009032133
272     hardened-sources-2.6.34-r4 based on 2.6.34.6 +
273     grsec-2.2.0-2.6.34.6-201009041352
274 blueness 1.335
275     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
276     hardened-sources-2.6.32-r15 based on 2.6.32.21 +
277     grsec-2.2.0-2.6.32.21-201008292122
278     hardened-sources-2.6.34-r3 based on 2.6.34.6 +
279     grsec-2.2.0-2.6.34.6-201008292122
280 blueness 1.334
281     *hardened-sources-2.6.34-r3 (02 Sep 2010)
282     *hardened-sources-2.6.32-r15 (02 Sep 2010)
283    
284     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
285     -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
286     -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
287     +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
288     +hardened-sources-2.6.34-r3.ebuild:
289     Bumps and remove deprecated versions
290 blueness 1.333
291     *hardened-sources-2.6.34-r2 (21 Aug 2010)
292    
293     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
294     +hardened-sources-2.6.34-r2.ebuild:
295     Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
296 blueness 1.332
297     *hardened-sources-2.6.32-r14 (21 Aug 2010)
298    
299     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
300     +hardened-sources-2.6.32-r14.ebuild:
301     Based on vanilla 2.6.32.19 + genpatches +
302     grsec-2.2.0-2.6.32.19-201008131840
303 blueness 1.331
304     *hardened-sources-2.6.32-r13 (14 Aug 2010)
305    
306     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
307     +hardened-sources-2.6.32-r13.ebuild:
308     Based on vanilla 2.6.32.18 + genpatches +
309     grsecurity-2.2.0-2.6.32.18-201008112233
310 robbat2 1.330
311     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
312     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
313 blueness 1.329
314     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
315     hardened-sources-2.6.32-r9.ebuild:
316     Stable ppc64. Bug #326885
317 blueness 1.328
318     *hardened-sources-2.6.32-r12 (24 Jul 2010)
319    
320     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
321     +hardened-sources-2.6.32-r12.ebuild:
322     Parallels fix incorporated into hardened-sources-2.6.34-r1
323 blueness 1.327
324     *hardened-sources-2.6.34-r1 (24 Jul 2010)
325    
326     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
327     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
328     Fixes bug #328275
329 chainsaw 1.326
330     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
331     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
332     on gentoo-dev.
333 jer 1.325
334     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
335     Correct mail address.
336 blueness 1.324
337     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
338     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
339     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
340     -hardened-sources-2.6.32-r8.ebuild:
341     Removing outdated releases
342 fauli 1.323
343     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
344     hardened-sources-2.6.32-r9.ebuild:
345     stable x86, bug 326885
346 blueness 1.322
347     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
348     -hardened-sources-2.6.32-r7.ebuild:
349     Removed for security. Bug #325573
350 blueness 1.321
351     *hardened-sources-2.6.34 (13 Jul 2010)
352    
353     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
354     +hardened-sources-2.6.34.ebuild:
355     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
356 blueness 1.320
357     *hardened-sources-2.6.32-r11 (13 Jul 2010)
358    
359     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
360     +hardened-sources-2.6.32-r11.ebuild:
361     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
362 chainsaw 1.319
363     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
364     Marked stable on AMD64 as requested by Anthony G. Basile
365     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
366     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
367 blueness 1.318
368     *hardened-sources-2.6.32-r10 (30 Jun 2010)
369    
370     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
371     +hardened-sources-2.6.32-r10.ebuild:
372     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
373 blueness 1.317
374     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
375     Added myself to the metadata.xml
376 chainsaw 1.316
377     *hardened-sources-2.6.32-r9 (11 Jun 2010)
378    
379     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
380     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
381 chainsaw 1.315
382     *hardened-sources-2.6.32-r8 (01 Jun 2010)
383    
384     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
385     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
386 chainsaw 1.314
387     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
388     Update SRC_URI to point to mirror network now that the distfile has
389     propagated.
390 chainsaw 1.313
391     *hardened-sources-2.6.32-r7 (26 May 2010)
392    
393     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
394     metadata.xml:
395     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
396     Summers.
397 robbat2 1.312
398     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
399     Update Manifest for deblob support in kernel-2 eclass.
400 nixnut 1.311
401     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
402     ppc stable
403 gengor 1.310
404     29 May 2009; Gordon Malm <gengor@gentoo.org>
405     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
406     Stable amd64/x86 and remove old.
407 gengor 1.309
408     *hardened-sources-2.6.29 (25 May 2009)
409    
410     25 May 2009; Gordon Malm <gengor@gentoo.org>
411     +hardened-sources-2.6.29.ebuild:
412     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
413     release candidates.
414 gengor 1.308
415     *hardened-sources-2.6.28-r9 (25 May 2009)
416    
417     25 May 2009; Gordon Malm <gengor@gentoo.org>
418     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
419     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
420 gengor 1.307
421     *hardened-sources-2.6.28-r8 (18 May 2009)
422    
423     18 May 2009; Gordon Malm <gengor@gentoo.org>
424     +hardened-sources-2.6.28-r8.ebuild:
425     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
426     and #262862 among others.
427 gengor 1.306
428     01 May 2009; Gordon Malm <gengor@gentoo.org>
429     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
430     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
431     Remove unnecessary mirror://gentoo from SRC_URI.
432 nixnut 1.305
433     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
434     ppc stable
435 gengor 1.304
436     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
437     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
438     Stable amd64/x86 and remove old.
439 gengor 1.303
440     *hardened-sources-2.6.28-r7 (27 Mar 2009)
441    
442     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
443     +hardened-sources-2.6.28-r7.ebuild:
444     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
445 gengor 1.302
446     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
447     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
448     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
449     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
450     Stable amd64/x86 and remove old versions.
451 nixnut 1.301
452     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
453     ppc stable
454 gengor 1.300
455     *hardened-sources-2.6.28-r6 (21 Mar 2009)
456    
457     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
458     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
459     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
460 gengor 1.299
461     *hardened-sources-2.6.28-r5 (20 Mar 2009)
462    
463     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
464     +hardened-sources-2.6.28-r5.ebuild:
465     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
466 gengor 1.298
467     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
468     hardened-sources-2.6.28-r4.ebuild:
469     Stable amd64/x86.
470 gengor 1.297
471     *hardened-sources-2.6.28-r4 (18 Mar 2009)
472    
473     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
474     +hardened-sources-2.6.28-r4.ebuild:
475     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
476     compilation with CPA_DEBUG and more.
477 gengor 1.296
478     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
479     hardened-sources-2.6.28-r3.ebuild:
480     Quick stable amd64/x86.
481 gengor 1.295
482     *hardened-sources-2.6.28-r3 (15 Mar 2009)
483    
484     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
485     +hardened-sources-2.6.28-r3.ebuild:
486     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
487 nixnut 1.294
488     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
489     ppc stable
490 gengor 1.293
491     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
492     hardened-sources-2.6.28-r2.ebuild:
493     Stable amd64/x86.
494 gengor 1.292
495     *hardened-sources-2.6.28-r2 (11 Mar 2009)
496    
497     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
498     +hardened-sources-2.6.28-r2.ebuild:
499     Version bump bringing in latest grsecurity patch.
500 gengor 1.291
501     *hardened-sources-2.6.28-r1 (09 Mar 2009)
502    
503     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
504     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
505     Version bump and remove old.
506 nixnut 1.290
507     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
508     ppc stable
509 gengor 1.289
510     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
511     hardened-sources-2.6.27-r8.ebuild:
512     Remove amd64 testing keyword, bug 256226.
513 gengor 1.288
514     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
515     hardened-sources-2.6.27-r8.ebuild:
516     Revert amd64 stable, bug #256226.
517 gengor 1.287
518     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
519     hardened-sources-2.6.27-r8.ebuild:
520     Stable on amd64/x86.
521 gengor 1.286
522     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
523     -hardened-sources-2.6.27-r6.ebuild:
524     Remove old 2.6.27 release.
525 gengor 1.285
526     *hardened-sources-2.6.27-r8 (24 Feb 2009)
527    
528     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
529     +hardened-sources-2.6.27-r8.ebuild:
530     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
531     and probably more.
532 nixnut 1.284
533     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
534     ppc stable
535 gengor 1.283
536     *hardened-sources-2.6.28 (25 Jan 2009)
537    
538     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
539     +hardened-sources-2.6.28.ebuild:
540     Initial 2.6.28 release.
541 gengor 1.282
542     *hardened-sources-2.6.27-r7 (25 Jan 2009)
543    
544     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
545     +hardened-sources-2.6.27-r7.ebuild:
546     Bump to Linux 2.6.27.13.
547 gengor 1.281
548     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
549     hardened-sources-2.6.26-r9.ebuild:
550     Stable amd64/x86.
551 gengor 1.280
552     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
553     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
554     -hardened-sources-2.6.27-r5.ebuild:
555     Remove problem versions.
556 gengor 1.279
557     *hardened-sources-2.6.27-r6 (24 Jan 2009)
558    
559     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
560     +hardened-sources-2.6.27-r6.ebuild:
561     Revert PaX test29 to test30 changes. Fixes bug 256226.
562 gengor 1.277
563     *hardened-sources-2.6.27-r5 (24 Jan 2009)
564    
565     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
566     +hardened-sources-2.6.27-r5.ebuild:
567 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
568 gengor 1.277 254843.
569 gengor 1.276
570     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
571     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
572     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
573     Remove problem versions.
574 nixnut 1.275
575     23 Jan 2009; nixnut <nixnut@gentoo.org>
576     hardened-sources-2.6.25-r13.ebuild:
577     ppc stable
578 gengor 1.274
579     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
580     hardened-sources-2.6.25-r13.ebuild:
581     Fasttrack stable amd64/x86.
582 gengor 1.273
583     *hardened-sources-2.6.26-r9 (21 Jan 2009)
584    
585     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
586     +hardened-sources-2.6.26-r9.ebuild:
587 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
588 gengor 1.272
589     *hardened-sources-2.6.25-r13 (20 Jan 2009)
590    
591     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
592     +hardened-sources-2.6.25-r13.ebuild:
593 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
594 nixnut 1.271
595     20 Jan 2009; nixnut <nixnut@gentoo.org>
596     hardened-sources-2.6.25-r12.ebuild:
597     ppc stable
598 gengor 1.270
599     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
600     hardened-sources-2.6.25-r12.ebuild:
601     Stable amd64/x86.
602 gengor 1.269
603     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
604     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
605     -hardened-sources-2.6.27-r2.ebuild:
606     Clean out old versions.
607 gengor 1.268
608     *hardened-sources-2.6.27-r4 (14 Jan 2009)
609     *hardened-sources-2.6.26-r8 (14 Jan 2009)
610     *hardened-sources-2.6.25-r12 (14 Jan 2009)
611    
612     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
613     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
614     +hardened-sources-2.6.27-r4.ebuild:
615     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
616     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
617     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
618     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
619 nixnut 1.267
620     15 Dec 2008; nixnut <nixnut@gentoo.org>
621     hardened-sources-2.6.25-r11.ebuild:
622     Stable on ppc
623 gengor 1.266
624     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
625     hardened-sources-2.6.25-r11.ebuild:
626     Stable amd64/x86.
627 gengor 1.265
628     *hardened-sources-2.6.27-r3 (07 Dec 2008)
629    
630     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
631     +hardened-sources-2.6.27-r3.ebuild:
632     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
633     Fixes bug #248754, #249729 and #246607.
634 gengor 1.264
635     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
636     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
637     Remove old versions.
638 gengor 1.262
639     *hardened-sources-2.6.26-r7 (03 Dec 2008)
640     *hardened-sources-2.6.25-r11 (03 Dec 2008)
641    
642 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
643     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
644 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
645     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
646     Both include many backports from 2.6.27.{6,7} -stable releases.
647 gengor 1.261
648     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
649     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
650     Remove versions broken on ARCHes != x86/amd64.
651 gengor 1.260
652     *hardened-sources-2.6.27-r2 (24 Nov 2008)
653    
654     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
655     +hardened-sources-2.6.27-r2.ebuild:
656     Bump to Linux 2.6.27.7 and latest grsecurity patch.
657 gengor 1.259
658     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
659     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
660     Remove old versions.
661 gengor 1.258
662     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
663     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
664     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
665 nixnut 1.257
666     16 Nov 2008; nixnut <nixnut@gentoo.org>
667     hardened-sources-2.6.25-r10.ebuild:
668     Stable on ppc
669 gengor 1.256
670     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
671     hardened-sources-2.6.25-r10.ebuild:
672     Stable amd64/x86.
673 gengor 1.255
674     *hardened-sources-2.6.26-r6 (12 Nov 2008)
675    
676     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
677     +hardened-sources-2.6.26-r6.ebuild:
678     Bump to Linux 2.6.26.8 and fix security bug #245650.
679 gengor 1.254
680     *hardened-sources-2.6.25-r10 (12 Nov 2008)
681    
682     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
683     +hardened-sources-2.6.25-r10.ebuild:
684     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
685 gengor 1.253
686     *hardened-sources-2.6.27-r1 (09 Nov 2008)
687    
688     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
689     +hardened-sources-2.6.27-r1.ebuild:
690     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
691 gengor 1.252
692     *hardened-sources-2.6.27 (04 Nov 2008)
693    
694     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
695     +hardened-sources-2.6.27.ebuild:
696     Initial 2.6.27 release.
697 gengor 1.251
698     *hardened-sources-2.6.26-r5 (03 Nov 2008)
699    
700     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
701     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
702     +hardened-sources-2.6.26-r5.ebuild:
703     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
704     Clean out some old versions.
705 nixnut 1.250
706     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
707     Stable on ppc
708 gengor 1.249
709     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
710     hardened-sources-2.6.25-r9.ebuild:
711     Stable on amd64/x86.
712 gengor 1.248
713     *hardened-sources-2.6.25-r9 (26 Oct 2008)
714    
715     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
716     +hardened-sources-2.6.25-r9.ebuild:
717     Update to Linux 2.6.25.19
718 nixnut 1.247
719     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
720     Stable on ppc
721 gengor 1.246
722     *hardened-sources-2.6.26-r4 (14 Oct 2008)
723    
724     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
725     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
726     Update to latest grsecurity patch, fixing building of non-modular kernels.
727 gengor 1.245
728     *hardened-sources-2.6.26-r3 (12 Oct 2008)
729    
730     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
731     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
732     +hardened-sources-2.6.26-r3.ebuild:
733     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
734     2.6.26-r1: Removed.
735     2.6.25-r8: Stable amd64/x86.
736 gengor 1.244
737     *hardened-sources-2.6.25-r8 (09 Oct 2008)
738    
739     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
740     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
741     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
742     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
743 nixnut 1.243
744     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
745     Stable on ppc
746 gengor 1.242
747     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
748     hardened-sources-2.6.25-r7.ebuild:
749     Stable amd64/x86.
750 gengor 1.241
751     *hardened-sources-2.6.26-r2 (13 Sep 2008)
752    
753     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
754     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
755     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
756     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
757 gengor 1.240
758     *hardened-sources-2.6.25-r7 (13 Sep 2008)
759    
760     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
761     +hardened-sources-2.6.25-r7.ebuild:
762     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
763 gengor 1.239
764     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
765     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
766     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
767     hardened-sources-2.6.26-r1.ebuild:
768     Update DESCRIPTION and HGPV_URI.
769 gengor 1.238
770     *hardened-sources-2.6.25-r6 (09 Sep 2008)
771    
772     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
773     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
774     2.6.25-r6: Update to Linux 2.6.25.17.
775     2.6.24-r3: Removed.
776 gengor 1.237
777     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
778     hardened-sources-2.6.25-r5.ebuild:
779     Stable on amd64/x86
780 gengor 1.236
781     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
782     Update my email address.
783 nixnut 1.235
784     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
785     stable on ppc
786 battousai 1.234
787     *hardened-sources-2.6.26-r1 (23 Aug 2008)
788     *hardened-sources-2.6.25-r5 (23 Aug 2008)
789    
790     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
791     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
792     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
793     +hardened-sources-2.6.26-r1.ebuild:
794     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
795     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
796     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
797     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
798     (gengor).
799 solar 1.233
800     *hardened-sources-2.6.26 (18 Aug 2008)
801     *hardened-sources-2.6.25-r4 (18 Aug 2008)
802    
803     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
804     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
805     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
806     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
807     2.6.25-r2: Removed.
808 tove 1.232
809     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
810     Remove phreak from metadata.xml (#96398)
811 solar 1.231
812     *hardened-sources-2.6.25-r3 (31 Jul 2008)
813    
814     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
815     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
816     +hardened-sources-2.6.25-r3.ebuild:
817     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
818     fixes, including security bug #231750.
819 nixnut 1.230
820     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
821     Stable on ppc
822 solar 1.229
823     *hardened-sources-2.6.25-r2 (05 Jul 2008)
824    
825     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
826     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
827     +hardened-sources-2.6.25-r2.ebuild:
828     2.6.23-r4: Stable x86/amd64
829     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
830     2.6.23-r{11,12}: Removed due to multiple vulns.
831     (gengor & kerframil)
832 nixnut 1.228
833     04 Jul 2008; nixnut <nixnut@gentoo.org>
834     hardened-sources-2.6.23-r13.ebuild:
835     Stable on ppc
836 solar 1.227
837     *hardened-sources-2.6.25-r1 (30 Jun 2008)
838    
839     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
840     +hardened-sources-2.6.25-r1.ebuild:
841     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
842     grsecurity release. 2.6.23-r13: x86/amd64 stable
843 solar 1.226
844     *hardened-sources-2.6.25 (17 Jun 2008)
845     *hardened-sources-2.6.24-r3 (17 Jun 2008)
846     *hardened-sources-2.6.23-r13 (17 Jun 2008)
847    
848     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
849     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
850     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
851     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
852     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
853     2.6.25: Initial 2.6.25 release.
854 solar 1.225
855     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
856     - fasttrack to stable x86/amd64
857 swegener 1.224
858     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
859     Fix broken digest for linux-2.6.24.tar.bz2.
860 solar 1.223
861     *hardened-sources-2.6.24-r2 (11 May 2008)
862     *hardened-sources-2.6.23-r12 (11 May 2008)
863    
864     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
865     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
866     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
867     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
868     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
869     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
870     security bugs 219901, 220691, 220975, 220979, 221123. New
871     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
872     should be removed as far as I'm concerned, everything else remove due to
873     vulnerable to numerous security bugs or brokeness.
874 nixnut 1.222
875     10 May 2008; nixnut <nixnut@gentoo.org>
876     hardened-sources-2.6.23-r11.ebuild:
877     Stable on ppc
878 solar 1.221
879     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
880     - -r11 stable on x86/amd64
881 solar 1.220
882     *hardened-sources-2.6.23-r11 (01 May 2008)
883    
884     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
885     - version bump to fix ulgy linux bugs
886 phreak 1.219
887     *hardened-sources-2.6.24-r1 (30 Apr 2008)
888    
889     30 Apr 2008; Christian Heim <phreak@gentoo.org>
890     +hardened-sources-2.6.24-r1.ebuild:
891     Revision bump (thanks to Kerin and Gordon, again), pulling
892     genpatches-2.6.24-7, solving #219089. Additionally contains further security
893     fixes plus some minor updates.
894 phreak 1.218
895     *hardened-sources-2.6.23-r10 (30 Apr 2008)
896    
897     30 Apr 2008; Christian Heim <phreak@gentoo.org>
898     +hardened-sources-2.6.23-r10.ebuild:
899     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
900     Additional contains "various other fixes".
901 phreak 1.217
902     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
903     Update the longdescription in metadata, thanks to Gordon Malm.
904 nixnut 1.216
905     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
906     Stable on ppc wrt bug #213255
907 solar 1.215
908     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
909     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
910     - stable on x86/amd64 per request. Removed obsolete ebuilds
911 phreak 1.214
912     *hardened-sources-2.6.24 (07 Apr 2008)
913    
914     07 Apr 2008; Christian Heim <phreak@gentoo.org>
915     +hardened-sources-2.6.24.ebuild:
916     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
917     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
918     for the many contributions and their continued effort in #216612) based on
919     2.6.24 and genpatches-2.6.24-5.
920    
921     The current ebuild/patchset contains these things:
922     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
923     * Introduces bespoke server and workstation oriented security levels
924     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
925 phreak 1.213
926     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
927     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
928     maintaining it).
929 phreak 1.212
930     24 Mar 2008; Christian Heim <phreak@gentoo.org>
931     hardened-sources-2.4.35-r2.ebuild:
932     Fixing SRC_URI for 2.4.35-r2.
933 phreak 1.211
934     *hardened-sources-2.6.23-r9 (22 Mar 2008)
935    
936     22 Mar 2008; Christian Heim <phreak@gentoo.org>
937     +hardened-sources-2.6.23-r9.ebuild:
938     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
939     * Change the default GIDs for some grsecurity options
940     * Revamp the Hardened [Gentoo] security level and make it the default level
941     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
942     * Fix a recursive lock -- call to capable() within ptrace_attach()
943     * Fix bug that allows audit and iscsi operations to be controlled via netlink
944 solar 1.210
945     *hardened-sources-2.6.23-r8 (27 Feb 2008)
946    
947     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
948     - version bump from Kerin Millar bug 210026
949 solar 1.209
950     17 Feb 2008; <solar@gentoo.org> metadata.xml,
951     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
952     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
953     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
954     - stable on x86 and remove old ebuilds
955 solar 1.207
956     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
957 solar 1.208 - stable on amd64 per request of amd64 lead
958 solar 1.206
959     *hardened-sources-2.6.23-r7 (11 Feb 2008)
960    
961     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
962     - version bump from kerin.millar
963     Changes:
964    
965     * Bump to genpatches-base-2.6.23-9
966     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
967     * Disables COMPAT_VDSO in x86/defconfig
968     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
969 phreak 1.205
970     25 Jan 2008; Christian Heim <phreak@gentoo.org>
971     -hardened-sources-2.6.22-r8.ebuild:
972     Cleaning up old versions.
973 phreak 1.204
974     *hardened-sources-2.6.23-r6 (25 Jan 2008)
975    
976     25 Jan 2008; Christian Heim <phreak@gentoo.org>
977     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
978     Revision bump, pulling in the latest genpatches.
979 phreak 1.203
980     *hardened-sources-2.6.23-r5 (24 Dec 2007)
981    
982     24 Dec 2007; Christian Heim <phreak@gentoo.org>
983     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
984     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
985     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
986     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
987 phreak 1.202
988     24 Dec 2007; Christian Heim <phreak@gentoo.org>
989     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
990     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
991     -hardened-sources-2.6.23-r3.ebuild:
992     Cleaning out some unused, old versions.
993 phreak 1.201
994     24 Dec 2007; Christian Heim <phreak@gentoo.org>
995     hardened-sources-2.6.23-r4.ebuild:
996     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
997     in the tree for long, but there isn't much of a difference between this and
998     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
999 phreak 1.200
1000     *hardened-sources-2.6.23-r4 (23 Dec 2007)
1001    
1002     23 Dec 2007; Christian Heim <phreak@gentoo.org>
1003     +hardened-sources-2.6.23-r4.ebuild:
1004     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
1005 phreak 1.199
1006     *hardened-sources-2.6.23-r3 (04 Dec 2007)
1007    
1008     04 Dec 2007; Christian Heim <phreak@gentoo.org>
1009     +hardened-sources-2.6.23-r3.ebuild:
1010     Revision bump, pulling in 2.6.23.9.
1011 phreak 1.198
1012     *hardened-sources-2.6.23-r2 (25 Nov 2007)
1013    
1014     25 Nov 2007; Christian Heim <phreak@gentoo.org>
1015     +hardened-sources-2.6.23-r2.ebuild:
1016     Updated patchset, thanks to solar.
1017 phreak 1.197
1018     *hardened-sources-2.6.23-r1 (31 Oct 2007)
1019    
1020     31 Oct 2007; Christian Heim <phreak@gentoo.org>
1021     +hardened-sources-2.6.23-r1.ebuild:
1022     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
1023 solar 1.196
1024     29 Oct 2007; <solar@gentoo.org> metadata.xml:
1025     - update metadata.xml
1026 phreak 1.195
1027     25 Oct 2007; Christian Heim <phreak@gentoo.org>
1028     hardened-sources-2.6.22-r8.ebuild:
1029     Marking 2.6.22-r8 stable on amd64 and x86.
1030 phreak 1.194
1031     21 Oct 2007; Christian Heim <phreak@gentoo.org>
1032     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
1033     -hardened-sources-2.6.21-r4.ebuild:
1034     Removing old ebuilds.
1035 phreak 1.193
1036     *hardened-sources-2.4.35-r2 (21 Oct 2007)
1037    
1038     21 Oct 2007; Christian Heim <phreak@gentoo.org>
1039     +hardened-sources-2.4.35-r2.ebuild:
1040     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
1041     patches.
1042 phreak 1.192
1043     *hardened-sources-2.6.22-r8 (21 Oct 2007)
1044    
1045     21 Oct 2007; Christian Heim <phreak@gentoo.org>
1046     +hardened-sources-2.6.22-r8.ebuild:
1047     Yet another new patch, hopefully fixing the remaining issues we had w/
1048     2.6.22. Candidate for stabling.
1049 phreak 1.191
1050     *hardened-sources-2.6.23 (13 Oct 2007)
1051    
1052     13 Oct 2007; Christian Heim <phreak@gentoo.org>
1053     +hardened-sources-2.6.23.ebuild:
1054     Initial hardened-sources-2.6.23. If people still have problems w/ bug
1055     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
1056 phreak 1.190
1057     11 Oct 2007; Christian Heim <phreak@gentoo.org>
1058     hardened-sources-2.6.20-r10.ebuild:
1059     Pulling in yet another new genpatches version, fixing the PWC bug for real.
1060 phreak 1.189
1061     04 Oct 2007; Christian Heim <phreak@gentoo.org>
1062     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
1063     Removing old versions.
1064 phreak 1.188
1065     *hardened-sources-2.6.22-r7 (01 Oct 2007)
1066    
1067     01 Oct 2007; Christian Heim <phreak@gentoo.org>
1068     +hardened-sources-2.6.22-r7.ebuild:
1069     Revision bump, pulling in a newer patch. Should fix #194276.
1070 phreak 1.187
1071     30 Sep 2007; Christian Heim <phreak@gentoo.org>
1072     hardened-sources-2.6.20-r10.ebuild:
1073     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
1074     Mike Doty).
1075 phreak 1.186
1076     *hardened-sources-2.6.22-r6 (26 Sep 2007)
1077    
1078     26 Sep 2007; Christian Heim <phreak@gentoo.org>
1079     +hardened-sources-2.6.22-r6.ebuild:
1080     Revision bump, grabbing up till Linux 2.6.22.9.
1081 phreak 1.185
1082     24 Sep 2007; Christian Heim <phreak@gentoo.org>
1083     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
1084     Cleaning up further.
1085 phreak 1.184
1086     *hardened-sources-2.6.20-r10 (24 Sep 2007)
1087    
1088     24 Sep 2007; Christian Heim <phreak@gentoo.org>
1089     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
1090     +hardened-sources-2.6.20-r10.ebuild:
1091     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
1092     revisions.
1093 phreak 1.183
1094     *hardened-sources-2.6.22-r5 (22 Sep 2007)
1095    
1096     22 Sep 2007; Christian Heim <phreak@gentoo.org>
1097     +hardened-sources-2.6.22-r5.ebuild:
1098     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
1099 phreak 1.182
1100     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1101     Removing johnm from metadata.xml (see #186467 for reference).
1102 phreak 1.181
1103     *hardened-sources-2.6.22-r4 (17 Sep 2007)
1104    
1105     17 Sep 2007; Christian Heim <phreak@gentoo.org>
1106     +hardened-sources-2.6.22-r4.ebuild:
1107     Revision bump, hopefully fixing all those weird PAX failures.
1108 phreak 1.180
1109     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1110     Updating the metadata.xml.
1111 phreak 1.179
1112     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1113     Removing tocharian from metadata due to his retirement (see #71718 for
1114     reference).
1115 phreak 1.178
1116     *hardened-sources-2.6.20-r9 (30 Aug 2007)
1117    
1118     30 Aug 2007; Christian Heim <phreak@gentoo.org>
1119     +hardened-sources-2.6.20-r9.ebuild:
1120     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
1121 phreak 1.177
1122     29 Aug 2007; Christian Heim <phreak@gentoo.org>
1123     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
1124     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
1125     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
1126     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
1127     -hardened-sources-2.6.22-r2.ebuild:
1128     Removing some redundant versions.
1129 phreak 1.176
1130     *hardened-sources-2.4.35-r1 (29 Aug 2007)
1131    
1132     29 Aug 2007; Christian Heim <phreak@gentoo.org>
1133     +hardened-sources-2.4.35-r1.ebuild:
1134     Revision bump, new grsecurity patch.
1135 phreak 1.175
1136     *hardened-sources-2.6.20-r8 (26 Aug 2007)
1137    
1138     26 Aug 2007; Christian Heim <phreak@gentoo.org>
1139     +hardened-sources-2.6.20-r8.ebuild:
1140     Revision bump for Linux 2.6.20.17.
1141 phreak 1.174
1142     *hardened-sources-2.6.22-r3 (22 Aug 2007)
1143    
1144     22 Aug 2007; Christian Heim <phreak@gentoo.org>
1145     +hardened-sources-2.6.22-r3.ebuild:
1146     Revision bump for Linux 2.6.22.4.
1147 phreak 1.173
1148     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1149     hardened-sources-2.6.22-r2.ebuild:
1150     Updated patchset, to fix the alignment against 2.6.22.3.
1151 phreak 1.172
1152     *hardened-sources-2.6.22-r2 (16 Aug 2007)
1153    
1154     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1155     +hardened-sources-2.6.22-r2.ebuild:
1156     Revision bump for Linux 2.6.22.3.
1157 phreak 1.171
1158     *hardened-sources-2.4.35 (16 Aug 2007)
1159    
1160     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1161     +hardened-sources-2.4.35.ebuild:
1162     Version bump, initial version for Linux 2.4.35.
1163 phreak 1.170
1164     *hardened-sources-2.6.21-r4 (16 Aug 2007)
1165    
1166     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1167     +hardened-sources-2.6.21-r4.ebuild:
1168     Revision bump for Linux 2.6.21.6.
1169 phreak 1.169
1170     *hardened-sources-2.6.20-r7 (16 Aug 2007)
1171    
1172     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1173     +hardened-sources-2.6.20-r7.ebuild:
1174     Revision bump for Linux 2.6.20.16.
1175 phreak 1.168
1176     *hardened-sources-2.6.22-r1 (13 Aug 2007)
1177    
1178     13 Aug 2007; Christian Heim <phreak@gentoo.org>
1179     +hardened-sources-2.6.22-r1.ebuild:
1180     Yet another revision bump.
1181 phreak 1.167
1182     *hardened-sources-2.6.22 (10 Aug 2007)
1183    
1184     10 Aug 2007; Christian Heim <phreak@gentoo.org>
1185     +hardened-sources-2.6.22.ebuild:
1186     Initial release for 2.6.22. If you are using hardened-sources on a desktop
1187     machine (P4 or newer), be aware you might need to disable
1188     CONFIG_PAX_PAGEEXEC.
1189 phreak 1.166
1190     04 Aug 2007; Christian Heim <phreak@gentoo.org>
1191     hardened-sources-2.6.20-r6.ebuild:
1192     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
1193     2.6.20.15.
1194 phreak 1.165
1195     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1196     hardened-sources-2.6.20-r5.ebuild:
1197     Marking hardened-sources-2.6.20-r5 stable on ppc.
1198 phreak 1.164
1199     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1200     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
1201     Cleanup.
1202 phreak 1.163
1203     *hardened-sources-2.6.20-r6 (08 Jul 2007)
1204    
1205     08 Jul 2007; Christian Heim <phreak@gentoo.org>
1206     +hardened-sources-2.6.20-r6.ebuild:
1207     Revision bump, grabbing yet another stable release.
1208 phreak 1.162
1209     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1210     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
1211     -hardened-sources-2.6.21-r2.ebuild:
1212     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
1213     alpha stable KEYWORD by mistake.
1214 phreak 1.161
1215     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1216     hardened-sources-2.6.20-r5.ebuild:
1217     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
1218     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
1219 phreak 1.160
1220     *hardened-sources-2.6.21-r3 (12 Jun 2007)
1221    
1222     12 Jun 2007; Christian Heim <phreak@gentoo.org>
1223     +hardened-sources-2.6.21-r3.ebuild:
1224     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
1225     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
1226     love.
1227 phreak 1.159
1228     *hardened-sources-2.6.20-r5 (11 Jun 2007)
1229    
1230     11 Jun 2007; Christian Heim <phreak@gentoo.org>
1231     +hardened-sources-2.6.20-r5.ebuild:
1232     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1233     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1234     love.
1235 pappy 1.158
1236     *hardened-sources-2.4.34.5 (11 Jun 2007)
1237    
1238     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1239     +hardened-sources-2.4.34.5.ebuild:
1240     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1241 phreak 1.157
1242     30 May 2007; Christian Heim <phreak@gentoo.org>
1243     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1244     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1245     stale ebuild(s).
1246 phreak 1.156
1247     30 May 2007; Christian Heim <phreak@gentoo.org>
1248     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1249     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1250     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1251     Doing some cleanups, remove stale ebuilds.
1252 phreak 1.155
1253     26 May 2007; Christian Heim <phreak@gentoo.org>
1254     hardened-sources-2.6.21-r2.ebuild:
1255     Fixing the grsecurity patch, had one '};' too much.
1256 phreak 1.154
1257     *hardened-sources-2.6.21-r2 (26 May 2007)
1258    
1259     26 May 2007; Christian Heim <phreak@gentoo.org>
1260     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1261     +hardened-sources-2.6.21-r2.ebuild:
1262     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1263     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1264 phreak 1.153
1265     *hardened-sources-2.6.20-r4 (26 May 2007)
1266    
1267     26 May 2007; Christian Heim <phreak@gentoo.org>
1268     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1269     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1270 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1271 phreak 1.152
1272     15 May 2007; Christian Heim <phreak@gentoo.org>
1273     hardened-sources-2.6.20-r3.ebuild:
1274     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1275     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1276     grsecurity patch fail in that exact same hunk.
1277 phreak 1.151
1278     *hardened-sources-2.6.20-r3 (15 May 2007)
1279    
1280     15 May 2007; Christian Heim <phreak@gentoo.org>
1281     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1282     Revision bump, incorporating Linux 2.6.20.11.
1283    
1284     *hardened-sources-2.6.21-r1 (11 May 2007)
1285    
1286     11 May 2007; Christian Heim <phreak@gentoo.org>
1287     +hardened-sources-2.6.21-r1.ebuild:
1288     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1289     mentioned in #177234.
1290 kevquinn 1.150
1291     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1292     files/digest-hardened-sources-2.6.21, Manifest:
1293     Fix Manifest/digest for linux-2.6.21.tar.bz2
1294 phreak 1.149
1295     06 May 2007; Christian Heim <phreak@gentoo.org>
1296     hardened-sources-2.6.21.ebuild:
1297     Bumping the hardened-patches version, needed for the fix for #177234.
1298 phreak 1.148
1299     *hardened-sources-2.6.21 (02 May 2007)
1300    
1301     02 May 2007; Christian Heim <phreak@gentoo.org>
1302     +hardened-sources-2.6.21.ebuild:
1303     Version bump, Linux 2.6.21-hardened.
1304 phreak 1.147
1305     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1306     hardened-sources-2.6.20-r2.ebuild:
1307     Adding ~ia64 on Ned's request.
1308 phreak 1.146
1309     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1310     hardened-sources-2.6.20-r2.ebuild:
1311     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1312     header line(s).
1313 phreak 1.145
1314     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1315     hardened-sources-2.6.20-r2.ebuild:
1316     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1317 armin76 1.144
1318     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1319    
1320     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1321     +hardened-sources-2.6.20-r2.ebuild:
1322     Version bump, on behalf of phreak
1323 phreak 1.143
1324     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1325    
1326     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1327     +hardened-sources-2.6.20-r1.ebuild:
1328     Revision bump, grabbing a newer grsecurity snapshot.
1329 phreak 1.142
1330     *hardened-sources-2.6.20 (25 Mar 2007)
1331    
1332     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1333     +hardened-sources-2.6.20.ebuild:
1334     Finally a hardened-sources version for 2.6.20; many people have been waiting
1335     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1336     testbox.
1337 chainsaw 1.141
1338     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1339     hardened-sources-2.6.18-r6.ebuild:
1340     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1341 phreak 1.140
1342     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1343    
1344     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1345     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1346     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1347     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1348     supposed to be.
1349 phreak 1.139
1350     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1351     Fixing the Manifest, the previous one was broken (as in still had the
1352     deleted ebuild in it).
1353 phreak 1.138
1354     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1355     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1356     +hardened-sources-2.6.18-r5.ebuild:
1357     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1358     Linux 2.6.18.8. Also cleaning up the older version.
1359    
1360     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1361    
1362     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1363     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1364     +hardened-sources-2.6.18-r5.ebuild:
1365     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1366     Linux 2.6.18.8. Also cleaning up the older version.
1367 phreak 1.137
1368     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1369     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1370     -hardened-sources-2.6.19-r5.ebuild:
1371     Removing some of the old version, that didn't work.
1372 phreak 1.136
1373     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1374    
1375     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1376     +hardened-sources-2.6.19-r6.ebuild:
1377     Revision bump, including a new grsec version fixing #166235.
1378 pappy 1.134
1379     *hardened-sources-2.4.34 (24 Jan 2007)
1380    
1381     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1382 pappy 1.135 Manifest:
1383     updating Manifest with checksums of new tarball and ebuild
1384    
1385     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1386 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1387     I added new hardened sources 2.4 update, this is a critical path
1388     security bugfix - all users of h-s are strongly advised
1389     to update their existing hardened sources to this version.
1390     It contains a fix for a kernel vulnerability that is pertaining
1391     to the PaX changes to virtual memory management, possibly leading
1392     to a local kernel exploit ... see grsecurity.net forums and homepage
1393 phreak 1.133
1394     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1395     files/digest-hardened-sources-2.6.19-r5, Manifest:
1396     Fixing the patch-tarball digest.
1397 phreak 1.132
1398     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1399    
1400     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1401     +hardened-sources-2.6.19-r5.ebuild:
1402     Revision bump, closing the recently discovered PaX expand_stack()
1403     vulnerability.
1404 phreak 1.131
1405     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1406    
1407     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1408     +hardened-sources-2.6.19-r4.ebuild:
1409     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1410     dropping the randomized PID feature.
1411 opfer 1.130
1412     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1413     hardened-sources-2.4.33.4.ebuild:
1414     stable x86, bug #161171
1415 phreak 1.129
1416     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1417    
1418     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1419     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1420     Revision bump for bug #157186 and #158786.
1421 phreak 1.128
1422     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1423    
1424     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1425     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1426     Revision bump for bug #157186.
1427 phreak 1.127
1428     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1429    
1430     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1431     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1432     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1433 phreak 1.126
1434     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1435     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1436     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1437     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1438     hardened-sources-2.6.19-r1.ebuild:
1439     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1440     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1441 pappy 1.125
1442     *hardened-sources-2.4.33.4 (17 Dec 2006)
1443    
1444     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1445     +hardened-sources-2.4.33.4.ebuild:
1446     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1447     and quilting
1448 phreak 1.124
1449     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1450    
1451     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1452     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1453     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1454     for reporting).
1455 phreak 1.123
1456     *hardened-sources-2.6.19 (13 Dec 2006)
1457    
1458     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1459     +hardened-sources-2.6.19.ebuild:
1460     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1461     Brad for providing that prompt update.
1462 phreak 1.122
1463     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1464    
1465     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1466     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1467     +hardened-sources-2.6.18-r3.ebuild:
1468     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1469     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1470 phreak 1.121
1471     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1472     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1473 nixnut 1.120
1474     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1475     Stable on ppc wrt bug 157356
1476 opfer 1.119
1477     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1478     hardened-sources-2.6.18.ebuild:
1479     stable x86, bug #157356
1480 phreak 1.118
1481     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1482    
1483     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1484     +hardened-sources-2.6.18-r2.ebuild:
1485     Revision bump, including 2.6.18.5 (via genpatches) and
1486     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1487     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1488     redesign.
1489 phreak 1.117
1490     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1491     hardened-sources-2.6.18.ebuild:
1492     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1493     of Mike Doty).
1494 phreak 1.116
1495     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1496    
1497     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1498     +hardened-sources-2.6.18-r1.ebuild:
1499     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1500 phreak 1.115
1501     *hardened-sources-2.6.18 (11 Nov 2006)
1502    
1503     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1504     +hardened-sources-2.6.18.ebuild:
1505     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1506 solar 1.114
1507     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1508     - mark amd64 stable also. bug #151877
1509 solar 1.113
1510     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1511     - mark 2.6.17-r1 stable
1512 phreak 1.112
1513     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1514     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1515     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1516 phreak 1.111
1517     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1518    
1519     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1520     +hardened-sources-2.6.17-r1.ebuild:
1521     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1522     grsecurity patch.
1523 phreak 1.110
1524     *hardened-sources-2.6.17 (17 Aug 2006)
1525    
1526     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1527     +hardened-sources-2.6.17.ebuild:
1528     Bumping the hardened-sources-2.6 series to 2.6.17, using
1529     genpatches-2.6.17-6.base.
1530 solar 1.109
1531     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1532     - stable on x86 and amd64
1533 solar 1.108
1534     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1535    
1536     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1537     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1538     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1539     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1540     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1541     crusty ebuilds
1542 johnm 1.107
1543     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1544     hardened-sources-2.6.16-r10.ebuild:
1545     marking stable on x86 and amd64
1546 solar 1.106
1547     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1548     - 2.4.32-r6 stable on x86. RSBAC state unknown
1549 kang 1.105
1550     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1551    
1552     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1553     +hardened-sources-2.4.32-r7.ebuild:
1554     Bump PaX for RSBAC to test-17
1555 johnm 1.104
1556     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1557    
1558     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1559     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1560     hardened-sources-2.6.16 bump to latest -base.
1561 solar 1.103
1562     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1563    
1564     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1565     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1566     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1567     sysctl controlable resource logging
1568 johnm 1.102
1569     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1570    
1571     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1572     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1573     push new 2.6.16 release in preparation for stable
1574 solar 1.101
1575     22 May 2006; <solar@gentoo.org> :
1576     - redigest bug 134002
1577 kang 1.100
1578     *hardened-sources-2.4.32-r5 (16 May 2006)
1579    
1580     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1581     +hardened-sources-2.4.32-r5.ebuild:
1582     Fixes rsbac common patching (new patch in new -r5 patchset)
1583 solar 1.99
1584     *hardened-sources-2.4.32-r4 (13 May 2006)
1585    
1586     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1587     +hardened-sources-2.4.32-r4.ebuild:
1588     - security bumps
1589 johnm 1.98
1590     *hardened-sources-2.6.16-r6 (03 May 2006)
1591    
1592     03 May 2006; John Mylchreest <johnm@gentoo.org>
1593     +hardened-sources-2.6.16-r6.ebuild:
1594     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1595 johnm 1.97
1596     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1597     hardened-sources-2.6.14-r8.ebuild:
1598     fix x86_64 build problem, this will delay the digest issue again for a short
1599     while but it will sort itself out
1600 johnm 1.96
1601     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1602     hardened-sources-2.6.14-r8.ebuild:
1603     bump hardened patchset
1604 antarus 1.94
1605     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1606     files/digest-hardened-sources-2.4.32-r2,
1607     files/digest-hardened-sources-2.4.32-r3,
1608     files/digest-hardened-sources-2.6.14-r8, Manifest:
1609     Fixing duff SHA256 digests: Bug # 131293
1610 johnm 1.93
1611 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1612    
1613     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1614     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1615     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1616     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1617     cleanup of old uneccessary sources
1618    
1619 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1620     fix digest
1621 johnm 1.92
1622     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1623    
1624     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1625     +hardened-sources-2.6.14-r8.ebuild:
1626     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1627 johnm 1.91
1628     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1629     Turning on gpg-signing again, and recomitting
1630 johnm 1.90
1631     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1632    
1633     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1634     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1635     +hardened-sources-2.6.16-r4.ebuild:
1636     Fix numerous security vulns
1637 solar 1.89
1638     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1639    
1640     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1641     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1642     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1643     - security bump for bug #112791. Removed old ebuilds
1644 johnm 1.88
1645     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1646    
1647     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1648     +hardened-sources-2.6.16-r3.ebuild:
1649     Removing silly localversion which I missed
1650 johnm 1.87
1651     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1652    
1653     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1654     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1655     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1656 johnm 1.86
1657     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1658    
1659     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1660     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1661     +hardened-sources-2.6.16-r2.ebuild:
1662     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1663     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1664 johnm 1.85
1665     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1666    
1667     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1668     +hardened-sources-2.6.16-r1.ebuild:
1669     Bumping to include ppc build fix and 2.6.16.3
1670 tsunam 1.84
1671     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1672     hardened-sources-2.6.14-r6.ebuild:
1673     Stable on x86; bug #127718
1674 johnm 1.83
1675     *hardened-sources-2.6.16 (31 Mar 2006)
1676    
1677     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1678     +hardened-sources-2.6.16.ebuild:
1679     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1680     2.6.16.1
1681 cryos 1.82
1682     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1683     hardened-sources-2.6.14-r6.ebuild:
1684     Stable on amd64, bug 127718.
1685 nixnut 1.81
1686     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1687     Stable on ppc. Bug #127718
1688 johnm 1.80
1689     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1690     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1691     -hardened-sources-2.6.14-r4.ebuild:
1692     Cleanup.
1693 johnm 1.79
1694     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1695    
1696     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1697     +hardened-sources-2.6.14-r6.ebuild:
1698     Fixes grsec policy recreation bug and adds a
1699     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1700 solar 1.78
1701     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1702     - stable on x86
1703 hansmi 1.77
1704     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1705     hardened-sources-2.6.14-r5.ebuild:
1706     Stable on ppc.
1707 johnm 1.76
1708     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1709    
1710     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1711     +hardened-sources-2.6.14-r5.ebuild:
1712     fixing every known exploit
1713 solar 1.75
1714     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1715    
1716     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1717     +hardened-sources-2.4.32-r2.ebuild:
1718     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1719 solar 1.74
1720     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1721    
1722     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1723     - version bump for new genpatches which fix up a few sec holes
1724 solar 1.73
1725     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1726    
1727     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1728     - revision bump to add misc vital linux kernel security patches.
1729 johnm 1.72
1730     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1731    
1732     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1733     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1734     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1735 johnm 1.71
1736     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1737     hardened-sources-2.6.14-r2.ebuild:
1738     making x86 & amd64 stable following testing.
1739 johnm 1.70
1740     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1741    
1742     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1743     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1744     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1745     network hooks.
1746 johnm 1.69
1747     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1748     hardened-sources-2.6.14-r1.ebuild:
1749     bumping to stable early for sec fix on x86 & amd64
1750 johnm 1.68
1751     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1752    
1753     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1754     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1755     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1756 solar 1.67
1757     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1758     - stable on x86 security bug #114227 CAN-2005-3257
1759 kang 1.66
1760     *hardened-sources-2.4.32 (19 Nov 2005)
1761    
1762     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1763     +hardened-sources-2.4.32.ebuild:
1764     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1765     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1766     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1767     rsbac >> /etc/portage/package.use)
1768 johnm 1.65
1769     *hardened-sources-2.6.14 (14 Nov 2005)
1770    
1771     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1772     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1773     Bumping 2.6 series to 2.6.14.2
1774 johnm 1.64
1775     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1776    
1777     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1778     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1779     +hardened-sources-2.6.13-r2.ebuild:
1780     Fixes minor build error in ppc.
1781 johnm 1.63
1782     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1783    
1784     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1785     +hardened-sources-2.6.13-r1.ebuild:
1786     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1787     2.6.13.4, fixes some major amd64 stability problems.
1788 johnm 1.62
1789     *hardened-sources-2.6.13 (16 Sep 2005)
1790    
1791     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1792     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1793     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1794     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1795     users should test this thoroughly.
1796 solar 1.61
1797     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1798     - stable on x86
1799 johnm 1.60
1800     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1801    
1802     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1803     +hardened-sources-2.6.11-r15.ebuild:
1804     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1805     grsec redefining curr_ip struct.
1806 solar 1.59
1807     *hardened-sources-2.4.31 (20 Jun 2005)
1808    
1809     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1810     initial import of 2.4.31 tree
1811 johnm 1.58
1812     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1813    
1814     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1815     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1816     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1817     naming scheme to abide by genpatches
1818 johnm 1.57
1819     *hardened-sources-2.6.11-r13 (18 May 2005)
1820    
1821     18 May 2005; John Mylchreest <johnm@gentoo.org>
1822     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1823     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1824     target. sorry about that. Fixes bug #93022
1825 johnm 1.56
1826     *hardened-sources-2.6.11-r12 (17 May 2005)
1827    
1828     17 May 2005; John Mylchreest <johnm@gentoo.org>
1829     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1830     +hardened-sources-2.6.11-r12.ebuild:
1831     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1832     merges in genpatches-base
1833 johnm 1.55
1834     *hardened-sources-2.6.11-r12 (17 May 2005)
1835    
1836     17 May 2005; John Mylchreest <johnm@gentoo.org>
1837     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1838     +hardened-sources-2.6.11-r12.ebuild:
1839     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1840     merges in genpatches-base
1841 solar 1.54
1842     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1843     -files/2.4.27-cmdline-race.patch,
1844     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1845     -files/2.4.28-grsec-binfmt_a.out.patch,
1846     -files/2.4.28-grsec-cmdline-race.patch,
1847     -files/2.4.28-selinux-binfmt_a.out.patch,
1848     -files/2.4.28-selinux-cmdline-race.patch,
1849     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1850     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1851     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1852     cleanup..
1853 solar 1.53
1854     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1855    
1856     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1857     - disable aout by default
1858 solar 1.52
1859     *hardened-sources-2.4.30 (18 Apr 2005)
1860    
1861     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1862     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1863     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1864     use
1865 tocharian 1.50
1866 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1867    
1868     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1869     +hardened-sources-2.4.29.ebuild:
1870     New hardened-patches-2.4-29.0 patchball.
1871     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1872    
1873     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1874    
1875     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1876     +hardened-sources-2.4.28-r5.ebuild:
1877     Added a fix for a PaX vulnerability.
1878    
1879     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1880 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1881     Stable on x86
1882 solar 1.49
1883     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1884     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1885     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1886     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1887     - fixed/added RDEPEND= in all kernel-2 ebuilds
1888 tocharian 1.48
1889     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1890    
1891     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1892     +hardened-sources-2.4.28-r4.ebuild:
1893     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1894     backport of neighbour hash updates.
1895 tocharian 1.47
1896     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1897     hardened-sources-2.4.28-r3.ebuild:
1898     Stable on x86
1899 tseng 1.46
1900     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1901    
1902     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1903     +hardened-sources-2.6.10-r3.ebuild:
1904     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1905     in 2005.0
1906 tocharian 1.45
1907     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1908     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1909     hardened-sources-2.4.28-r2.ebuild:
1910     Mark stable on x86
1911 tocharian 1.44
1912     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1913    
1914     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1915     +hardened-sources-2.4.28-r3.ebuild:
1916     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1917 tocharian 1.43
1918     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1919     hardened-sources-2.4.28.ebuild:
1920     Mark stable on x86.
1921 tocharian 1.42
1922     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1923    
1924     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1925     +hardened-sources-2.4.28-r2.ebuild:
1926     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1927     Mazinger for grsecurity patches as well.
1928 plasmaroo 1.41
1929     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1930    
1931     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1932     Security bump. Thank tocharian for rolling a new patchset...
1933 solar 1.40
1934     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1935     +files/2.4.28-grsec-cmdline-race.patch,
1936     +files/2.4.28-selinux-binfmt_a.out.patch,
1937     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1938     - Round up remaining security patches that appear to be missing in 2.4.28. -
1939     PaX standalone updated to current. hgpv=28.1
1940 solar 1.39
1941     *hardened-sources-2.4.28 (28 Nov 2004)
1942    
1943     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1944     security bump. Thank tocharian for rolling a new patchset
1945 scox 1.31
1946 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1947    
1948     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1949     +hardened-sources-2.4.27-r3.ebuild:
1950     Applies the new 2.4-27.2 patchball which updates
1951     GRSecurity to the 2.0.1 version.
1952    
1953 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1954    
1955     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1956     +hardened-sources-2.4.27-r2.ebuild:
1957     Version bump.
1958     This version uses the new 2.4-27.1 patchball which updates
1959     both the SELinux PaX hooks patch and the SELinux headers.
1960    
1961 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1962    
1963     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1964     +hardened-sources-2.4.27-r1.ebuild,
1965     -hardened-sources-2.4.27.ebuild,
1966     +files/2.4.27-cmdline-race.patch:
1967     Version bump, fix for cmdline race. See bug #59905.
1968    
1969     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1970    
1971     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1972     +hardened-sources-2.4.26-r6.ebuild,
1973     -hardened-sources-2.4.26-r5.ebuild,
1974     -hardened-sources-2.4.26-r4.ebuild,
1975     +files/2.4.26-cmdline-race.patch:
1976     Version bump, fix for cmdline race. See bug #59905.
1977    
1978 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1979    
1980     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1981     +hardened-sources-2.4.27.ebuild,
1982     +files/2.4.27-CAN-2004-0394.patch:
1983     Ported the patchball to the 2.4.27 kernel version.
1984    
1985 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1986    
1987     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1988     +hardened-sources-2.4.26-r5.ebuild:
1989 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1990 scox 1.34 It adds the following features:
1991     - Squashfs
1992     - Ebtables
1993     - Netdev random (core+drivers)
1994     - Watchdog Timer (WDT) fix.
1995    
1996 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1997    
1998     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1999     +hardened-sources-2.4.26-r4.ebuild,
2000     +files/2.4.26-CAN-2004-0415.patch,
2001     -hardened-sources-2.4.26-3:
2002     Version bump, fix for CAN 0415, see bug #59378.
2003    
2004 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
2005    
2006     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
2007     +hardened-sources-2.4.26-r3.ebuild,
2008     +files/2.4.26-CAN-2004-0497.patch,
2009     -hardened-sources-2.4.26-r2.ebuild:
2010     Version bump, fixed CAN 0497, see bug #56171.
2011    
2012 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
2013    
2014     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
2015 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
2016 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
2017     +files/2.4.26-CAN-2004-0535.patch,
2018     -hardened-sources-2.4.26-r1.ebuild:
2019     Fixes for both CAN 0495 and 0535, see bug #54976
2020 pvdabeel 1.27
2021 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
2022     hardened-sources-2.4.26-r1.ebuild:
2023     QA - fix use invocation
2024 scox 1.28
2025     *hardened-sources-2.4.26-r1 (22 June 2004)
2026    
2027     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
2028     +hardened-sources-2.4.26-r1.ebuild,
2029     +files/2.4.26-CAN-2004-0394.patch,
2030     +files/2.4.26-signal-race.patch,
2031     -hardened-sources-2.4.26.ebuild,
2032     -hardened-sources-2.4.24-r3.ebuild:
2033     Version bump for the CAN-2004-0394 issue and bug #53804
2034     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
2035    
2036    
2037 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
2038     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
2039     Masked hardened-sources-2.4.26.ebuild broken for ppc
2040    
2041     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
2042     hardened-sources-2.4.24-r3.ebuild:
2043     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
2044 plasmaroo 1.25
2045 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
2046    
2047     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
2048     +hardened-sources-2.4.26.ebuild:
2049     Updated hardened-sources for the 2.4.26 kernel
2050     Removed broken components, updated almost everything.
2051    
2052 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
2053    
2054     17 Apr 2004; <plasmaroo@gentoo.org>
2055     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
2056     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
2057     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
2058     +hardened-sources-2.4.24-r3.ebuild:
2059     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
2060     vulnerabilities. Old revisions removed.
2061 plasmaroo 1.24
2062     *hardened-sources-2.4.24-r2 (15 Apr 2004)
2063    
2064     15 Apr 2004; <plasmaroo@gentoo.org>
2065     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
2066     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
2067     Version bump for the CAN-2004-0109 issue; bug #47881.
2068 aliz 1.23
2069     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
2070     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
2071     Add eutils to inherit.
2072 plasmaroo 1.22
2073     *hardened-sources-2.4.24-r1 (19 Feb 2004)
2074    
2075     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
2076     files/hardened-sources-2.4.24.munmap.patch:
2077     Added the patch for the mremap/munmap vulnerability. Bug #42024.
2078 scox 1.19
2079 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
2080 scox 1.26
2081 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
2082     hardened-sources-2.4.24.ebuild:
2083     Version bump, updated most of the components.
2084     This release includes the following:
2085    
2086     - Hardened security
2087     - Netfilter patch-o-matic 20031219
2088     - FreeSWAN 2.04 & x509 1.4.8
2089     - EVMS 2.2.2
2090     - XFS 1.3.1
2091     - cryptoloop jari
2092     - grsecurity 2.0-rc4
2093     - SELinux
2094     - PaX 200402060000
2095     - PaX Obscurity 200308302223
2096     - Others...
2097    
2098     Neither -ck nor systrace are included anymore.
2099    
2100 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
2101    
2102     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
2103     hardened-sources-2.4.22-r2.ebuild:
2104 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
2105 scox 1.19
2106     *hardened-sources-2.4.22-r1 (02 Dec 2003)
2107 iggy 1.17
2108     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
2109 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
2110 iggy 1.16
2111     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
2112 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
2113     Version bump for the 'do_brk' vulnerability.
2114 iggy 1.15
2115     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
2116     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
2117     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
2118     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
2119 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
2120 frogger 1.14
2121     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
2122     hardened-sources-2.4.22.ebuild:
2123 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
2124     components. These are no longer handled in the kernel
2125     so this code was not necessary.
2126 frogger 1.13
2127     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
2128     New 2.4.22 based hardened-sources thanks to
2129     Phil West <p.west@computer.org>.
2130    
2131     These sources include:
2132 plasmaroo 1.18 - New SELinux API
2133     - Updated CK-base
2134     - Updated GRSec
2135     - Systrace
2136     - SuperFreeS/WAN 1.99.8
2137     - Propolice kernel build support
2138     - EVMS
2139     - Other various security related patches
2140 frogger 1.11
2141 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
2142    
2143     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
2144     Updated hardened-sources based on the 2.4.21 Linux kernel.
2145     This includes updates to most major components such as:
2146 plasmaroo 1.18 - ck-base-0306300059
2147     - selinux-2.4-2003071106
2148     - grsecurity-2.0-rc1
2149     - Updated IPTables patch-o-matic
2150     - Updated SuperFreeS/WAN
2151    
2152 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
2153     updated patch set ready for the 2.4.21 based kernel.
2154    
2155 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
2156     Initial import of hardened-sources-2.4.20-r4. This revision
2157     includes only a few changes, but one of these is an important
2158     security fix. It is recommended all users of hardened-sources
2159     upgrade to this release.
2160 plasmaroo 1.18
2161 frogger 1.11 - ioperm bug fix
2162     - fixed compilation failure when building without GRSec
2163 plasmaroo 1.18
2164 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
2165     due to time constraints, but is planned for inclusion in the near
2166     future.
2167 msterret 1.10
2168     *hardened-sources-2.4.20-r2 (12 Jun 2003)
2169    
2170     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
2171     hardened-sources-2.4.20-r3.ebuild:
2172 plasmaroo 1.18 Add Header...
2173 frogger 1.9
2174     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2175     hardened-sources-2.4.20-r3.ebuild:
2176     Removed warnings from ebuild. This kernel should be safe to
2177     use at this point.
2178 frogger 1.8
2179     *hardened-sources-2.4.20-r3 (08 Jun 2003)
2180    
2181     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2182     hardened-sources-2.4.20-r3.ebuild:
2183     New revision. Includes the following changes over -r2:
2184 plasmaroo 1.18
2185 frogger 1.8 - ck7-base (O(1), preempt, low latency)
2186     - Super FreeS/WAN 1.99.7rc2
2187     - PaX for the LSM/SELinux branch
2188     - GRSecurity 2.0-pre4 (role based access control)
2189     - Systrace 1.3
2190     - EXT3 fixes
2191     - EVMS 2.0.1
2192     - GCC 3.1+ compile optimizations
2193     - ProPolice kernel build support
2194     - Hashing table security fixes
2195 frogger 1.3
2196     *hardened-sources-2.4.20-r1 (09 Apr 2003)
2197 frogger 1.7
2198     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
2199     Initial import of hardened-sources-r2. This new
2200     ebuild includes many new performance and security
2201     related patches. As in -r1, it will patch in
2202     LSM/SELinux if "selinux" is in USE, otherwise it
2203     will patch in GRSecurity. The following patches
2204     are included in this revision:
2205 plasmaroo 1.18
2206 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
2207     (pulled from the base CK patch)
2208     - ptrace exploit patch for the LSM kernel
2209     (the GRSec patch already fixes this)
2210     - LSM 2.4-2003040709
2211     - SELinux 2.4-2003040709
2212     - Systrace v1.2
2213     - IPTables patch-o-matic base patches - 20030107
2214     - CryptoAPI 2.4.20.1 w/ loop-jari patch
2215     - Super FreeS/WAN 1.99.6.1
2216     - GRSecurity 1.9.9g
2217     - MPPE
2218     - EXT3 data journal fix
2219     - CIPE 1.5.4
2220 frogger 1.6
2221     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2222     hardened-sources-2.4.20-r1.ebuild, manifest:
2223 plasmaroo 1.18 Updated to install flask components correctly for selinux.
2224 frogger 1.5
2225     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2226     hardened-sources-2.4.20-r1.ebuild:
2227     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2228     is patched in instead. Ptrace patches for selinux have also been added. In
2229     either case, systrace support will be patched in as well.
2230 frogger 1.3
2231     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2232     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2233 plasmaroo 1.18 Revision bump for new sources.
2234 frogger 1.4
2235 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2236 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
2237 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2238 method 1.1
2239 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
2240    
2241 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2242     hardened-sources-2.4.20.ebuild:
2243 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20