/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.376 - (hide annotations) (download)
Fri Jan 7 23:35:11 2011 UTC (3 years, 11 months ago) by blueness
Branch: MAIN
Changes since 1.375: +8 -1 lines
Based on vanilla 2.6.36.2 + genpatches-2.6.36-8 + grsecurity-2.2.1-2.6.36.2-201101052002

(Portage version: 2.1.9.25/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 blueness 1.375 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.376 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.375 2011/01/07 23:28:12 blueness Exp $
4    
5     *hardened-sources-2.6.36-r8 (07 Jan 2011)
6    
7     07 Jan 2011; Anthony G. Basile <blueness@gentoo.org>
8     +hardened-sources-2.6.36-r8.ebuild:
9     Based on vanilla 2.6.36.2 + genpatches-2.6.36-8 +
10     grsecurity-2.2.1-2.6.36.2-201101052002
11 blueness 1.375
12     *hardened-sources-2.6.32-r33 (07 Jan 2011)
13    
14     07 Jan 2011; Anthony G. Basile <blueness@gentoo.org>
15     +hardened-sources-2.6.32-r33.ebuild:
16     Based on vanilla 2.6.32.27 + genpatches-2.6.32-29 +
17     grsecurity-2.2.1-2.6.32.27-201101052002
18 blueness 1.374
19     *hardened-sources-2.6.36-r7 (27 Dec 2010)
20    
21     27 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
22     +hardened-sources-2.6.36-r7.ebuild:
23     Based on vanilla 2.6.36.2 + genpatches-2.6.36-7 +
24     grsecurity-2.2.1-2.6.36.2-201012221906
25 blueness 1.373
26     *hardened-sources-2.6.32-r32 (27 Dec 2010)
27    
28     27 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
29     +hardened-sources-2.6.32-r32.ebuild:
30     Based on vanilla 2.6.32.27 + genpatches-2.6.32-29 +
31     grsecurity-2.2.1-2.6.32.27-201012182005
32 blueness 1.372
33     21 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
34     -hardened-sources-2.6.32-r24.ebuild, -hardened-sources-2.6.32-r25.ebuild,
35     -hardened-sources-2.6.32-r26.ebuild, -hardened-sources-2.6.32-r27.ebuild,
36     -hardened-sources-2.6.32-r29.ebuild, -hardened-sources-2.6.35-r4.ebuild,
37     -hardened-sources-2.6.35-r5.ebuild, -hardened-sources-2.6.35-r6.ebuild,
38     -hardened-sources-2.6.36.ebuild, -hardened-sources-2.6.36-r1.ebuild,
39     -hardened-sources-2.6.36-r2.ebuild, -hardened-sources-2.6.36-r4.ebuild:
40     Removed deprecated versions
41 blueness 1.371
42     20 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
43     hardened-sources-2.6.32-r31.ebuild, hardened-sources-2.6.36-r6.ebuild:
44     amd64, ppc64, x86 fast track stabilization. See CVE-2010-4258,
45     CVE-2010-3849, CVE-2010-3850
46 blueness 1.370
47     *hardened-sources-2.6.36-r6 (14 Dec 2010)
48    
49     14 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
50     +hardened-sources-2.6.36-r6.ebuild:
51     Based on vanilla 2.6.36.2 + genpatches-2.6.36-7 +
52     grsecurity-2.2.1-2.6.36.2-201012121726
53 blueness 1.369
54     *hardened-sources-2.6.32-r31 (14 Dec 2010)
55    
56     14 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
57     +hardened-sources-2.6.32-r31.ebuild:
58     Based on vanilla 2.6.32.27 + genpatches-2.6.32-29 +
59     grsecurity-2.2.1-2.6.32.27-201012130740
60 blueness 1.368
61     09 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
62     hardened-sources-2.6.32-r30.ebuild, hardened-sources-2.6.36-r5.ebuild:
63     Fixed bug #348238
64 blueness 1.367
65     *hardened-sources-2.6.36-r5 (09 Dec 2010)
66    
67     09 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
68     +hardened-sources-2.6.36-r5.ebuild:
69     Based on vanilla-2.6.36.1 + genpatches-2.6.36-6 +
70     grsecurity-2.2.1-2.6.36.1-201012040057
71 blueness 1.366
72     *hardened-sources-2.6.32-r30 (09 Dec 2010)
73    
74     09 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
75     +hardened-sources-2.6.32-r30.ebuild:
76     Based on vanilla-2.6.32.26 + genpatches-2.6.32-28 +
77     grsecurity-2.2.1-2.6.32.26-201012040057
78 blueness 1.365
79     *hardened-sources-2.6.36-r4 (02 Dec 2010)
80    
81     02 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
82     +hardened-sources-2.6.36-r4.ebuild:
83     Based on vanilla-2.6.36.1 + genpatches-.2.6.36-5 +
84     grsecurity-2.2.1-2.6.36.1-201011280939
85 blueness 1.364
86     *hardened-sources-2.6.32-r29 (02 Dec 2010)
87    
88     02 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
89     +hardened-sources-2.6.32-r29.ebuild:
90     Based on vanilla-2.6.32.26 + genpatches-2.6.32-27 +
91     grsecurity-2.2.1-2.6.32.26-201011280939
92 blueness 1.363
93     30 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
94     -hardened-sources-2.6.32-r28.ebuild, -hardened-sources-2.6.36-r3.ebuild:
95     Removed because of multiple breakage (pulseaudio, install, etc).
96 blueness 1.362
97     *hardened-sources-2.6.36-r3 (29 Nov 2010)
98    
99     29 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
100     +hardened-sources-2.6.36-r3.ebuild:
101     hardened-sources-2.6.36-r3 based on 2.6.36.1 + genpatches +
102     grsecurity-2.2.1-2.6.36.1-201011261834
103 blueness 1.361
104     *hardened-sources-2.6.32-r28 (29 Nov 2010)
105    
106     29 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
107     +hardened-sources-2.6.32-r28.ebuild:
108     hardened-sources-2.6.32-r28 based on 2.6.32.26 + genpatches +
109     grsecurity-2.2.1-2.6.32.26-201011261834
110 robbat2 1.360
111     28 Nov 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
112     Update Manifest for deblob 2.6.36.
113 blueness 1.359
114     *hardened-sources-2.6.36-r2 (18 Nov 2010)
115    
116     18 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
117     +hardened-sources-2.6.36-r2.ebuild:
118     hardened-sources-2.6.36-r2 based on 2.6.36 + genpatches +
119     grsecurity-2.2.0-2.6.36-201011151726
120 blueness 1.358
121     *hardened-sources-2.6.32-r27 (18 Nov 2010)
122    
123     18 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
124     +hardened-sources-2.6.32-r27.ebuild:
125     hardened-sources-2.6.32-r27 based on 2.6.32.25 + genpatches +
126     grsecurity-2.2.0-2.6.32.25-201011151726
127 blueness 1.357
128     *hardened-sources-2.6.36-r1 (14 Nov 2010)
129    
130     14 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
131     +hardened-sources-2.6.36-r1.ebuild:
132     hardened-sources-2.6.36-r1 based on 2.6.36 + genpatches +
133     grsecurity-2.2.0-2.6.36-201011131640
134 blueness 1.356
135     *hardened-sources-2.6.32-r26 (14 Nov 2010)
136    
137     14 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
138     +hardened-sources-2.6.32-r26.ebuild:
139     hardened-sources-2.6.32-r26 based on 2.6.32.25 + genpatches +
140     grsecurity-2.2.0-2.6.32.25-201011131640
141 blueness 1.355
142     *hardened-sources-2.6.36 (07 Nov 2010)
143    
144     07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
145     +hardened-sources-2.6.36.ebuild:
146     hardened-sources-2.6.36 based on 2.6.36 + genpatches +
147     grsecurity-2.2.0-2.6.36-201011062054
148 blueness 1.354
149     *hardened-sources-2.6.35-r7 (07 Nov 2010)
150    
151     07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
152     +hardened-sources-2.6.35-r7.ebuild:
153     hardened-sources-2.6.35-r7 based on 2.6.35.8 + genpatches +
154     grsecurity-2.2.0-2.6.35.8-201011062054
155 blueness 1.353
156     *hardened-sources-2.6.32-r25 (07 Nov 2010)
157    
158     07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
159     +hardened-sources-2.6.32-r25.ebuild:
160     hardened-sources-2.6.32-r25 based on 2.6.32.25 + genpatches +
161     grsecurity-2.2.0-2.6.32.25-201011062054
162 blueness 1.352
163     *hardened-sources-2.6.35-r6 (02 Nov 2010)
164     *hardened-sources-2.6.32-r24 (02 Nov 2010)
165    
166     02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
167     +hardened-sources-2.6.32-r24.ebuild, +hardened-sources-2.6.35-r6.ebuild:
168     hardened-sources-2.6.32-r24 based on 2.6.32.25 + genpatches +
169     grsecurity-2.2.0-2.6.32.25-201010311944
170     hardened-sources-2.6.35-r6 based on 2.6.35.8 + genpatches +
171     grsecurity-2.2.0-2.6.35.8-201010311944
172 blueness 1.351
173     02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
174     hardened-sources-2.6.32-r23.ebuild:
175     ppc64 stable, bug #343535
176 blueness 1.350
177     *hardened-sources-2.6.35-r5 (24 Oct 2010)
178     *hardened-sources-2.6.32-r23 (24 Oct 2010)
179    
180     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
181     +hardened-sources-2.6.32-r23.ebuild, +hardened-sources-2.6.35-r5.ebuild:
182     hardened-sources-2.6.32-r23 based on 2.6.32.24 + genpatches +
183     grsec-2.2.0-2.6.32.24-201010232009
184     hardened-sources-2.6.35-r5 based on 2.6.35.7 + genpatches +
185     grsec-2.2.0-2.6.35.7-201010232009
186 blueness 1.349
187     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
188     hardened-sources-2.6.32-r22.ebuild:
189     Broken on ppc/ppc64, bug #341915#c6
190 blueness 1.348
191     24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
192     -hardened-sources-2.6.32-r16.ebuild, -hardened-sources-2.6.32-r17.ebuild,
193     -hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.32-r19.ebuild,
194     -hardened-sources-2.6.32-r20.ebuild, -hardened-sources-2.6.32-r21.ebuild,
195     -hardened-sources-2.6.34-r4.ebuild, -hardened-sources-2.6.34-r5.ebuild,
196     -hardened-sources-2.6.35.ebuild, -hardened-sources-2.6.35-r1.ebuild,
197     -hardened-sources-2.6.35-r2.ebuild, -hardened-sources-2.6.35-r3.ebuild:
198     Removing vulnerable kernels where possible, bug #341801
199 blueness 1.347
200     21 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
201     hardened-sources-2.6.32-r22.ebuild:
202     x86 stable, bug #341915
203 blueness 1.346
204     20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
205     hardened-sources-2.6.32-r22.ebuild:
206     amd64 stable, bug #341915
207 blueness 1.345
208     *hardened-sources-2.6.35-r4 (20 Oct 2010)
209     *hardened-sources-2.6.32-r22 (20 Oct 2010)
210    
211     20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
212     +hardened-sources-2.6.32-r22.ebuild, +hardened-sources-2.6.35-r4.ebuild:
213     hardened-sources-2.6.32-r22 based on 2.6.32.24 + genpatches +
214     grsec-2.2.0-2.6.32.24-201010191911
215     hardened-sources-2.6.35-r4 based on 2.6.35.7 + genpatches +
216     grsec-2.2.0-2.6.35.7-201010191911
217     Addresses security bug #341801
218 blueness 1.344
219     *hardened-sources-2.6.35-r3 (16 Oct 2010)
220     *hardened-sources-2.6.32-r21 (16 Oct 2010)
221    
222     16 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
223     +hardened-sources-2.6.32-r21.ebuild, +hardened-sources-2.6.35-r3.ebuild:
224     hardened-sources-2.6.32-r21 based on 2.6.32.24 + genpatches +
225     grsec-2.2.0-2.6.32.24-201010121028
226     hardened-sources-2.6.35-r3 based on 2.6.35.7 + genpatches +
227     grsec-2.2.0-2.6.35.7-201010121028
228 blueness 1.343
229     *hardened-sources-2.6.35-r2 (07 Oct 2010)
230    
231     07 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
232     +hardened-sources-2.6.35-r2.ebuild:
233     hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches +
234     grsec-2.2.0-2.6.35.7-201010021153
235 blueness 1.342
236     *hardened-sources-2.6.32-r20 (06 Oct 2010)
237    
238     06 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
239     +hardened-sources-2.6.32-r20.ebuild:
240     hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches +
241     grsec-2.2.0-2.6.32.24-201010021153
242 blueness 1.341
243     *hardened-sources-2.6.35-r1 (30 Sep 2010)
244     *hardened-sources-2.6.32-r19 (30 Sep 2010)
245    
246     30 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
247     +hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild:
248     hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches +
249     grsec-2.2.0-2.6.32.23-201009272133
250     hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches +
251     grsec-2.2.0-2.6.35.6-201009281623
252 blueness 1.340
253     *hardened-sources-2.6.35 (28 Sep 2010)
254    
255     28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
256     +hardened-sources-2.6.35.ebuild:
257     hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
258 blueness 1.339
259     21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
260     -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
261     hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
262     -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
263     Fast track stabilization. See bug #338273. Removed older versions.
264 blueness 1.338
265     *hardened-sources-2.6.34-r6 (17 Sep 2010)
266     *hardened-sources-2.6.32-r18 (17 Sep 2010)
267    
268     17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
269     +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
270     hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
271     grsec-2.2.0-2.6.32.21-201009162222
272     hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
273     grsec-2.2.0-2.6.34.7-201009162222
274     Addresses IA32 syscall exploit.
275 blueness 1.337
276     *hardened-sources-2.6.34-r5 (15 Sep 2010)
277     *hardened-sources-2.6.32-r17 (15 Sep 2010)
278    
279     15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
280     +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
281     hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
282     grsec-2.2.0-2.6.32.21-201009130811
283     hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
284     grsec-2.2.0-2.6.34.6-201009130754
285 blueness 1.336
286     *hardened-sources-2.6.34-r4 (07 Sep 2010)
287     *hardened-sources-2.6.32-r16 (07 Sep 2010)
288    
289     07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
290     +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
291     hardened-sources-2.6.32-r16 based on 2.6.32.21 +
292     grsec-2.2.0-2.6.32.21-201009032133
293     hardened-sources-2.6.34-r4 based on 2.6.34.6 +
294     grsec-2.2.0-2.6.34.6-201009041352
295 blueness 1.335
296     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
297     hardened-sources-2.6.32-r15 based on 2.6.32.21 +
298     grsec-2.2.0-2.6.32.21-201008292122
299     hardened-sources-2.6.34-r3 based on 2.6.34.6 +
300     grsec-2.2.0-2.6.34.6-201008292122
301 blueness 1.334
302     *hardened-sources-2.6.34-r3 (02 Sep 2010)
303     *hardened-sources-2.6.32-r15 (02 Sep 2010)
304    
305     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
306     -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
307     -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
308     +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
309     +hardened-sources-2.6.34-r3.ebuild:
310     Bumps and remove deprecated versions
311 blueness 1.333
312     *hardened-sources-2.6.34-r2 (21 Aug 2010)
313    
314     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
315     +hardened-sources-2.6.34-r2.ebuild:
316     Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
317 blueness 1.332
318     *hardened-sources-2.6.32-r14 (21 Aug 2010)
319    
320     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
321     +hardened-sources-2.6.32-r14.ebuild:
322     Based on vanilla 2.6.32.19 + genpatches +
323     grsec-2.2.0-2.6.32.19-201008131840
324 blueness 1.331
325     *hardened-sources-2.6.32-r13 (14 Aug 2010)
326    
327     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
328     +hardened-sources-2.6.32-r13.ebuild:
329     Based on vanilla 2.6.32.18 + genpatches +
330     grsecurity-2.2.0-2.6.32.18-201008112233
331 robbat2 1.330
332     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
333     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
334 blueness 1.329
335     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
336     hardened-sources-2.6.32-r9.ebuild:
337     Stable ppc64. Bug #326885
338 blueness 1.328
339     *hardened-sources-2.6.32-r12 (24 Jul 2010)
340    
341     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
342     +hardened-sources-2.6.32-r12.ebuild:
343     Parallels fix incorporated into hardened-sources-2.6.34-r1
344 blueness 1.327
345     *hardened-sources-2.6.34-r1 (24 Jul 2010)
346    
347     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
348     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
349     Fixes bug #328275
350 chainsaw 1.326
351     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
352     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
353     on gentoo-dev.
354 jer 1.325
355     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
356     Correct mail address.
357 blueness 1.324
358     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
359     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
360     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
361     -hardened-sources-2.6.32-r8.ebuild:
362     Removing outdated releases
363 fauli 1.323
364     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
365     hardened-sources-2.6.32-r9.ebuild:
366     stable x86, bug 326885
367 blueness 1.322
368     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
369     -hardened-sources-2.6.32-r7.ebuild:
370     Removed for security. Bug #325573
371 blueness 1.321
372     *hardened-sources-2.6.34 (13 Jul 2010)
373    
374     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
375     +hardened-sources-2.6.34.ebuild:
376     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
377 blueness 1.320
378     *hardened-sources-2.6.32-r11 (13 Jul 2010)
379    
380     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
381     +hardened-sources-2.6.32-r11.ebuild:
382     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
383 chainsaw 1.319
384     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
385     Marked stable on AMD64 as requested by Anthony G. Basile
386     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
387     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
388 blueness 1.318
389     *hardened-sources-2.6.32-r10 (30 Jun 2010)
390    
391     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
392     +hardened-sources-2.6.32-r10.ebuild:
393     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
394 blueness 1.317
395     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
396     Added myself to the metadata.xml
397 chainsaw 1.316
398     *hardened-sources-2.6.32-r9 (11 Jun 2010)
399    
400     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
401     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
402 chainsaw 1.315
403     *hardened-sources-2.6.32-r8 (01 Jun 2010)
404    
405     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
406     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
407 chainsaw 1.314
408     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
409     Update SRC_URI to point to mirror network now that the distfile has
410     propagated.
411 chainsaw 1.313
412     *hardened-sources-2.6.32-r7 (26 May 2010)
413    
414     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
415     metadata.xml:
416     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
417     Summers.
418 robbat2 1.312
419     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
420     Update Manifest for deblob support in kernel-2 eclass.
421 nixnut 1.311
422     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
423     ppc stable
424 gengor 1.310
425     29 May 2009; Gordon Malm <gengor@gentoo.org>
426     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
427     Stable amd64/x86 and remove old.
428 gengor 1.309
429     *hardened-sources-2.6.29 (25 May 2009)
430    
431     25 May 2009; Gordon Malm <gengor@gentoo.org>
432     +hardened-sources-2.6.29.ebuild:
433     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
434     release candidates.
435 gengor 1.308
436     *hardened-sources-2.6.28-r9 (25 May 2009)
437    
438     25 May 2009; Gordon Malm <gengor@gentoo.org>
439     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
440     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
441 gengor 1.307
442     *hardened-sources-2.6.28-r8 (18 May 2009)
443    
444     18 May 2009; Gordon Malm <gengor@gentoo.org>
445     +hardened-sources-2.6.28-r8.ebuild:
446     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
447     and #262862 among others.
448 gengor 1.306
449     01 May 2009; Gordon Malm <gengor@gentoo.org>
450     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
451     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
452     Remove unnecessary mirror://gentoo from SRC_URI.
453 nixnut 1.305
454     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
455     ppc stable
456 gengor 1.304
457     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
458     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
459     Stable amd64/x86 and remove old.
460 gengor 1.303
461     *hardened-sources-2.6.28-r7 (27 Mar 2009)
462    
463     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
464     +hardened-sources-2.6.28-r7.ebuild:
465     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
466 gengor 1.302
467     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
468     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
469     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
470     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
471     Stable amd64/x86 and remove old versions.
472 nixnut 1.301
473     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
474     ppc stable
475 gengor 1.300
476     *hardened-sources-2.6.28-r6 (21 Mar 2009)
477    
478     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
479     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
480     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
481 gengor 1.299
482     *hardened-sources-2.6.28-r5 (20 Mar 2009)
483    
484     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
485     +hardened-sources-2.6.28-r5.ebuild:
486     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
487 gengor 1.298
488     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
489     hardened-sources-2.6.28-r4.ebuild:
490     Stable amd64/x86.
491 gengor 1.297
492     *hardened-sources-2.6.28-r4 (18 Mar 2009)
493    
494     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
495     +hardened-sources-2.6.28-r4.ebuild:
496     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
497     compilation with CPA_DEBUG and more.
498 gengor 1.296
499     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
500     hardened-sources-2.6.28-r3.ebuild:
501     Quick stable amd64/x86.
502 gengor 1.295
503     *hardened-sources-2.6.28-r3 (15 Mar 2009)
504    
505     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
506     +hardened-sources-2.6.28-r3.ebuild:
507     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
508 nixnut 1.294
509     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
510     ppc stable
511 gengor 1.293
512     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
513     hardened-sources-2.6.28-r2.ebuild:
514     Stable amd64/x86.
515 gengor 1.292
516     *hardened-sources-2.6.28-r2 (11 Mar 2009)
517    
518     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
519     +hardened-sources-2.6.28-r2.ebuild:
520     Version bump bringing in latest grsecurity patch.
521 gengor 1.291
522     *hardened-sources-2.6.28-r1 (09 Mar 2009)
523    
524     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
525     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
526     Version bump and remove old.
527 nixnut 1.290
528     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
529     ppc stable
530 gengor 1.289
531     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
532     hardened-sources-2.6.27-r8.ebuild:
533     Remove amd64 testing keyword, bug 256226.
534 gengor 1.288
535     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
536     hardened-sources-2.6.27-r8.ebuild:
537     Revert amd64 stable, bug #256226.
538 gengor 1.287
539     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
540     hardened-sources-2.6.27-r8.ebuild:
541     Stable on amd64/x86.
542 gengor 1.286
543     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
544     -hardened-sources-2.6.27-r6.ebuild:
545     Remove old 2.6.27 release.
546 gengor 1.285
547     *hardened-sources-2.6.27-r8 (24 Feb 2009)
548    
549     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
550     +hardened-sources-2.6.27-r8.ebuild:
551     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
552     and probably more.
553 nixnut 1.284
554     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
555     ppc stable
556 gengor 1.283
557     *hardened-sources-2.6.28 (25 Jan 2009)
558    
559     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
560     +hardened-sources-2.6.28.ebuild:
561     Initial 2.6.28 release.
562 gengor 1.282
563     *hardened-sources-2.6.27-r7 (25 Jan 2009)
564    
565     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
566     +hardened-sources-2.6.27-r7.ebuild:
567     Bump to Linux 2.6.27.13.
568 gengor 1.281
569     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
570     hardened-sources-2.6.26-r9.ebuild:
571     Stable amd64/x86.
572 gengor 1.280
573     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
574     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
575     -hardened-sources-2.6.27-r5.ebuild:
576     Remove problem versions.
577 gengor 1.279
578     *hardened-sources-2.6.27-r6 (24 Jan 2009)
579    
580     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
581     +hardened-sources-2.6.27-r6.ebuild:
582     Revert PaX test29 to test30 changes. Fixes bug 256226.
583 gengor 1.277
584     *hardened-sources-2.6.27-r5 (24 Jan 2009)
585    
586     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
587     +hardened-sources-2.6.27-r5.ebuild:
588 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
589 gengor 1.277 254843.
590 gengor 1.276
591     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
592     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
593     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
594     Remove problem versions.
595 nixnut 1.275
596     23 Jan 2009; nixnut <nixnut@gentoo.org>
597     hardened-sources-2.6.25-r13.ebuild:
598     ppc stable
599 gengor 1.274
600     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
601     hardened-sources-2.6.25-r13.ebuild:
602     Fasttrack stable amd64/x86.
603 gengor 1.273
604     *hardened-sources-2.6.26-r9 (21 Jan 2009)
605    
606     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
607     +hardened-sources-2.6.26-r9.ebuild:
608 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
609 gengor 1.272
610     *hardened-sources-2.6.25-r13 (20 Jan 2009)
611    
612     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
613     +hardened-sources-2.6.25-r13.ebuild:
614 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
615 nixnut 1.271
616     20 Jan 2009; nixnut <nixnut@gentoo.org>
617     hardened-sources-2.6.25-r12.ebuild:
618     ppc stable
619 gengor 1.270
620     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
621     hardened-sources-2.6.25-r12.ebuild:
622     Stable amd64/x86.
623 gengor 1.269
624     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
625     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
626     -hardened-sources-2.6.27-r2.ebuild:
627     Clean out old versions.
628 gengor 1.268
629     *hardened-sources-2.6.27-r4 (14 Jan 2009)
630     *hardened-sources-2.6.26-r8 (14 Jan 2009)
631     *hardened-sources-2.6.25-r12 (14 Jan 2009)
632    
633     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
634     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
635     +hardened-sources-2.6.27-r4.ebuild:
636     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
637     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
638     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
639     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
640 nixnut 1.267
641     15 Dec 2008; nixnut <nixnut@gentoo.org>
642     hardened-sources-2.6.25-r11.ebuild:
643     Stable on ppc
644 gengor 1.266
645     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
646     hardened-sources-2.6.25-r11.ebuild:
647     Stable amd64/x86.
648 gengor 1.265
649     *hardened-sources-2.6.27-r3 (07 Dec 2008)
650    
651     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
652     +hardened-sources-2.6.27-r3.ebuild:
653     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
654     Fixes bug #248754, #249729 and #246607.
655 gengor 1.264
656     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
657     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
658     Remove old versions.
659 gengor 1.262
660     *hardened-sources-2.6.26-r7 (03 Dec 2008)
661     *hardened-sources-2.6.25-r11 (03 Dec 2008)
662    
663 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
664     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
665 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
666     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
667     Both include many backports from 2.6.27.{6,7} -stable releases.
668 gengor 1.261
669     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
670     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
671     Remove versions broken on ARCHes != x86/amd64.
672 gengor 1.260
673     *hardened-sources-2.6.27-r2 (24 Nov 2008)
674    
675     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
676     +hardened-sources-2.6.27-r2.ebuild:
677     Bump to Linux 2.6.27.7 and latest grsecurity patch.
678 gengor 1.259
679     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
680     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
681     Remove old versions.
682 gengor 1.258
683     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
684     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
685     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
686 nixnut 1.257
687     16 Nov 2008; nixnut <nixnut@gentoo.org>
688     hardened-sources-2.6.25-r10.ebuild:
689     Stable on ppc
690 gengor 1.256
691     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
692     hardened-sources-2.6.25-r10.ebuild:
693     Stable amd64/x86.
694 gengor 1.255
695     *hardened-sources-2.6.26-r6 (12 Nov 2008)
696    
697     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
698     +hardened-sources-2.6.26-r6.ebuild:
699     Bump to Linux 2.6.26.8 and fix security bug #245650.
700 gengor 1.254
701     *hardened-sources-2.6.25-r10 (12 Nov 2008)
702    
703     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
704     +hardened-sources-2.6.25-r10.ebuild:
705     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
706 gengor 1.253
707     *hardened-sources-2.6.27-r1 (09 Nov 2008)
708    
709     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
710     +hardened-sources-2.6.27-r1.ebuild:
711     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
712 gengor 1.252
713     *hardened-sources-2.6.27 (04 Nov 2008)
714    
715     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
716     +hardened-sources-2.6.27.ebuild:
717     Initial 2.6.27 release.
718 gengor 1.251
719     *hardened-sources-2.6.26-r5 (03 Nov 2008)
720    
721     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
722     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
723     +hardened-sources-2.6.26-r5.ebuild:
724     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
725     Clean out some old versions.
726 nixnut 1.250
727     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
728     Stable on ppc
729 gengor 1.249
730     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
731     hardened-sources-2.6.25-r9.ebuild:
732     Stable on amd64/x86.
733 gengor 1.248
734     *hardened-sources-2.6.25-r9 (26 Oct 2008)
735    
736     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
737     +hardened-sources-2.6.25-r9.ebuild:
738     Update to Linux 2.6.25.19
739 nixnut 1.247
740     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
741     Stable on ppc
742 gengor 1.246
743     *hardened-sources-2.6.26-r4 (14 Oct 2008)
744    
745     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
746     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
747     Update to latest grsecurity patch, fixing building of non-modular kernels.
748 gengor 1.245
749     *hardened-sources-2.6.26-r3 (12 Oct 2008)
750    
751     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
752     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
753     +hardened-sources-2.6.26-r3.ebuild:
754     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
755     2.6.26-r1: Removed.
756     2.6.25-r8: Stable amd64/x86.
757 gengor 1.244
758     *hardened-sources-2.6.25-r8 (09 Oct 2008)
759    
760     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
761     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
762     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
763     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
764 nixnut 1.243
765     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
766     Stable on ppc
767 gengor 1.242
768     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
769     hardened-sources-2.6.25-r7.ebuild:
770     Stable amd64/x86.
771 gengor 1.241
772     *hardened-sources-2.6.26-r2 (13 Sep 2008)
773    
774     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
775     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
776     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
777     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
778 gengor 1.240
779     *hardened-sources-2.6.25-r7 (13 Sep 2008)
780    
781     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
782     +hardened-sources-2.6.25-r7.ebuild:
783     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
784 gengor 1.239
785     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
786     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
787     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
788     hardened-sources-2.6.26-r1.ebuild:
789     Update DESCRIPTION and HGPV_URI.
790 gengor 1.238
791     *hardened-sources-2.6.25-r6 (09 Sep 2008)
792    
793     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
794     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
795     2.6.25-r6: Update to Linux 2.6.25.17.
796     2.6.24-r3: Removed.
797 gengor 1.237
798     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
799     hardened-sources-2.6.25-r5.ebuild:
800     Stable on amd64/x86
801 gengor 1.236
802     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
803     Update my email address.
804 nixnut 1.235
805     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
806     stable on ppc
807 battousai 1.234
808     *hardened-sources-2.6.26-r1 (23 Aug 2008)
809     *hardened-sources-2.6.25-r5 (23 Aug 2008)
810    
811     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
812     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
813     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
814     +hardened-sources-2.6.26-r1.ebuild:
815     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
816     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
817     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
818     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
819     (gengor).
820 solar 1.233
821     *hardened-sources-2.6.26 (18 Aug 2008)
822     *hardened-sources-2.6.25-r4 (18 Aug 2008)
823    
824     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
825     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
826     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
827     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
828     2.6.25-r2: Removed.
829 tove 1.232
830     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
831     Remove phreak from metadata.xml (#96398)
832 solar 1.231
833     *hardened-sources-2.6.25-r3 (31 Jul 2008)
834    
835     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
836     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
837     +hardened-sources-2.6.25-r3.ebuild:
838     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
839     fixes, including security bug #231750.
840 nixnut 1.230
841     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
842     Stable on ppc
843 solar 1.229
844     *hardened-sources-2.6.25-r2 (05 Jul 2008)
845    
846     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
847     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
848     +hardened-sources-2.6.25-r2.ebuild:
849     2.6.23-r4: Stable x86/amd64
850     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
851     2.6.23-r{11,12}: Removed due to multiple vulns.
852     (gengor & kerframil)
853 nixnut 1.228
854     04 Jul 2008; nixnut <nixnut@gentoo.org>
855     hardened-sources-2.6.23-r13.ebuild:
856     Stable on ppc
857 solar 1.227
858     *hardened-sources-2.6.25-r1 (30 Jun 2008)
859    
860     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
861     +hardened-sources-2.6.25-r1.ebuild:
862     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
863     grsecurity release. 2.6.23-r13: x86/amd64 stable
864 solar 1.226
865     *hardened-sources-2.6.25 (17 Jun 2008)
866     *hardened-sources-2.6.24-r3 (17 Jun 2008)
867     *hardened-sources-2.6.23-r13 (17 Jun 2008)
868    
869     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
870     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
871     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
872     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
873     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
874     2.6.25: Initial 2.6.25 release.
875 solar 1.225
876     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
877     - fasttrack to stable x86/amd64
878 swegener 1.224
879     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
880     Fix broken digest for linux-2.6.24.tar.bz2.
881 solar 1.223
882     *hardened-sources-2.6.24-r2 (11 May 2008)
883     *hardened-sources-2.6.23-r12 (11 May 2008)
884    
885     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
886     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
887     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
888     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
889     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
890     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
891     security bugs 219901, 220691, 220975, 220979, 221123. New
892     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
893     should be removed as far as I'm concerned, everything else remove due to
894     vulnerable to numerous security bugs or brokeness.
895 nixnut 1.222
896     10 May 2008; nixnut <nixnut@gentoo.org>
897     hardened-sources-2.6.23-r11.ebuild:
898     Stable on ppc
899 solar 1.221
900     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
901     - -r11 stable on x86/amd64
902 solar 1.220
903     *hardened-sources-2.6.23-r11 (01 May 2008)
904    
905     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
906     - version bump to fix ulgy linux bugs
907 phreak 1.219
908     *hardened-sources-2.6.24-r1 (30 Apr 2008)
909    
910     30 Apr 2008; Christian Heim <phreak@gentoo.org>
911     +hardened-sources-2.6.24-r1.ebuild:
912     Revision bump (thanks to Kerin and Gordon, again), pulling
913     genpatches-2.6.24-7, solving #219089. Additionally contains further security
914     fixes plus some minor updates.
915 phreak 1.218
916     *hardened-sources-2.6.23-r10 (30 Apr 2008)
917    
918     30 Apr 2008; Christian Heim <phreak@gentoo.org>
919     +hardened-sources-2.6.23-r10.ebuild:
920     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
921     Additional contains "various other fixes".
922 phreak 1.217
923     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
924     Update the longdescription in metadata, thanks to Gordon Malm.
925 nixnut 1.216
926     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
927     Stable on ppc wrt bug #213255
928 solar 1.215
929     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
930     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
931     - stable on x86/amd64 per request. Removed obsolete ebuilds
932 phreak 1.214
933     *hardened-sources-2.6.24 (07 Apr 2008)
934    
935     07 Apr 2008; Christian Heim <phreak@gentoo.org>
936     +hardened-sources-2.6.24.ebuild:
937     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
938     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
939     for the many contributions and their continued effort in #216612) based on
940     2.6.24 and genpatches-2.6.24-5.
941    
942     The current ebuild/patchset contains these things:
943     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
944     * Introduces bespoke server and workstation oriented security levels
945     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
946 phreak 1.213
947     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
948     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
949     maintaining it).
950 phreak 1.212
951     24 Mar 2008; Christian Heim <phreak@gentoo.org>
952     hardened-sources-2.4.35-r2.ebuild:
953     Fixing SRC_URI for 2.4.35-r2.
954 phreak 1.211
955     *hardened-sources-2.6.23-r9 (22 Mar 2008)
956    
957     22 Mar 2008; Christian Heim <phreak@gentoo.org>
958     +hardened-sources-2.6.23-r9.ebuild:
959     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
960     * Change the default GIDs for some grsecurity options
961     * Revamp the Hardened [Gentoo] security level and make it the default level
962     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
963     * Fix a recursive lock -- call to capable() within ptrace_attach()
964     * Fix bug that allows audit and iscsi operations to be controlled via netlink
965 solar 1.210
966     *hardened-sources-2.6.23-r8 (27 Feb 2008)
967    
968     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
969     - version bump from Kerin Millar bug 210026
970 solar 1.209
971     17 Feb 2008; <solar@gentoo.org> metadata.xml,
972     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
973     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
974     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
975     - stable on x86 and remove old ebuilds
976 solar 1.207
977     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
978 solar 1.208 - stable on amd64 per request of amd64 lead
979 solar 1.206
980     *hardened-sources-2.6.23-r7 (11 Feb 2008)
981    
982     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
983     - version bump from kerin.millar
984     Changes:
985    
986     * Bump to genpatches-base-2.6.23-9
987     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
988     * Disables COMPAT_VDSO in x86/defconfig
989     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
990 phreak 1.205
991     25 Jan 2008; Christian Heim <phreak@gentoo.org>
992     -hardened-sources-2.6.22-r8.ebuild:
993     Cleaning up old versions.
994 phreak 1.204
995     *hardened-sources-2.6.23-r6 (25 Jan 2008)
996    
997     25 Jan 2008; Christian Heim <phreak@gentoo.org>
998     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
999     Revision bump, pulling in the latest genpatches.
1000 phreak 1.203
1001     *hardened-sources-2.6.23-r5 (24 Dec 2007)
1002    
1003     24 Dec 2007; Christian Heim <phreak@gentoo.org>
1004     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
1005     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
1006     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
1007     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
1008 phreak 1.202
1009     24 Dec 2007; Christian Heim <phreak@gentoo.org>
1010     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
1011     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
1012     -hardened-sources-2.6.23-r3.ebuild:
1013     Cleaning out some unused, old versions.
1014 phreak 1.201
1015     24 Dec 2007; Christian Heim <phreak@gentoo.org>
1016     hardened-sources-2.6.23-r4.ebuild:
1017     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
1018     in the tree for long, but there isn't much of a difference between this and
1019     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
1020 phreak 1.200
1021     *hardened-sources-2.6.23-r4 (23 Dec 2007)
1022    
1023     23 Dec 2007; Christian Heim <phreak@gentoo.org>
1024     +hardened-sources-2.6.23-r4.ebuild:
1025     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
1026 phreak 1.199
1027     *hardened-sources-2.6.23-r3 (04 Dec 2007)
1028    
1029     04 Dec 2007; Christian Heim <phreak@gentoo.org>
1030     +hardened-sources-2.6.23-r3.ebuild:
1031     Revision bump, pulling in 2.6.23.9.
1032 phreak 1.198
1033     *hardened-sources-2.6.23-r2 (25 Nov 2007)
1034    
1035     25 Nov 2007; Christian Heim <phreak@gentoo.org>
1036     +hardened-sources-2.6.23-r2.ebuild:
1037     Updated patchset, thanks to solar.
1038 phreak 1.197
1039     *hardened-sources-2.6.23-r1 (31 Oct 2007)
1040    
1041     31 Oct 2007; Christian Heim <phreak@gentoo.org>
1042     +hardened-sources-2.6.23-r1.ebuild:
1043     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
1044 solar 1.196
1045     29 Oct 2007; <solar@gentoo.org> metadata.xml:
1046     - update metadata.xml
1047 phreak 1.195
1048     25 Oct 2007; Christian Heim <phreak@gentoo.org>
1049     hardened-sources-2.6.22-r8.ebuild:
1050     Marking 2.6.22-r8 stable on amd64 and x86.
1051 phreak 1.194
1052     21 Oct 2007; Christian Heim <phreak@gentoo.org>
1053     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
1054     -hardened-sources-2.6.21-r4.ebuild:
1055     Removing old ebuilds.
1056 phreak 1.193
1057     *hardened-sources-2.4.35-r2 (21 Oct 2007)
1058    
1059     21 Oct 2007; Christian Heim <phreak@gentoo.org>
1060     +hardened-sources-2.4.35-r2.ebuild:
1061     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
1062     patches.
1063 phreak 1.192
1064     *hardened-sources-2.6.22-r8 (21 Oct 2007)
1065    
1066     21 Oct 2007; Christian Heim <phreak@gentoo.org>
1067     +hardened-sources-2.6.22-r8.ebuild:
1068     Yet another new patch, hopefully fixing the remaining issues we had w/
1069     2.6.22. Candidate for stabling.
1070 phreak 1.191
1071     *hardened-sources-2.6.23 (13 Oct 2007)
1072    
1073     13 Oct 2007; Christian Heim <phreak@gentoo.org>
1074     +hardened-sources-2.6.23.ebuild:
1075     Initial hardened-sources-2.6.23. If people still have problems w/ bug
1076     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
1077 phreak 1.190
1078     11 Oct 2007; Christian Heim <phreak@gentoo.org>
1079     hardened-sources-2.6.20-r10.ebuild:
1080     Pulling in yet another new genpatches version, fixing the PWC bug for real.
1081 phreak 1.189
1082     04 Oct 2007; Christian Heim <phreak@gentoo.org>
1083     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
1084     Removing old versions.
1085 phreak 1.188
1086     *hardened-sources-2.6.22-r7 (01 Oct 2007)
1087    
1088     01 Oct 2007; Christian Heim <phreak@gentoo.org>
1089     +hardened-sources-2.6.22-r7.ebuild:
1090     Revision bump, pulling in a newer patch. Should fix #194276.
1091 phreak 1.187
1092     30 Sep 2007; Christian Heim <phreak@gentoo.org>
1093     hardened-sources-2.6.20-r10.ebuild:
1094     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
1095     Mike Doty).
1096 phreak 1.186
1097     *hardened-sources-2.6.22-r6 (26 Sep 2007)
1098    
1099     26 Sep 2007; Christian Heim <phreak@gentoo.org>
1100     +hardened-sources-2.6.22-r6.ebuild:
1101     Revision bump, grabbing up till Linux 2.6.22.9.
1102 phreak 1.185
1103     24 Sep 2007; Christian Heim <phreak@gentoo.org>
1104     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
1105     Cleaning up further.
1106 phreak 1.184
1107     *hardened-sources-2.6.20-r10 (24 Sep 2007)
1108    
1109     24 Sep 2007; Christian Heim <phreak@gentoo.org>
1110     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
1111     +hardened-sources-2.6.20-r10.ebuild:
1112     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
1113     revisions.
1114 phreak 1.183
1115     *hardened-sources-2.6.22-r5 (22 Sep 2007)
1116    
1117     22 Sep 2007; Christian Heim <phreak@gentoo.org>
1118     +hardened-sources-2.6.22-r5.ebuild:
1119     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
1120 phreak 1.182
1121     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1122     Removing johnm from metadata.xml (see #186467 for reference).
1123 phreak 1.181
1124     *hardened-sources-2.6.22-r4 (17 Sep 2007)
1125    
1126     17 Sep 2007; Christian Heim <phreak@gentoo.org>
1127     +hardened-sources-2.6.22-r4.ebuild:
1128     Revision bump, hopefully fixing all those weird PAX failures.
1129 phreak 1.180
1130     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1131     Updating the metadata.xml.
1132 phreak 1.179
1133     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1134     Removing tocharian from metadata due to his retirement (see #71718 for
1135     reference).
1136 phreak 1.178
1137     *hardened-sources-2.6.20-r9 (30 Aug 2007)
1138    
1139     30 Aug 2007; Christian Heim <phreak@gentoo.org>
1140     +hardened-sources-2.6.20-r9.ebuild:
1141     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
1142 phreak 1.177
1143     29 Aug 2007; Christian Heim <phreak@gentoo.org>
1144     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
1145     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
1146     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
1147     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
1148     -hardened-sources-2.6.22-r2.ebuild:
1149     Removing some redundant versions.
1150 phreak 1.176
1151     *hardened-sources-2.4.35-r1 (29 Aug 2007)
1152    
1153     29 Aug 2007; Christian Heim <phreak@gentoo.org>
1154     +hardened-sources-2.4.35-r1.ebuild:
1155     Revision bump, new grsecurity patch.
1156 phreak 1.175
1157     *hardened-sources-2.6.20-r8 (26 Aug 2007)
1158    
1159     26 Aug 2007; Christian Heim <phreak@gentoo.org>
1160     +hardened-sources-2.6.20-r8.ebuild:
1161     Revision bump for Linux 2.6.20.17.
1162 phreak 1.174
1163     *hardened-sources-2.6.22-r3 (22 Aug 2007)
1164    
1165     22 Aug 2007; Christian Heim <phreak@gentoo.org>
1166     +hardened-sources-2.6.22-r3.ebuild:
1167     Revision bump for Linux 2.6.22.4.
1168 phreak 1.173
1169     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1170     hardened-sources-2.6.22-r2.ebuild:
1171     Updated patchset, to fix the alignment against 2.6.22.3.
1172 phreak 1.172
1173     *hardened-sources-2.6.22-r2 (16 Aug 2007)
1174    
1175     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1176     +hardened-sources-2.6.22-r2.ebuild:
1177     Revision bump for Linux 2.6.22.3.
1178 phreak 1.171
1179     *hardened-sources-2.4.35 (16 Aug 2007)
1180    
1181     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1182     +hardened-sources-2.4.35.ebuild:
1183     Version bump, initial version for Linux 2.4.35.
1184 phreak 1.170
1185     *hardened-sources-2.6.21-r4 (16 Aug 2007)
1186    
1187     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1188     +hardened-sources-2.6.21-r4.ebuild:
1189     Revision bump for Linux 2.6.21.6.
1190 phreak 1.169
1191     *hardened-sources-2.6.20-r7 (16 Aug 2007)
1192    
1193     16 Aug 2007; Christian Heim <phreak@gentoo.org>
1194     +hardened-sources-2.6.20-r7.ebuild:
1195     Revision bump for Linux 2.6.20.16.
1196 phreak 1.168
1197     *hardened-sources-2.6.22-r1 (13 Aug 2007)
1198    
1199     13 Aug 2007; Christian Heim <phreak@gentoo.org>
1200     +hardened-sources-2.6.22-r1.ebuild:
1201     Yet another revision bump.
1202 phreak 1.167
1203     *hardened-sources-2.6.22 (10 Aug 2007)
1204    
1205     10 Aug 2007; Christian Heim <phreak@gentoo.org>
1206     +hardened-sources-2.6.22.ebuild:
1207     Initial release for 2.6.22. If you are using hardened-sources on a desktop
1208     machine (P4 or newer), be aware you might need to disable
1209     CONFIG_PAX_PAGEEXEC.
1210 phreak 1.166
1211     04 Aug 2007; Christian Heim <phreak@gentoo.org>
1212     hardened-sources-2.6.20-r6.ebuild:
1213     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
1214     2.6.20.15.
1215 phreak 1.165
1216     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1217     hardened-sources-2.6.20-r5.ebuild:
1218     Marking hardened-sources-2.6.20-r5 stable on ppc.
1219 phreak 1.164
1220     10 Jul 2007; Christian Heim <phreak@gentoo.org>
1221     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
1222     Cleanup.
1223 phreak 1.163
1224     *hardened-sources-2.6.20-r6 (08 Jul 2007)
1225    
1226     08 Jul 2007; Christian Heim <phreak@gentoo.org>
1227     +hardened-sources-2.6.20-r6.ebuild:
1228     Revision bump, grabbing yet another stable release.
1229 phreak 1.162
1230     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1231     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
1232     -hardened-sources-2.6.21-r2.ebuild:
1233     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
1234     alpha stable KEYWORD by mistake.
1235 phreak 1.161
1236     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1237     hardened-sources-2.6.20-r5.ebuild:
1238     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
1239     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
1240 phreak 1.160
1241     *hardened-sources-2.6.21-r3 (12 Jun 2007)
1242    
1243     12 Jun 2007; Christian Heim <phreak@gentoo.org>
1244     +hardened-sources-2.6.21-r3.ebuild:
1245     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
1246     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
1247     love.
1248 phreak 1.159
1249     *hardened-sources-2.6.20-r5 (11 Jun 2007)
1250    
1251     11 Jun 2007; Christian Heim <phreak@gentoo.org>
1252     +hardened-sources-2.6.20-r5.ebuild:
1253     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1254     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1255     love.
1256 pappy 1.158
1257     *hardened-sources-2.4.34.5 (11 Jun 2007)
1258    
1259     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1260     +hardened-sources-2.4.34.5.ebuild:
1261     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1262 phreak 1.157
1263     30 May 2007; Christian Heim <phreak@gentoo.org>
1264     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1265     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1266     stale ebuild(s).
1267 phreak 1.156
1268     30 May 2007; Christian Heim <phreak@gentoo.org>
1269     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1270     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1271     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1272     Doing some cleanups, remove stale ebuilds.
1273 phreak 1.155
1274     26 May 2007; Christian Heim <phreak@gentoo.org>
1275     hardened-sources-2.6.21-r2.ebuild:
1276     Fixing the grsecurity patch, had one '};' too much.
1277 phreak 1.154
1278     *hardened-sources-2.6.21-r2 (26 May 2007)
1279    
1280     26 May 2007; Christian Heim <phreak@gentoo.org>
1281     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1282     +hardened-sources-2.6.21-r2.ebuild:
1283     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1284     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1285 phreak 1.153
1286     *hardened-sources-2.6.20-r4 (26 May 2007)
1287    
1288     26 May 2007; Christian Heim <phreak@gentoo.org>
1289     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1290     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1291 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1292 phreak 1.152
1293     15 May 2007; Christian Heim <phreak@gentoo.org>
1294     hardened-sources-2.6.20-r3.ebuild:
1295     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1296     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1297     grsecurity patch fail in that exact same hunk.
1298 phreak 1.151
1299     *hardened-sources-2.6.20-r3 (15 May 2007)
1300    
1301     15 May 2007; Christian Heim <phreak@gentoo.org>
1302     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1303     Revision bump, incorporating Linux 2.6.20.11.
1304    
1305     *hardened-sources-2.6.21-r1 (11 May 2007)
1306    
1307     11 May 2007; Christian Heim <phreak@gentoo.org>
1308     +hardened-sources-2.6.21-r1.ebuild:
1309     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1310     mentioned in #177234.
1311 kevquinn 1.150
1312     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1313     files/digest-hardened-sources-2.6.21, Manifest:
1314     Fix Manifest/digest for linux-2.6.21.tar.bz2
1315 phreak 1.149
1316     06 May 2007; Christian Heim <phreak@gentoo.org>
1317     hardened-sources-2.6.21.ebuild:
1318     Bumping the hardened-patches version, needed for the fix for #177234.
1319 phreak 1.148
1320     *hardened-sources-2.6.21 (02 May 2007)
1321    
1322     02 May 2007; Christian Heim <phreak@gentoo.org>
1323     +hardened-sources-2.6.21.ebuild:
1324     Version bump, Linux 2.6.21-hardened.
1325 phreak 1.147
1326     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1327     hardened-sources-2.6.20-r2.ebuild:
1328     Adding ~ia64 on Ned's request.
1329 phreak 1.146
1330     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1331     hardened-sources-2.6.20-r2.ebuild:
1332     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1333     header line(s).
1334 phreak 1.145
1335     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1336     hardened-sources-2.6.20-r2.ebuild:
1337     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1338 armin76 1.144
1339     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1340    
1341     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1342     +hardened-sources-2.6.20-r2.ebuild:
1343     Version bump, on behalf of phreak
1344 phreak 1.143
1345     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1346    
1347     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1348     +hardened-sources-2.6.20-r1.ebuild:
1349     Revision bump, grabbing a newer grsecurity snapshot.
1350 phreak 1.142
1351     *hardened-sources-2.6.20 (25 Mar 2007)
1352    
1353     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1354     +hardened-sources-2.6.20.ebuild:
1355     Finally a hardened-sources version for 2.6.20; many people have been waiting
1356     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1357     testbox.
1358 chainsaw 1.141
1359     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1360     hardened-sources-2.6.18-r6.ebuild:
1361     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1362 phreak 1.140
1363     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1364    
1365     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1366     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1367     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1368     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1369     supposed to be.
1370 phreak 1.139
1371     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1372     Fixing the Manifest, the previous one was broken (as in still had the
1373     deleted ebuild in it).
1374 phreak 1.138
1375     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1376     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1377     +hardened-sources-2.6.18-r5.ebuild:
1378     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1379     Linux 2.6.18.8. Also cleaning up the older version.
1380    
1381     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1382    
1383     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1384     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1385     +hardened-sources-2.6.18-r5.ebuild:
1386     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1387     Linux 2.6.18.8. Also cleaning up the older version.
1388 phreak 1.137
1389     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1390     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1391     -hardened-sources-2.6.19-r5.ebuild:
1392     Removing some of the old version, that didn't work.
1393 phreak 1.136
1394     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1395    
1396     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1397     +hardened-sources-2.6.19-r6.ebuild:
1398     Revision bump, including a new grsec version fixing #166235.
1399 pappy 1.134
1400     *hardened-sources-2.4.34 (24 Jan 2007)
1401    
1402     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1403 pappy 1.135 Manifest:
1404     updating Manifest with checksums of new tarball and ebuild
1405    
1406     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1407 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1408     I added new hardened sources 2.4 update, this is a critical path
1409     security bugfix - all users of h-s are strongly advised
1410     to update their existing hardened sources to this version.
1411     It contains a fix for a kernel vulnerability that is pertaining
1412     to the PaX changes to virtual memory management, possibly leading
1413     to a local kernel exploit ... see grsecurity.net forums and homepage
1414 phreak 1.133
1415     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1416     files/digest-hardened-sources-2.6.19-r5, Manifest:
1417     Fixing the patch-tarball digest.
1418 phreak 1.132
1419     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1420    
1421     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1422     +hardened-sources-2.6.19-r5.ebuild:
1423     Revision bump, closing the recently discovered PaX expand_stack()
1424     vulnerability.
1425 phreak 1.131
1426     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1427    
1428     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1429     +hardened-sources-2.6.19-r4.ebuild:
1430     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1431     dropping the randomized PID feature.
1432 opfer 1.130
1433     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1434     hardened-sources-2.4.33.4.ebuild:
1435     stable x86, bug #161171
1436 phreak 1.129
1437     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1438    
1439     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1440     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1441     Revision bump for bug #157186 and #158786.
1442 phreak 1.128
1443     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1444    
1445     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1446     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1447     Revision bump for bug #157186.
1448 phreak 1.127
1449     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1450    
1451     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1452     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1453     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1454 phreak 1.126
1455     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1456     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1457     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1458     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1459     hardened-sources-2.6.19-r1.ebuild:
1460     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1461     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1462 pappy 1.125
1463     *hardened-sources-2.4.33.4 (17 Dec 2006)
1464    
1465     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1466     +hardened-sources-2.4.33.4.ebuild:
1467     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1468     and quilting
1469 phreak 1.124
1470     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1471    
1472     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1473     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1474     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1475     for reporting).
1476 phreak 1.123
1477     *hardened-sources-2.6.19 (13 Dec 2006)
1478    
1479     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1480     +hardened-sources-2.6.19.ebuild:
1481     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1482     Brad for providing that prompt update.
1483 phreak 1.122
1484     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1485    
1486     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1487     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1488     +hardened-sources-2.6.18-r3.ebuild:
1489     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1490     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1491 phreak 1.121
1492     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1493     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1494 nixnut 1.120
1495     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1496     Stable on ppc wrt bug 157356
1497 opfer 1.119
1498     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1499     hardened-sources-2.6.18.ebuild:
1500     stable x86, bug #157356
1501 phreak 1.118
1502     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1503    
1504     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1505     +hardened-sources-2.6.18-r2.ebuild:
1506     Revision bump, including 2.6.18.5 (via genpatches) and
1507     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1508     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1509     redesign.
1510 phreak 1.117
1511     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1512     hardened-sources-2.6.18.ebuild:
1513     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1514     of Mike Doty).
1515 phreak 1.116
1516     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1517    
1518     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1519     +hardened-sources-2.6.18-r1.ebuild:
1520     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1521 phreak 1.115
1522     *hardened-sources-2.6.18 (11 Nov 2006)
1523    
1524     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1525     +hardened-sources-2.6.18.ebuild:
1526     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1527 solar 1.114
1528     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1529     - mark amd64 stable also. bug #151877
1530 solar 1.113
1531     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1532     - mark 2.6.17-r1 stable
1533 phreak 1.112
1534     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1535     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1536     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1537 phreak 1.111
1538     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1539    
1540     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1541     +hardened-sources-2.6.17-r1.ebuild:
1542     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1543     grsecurity patch.
1544 phreak 1.110
1545     *hardened-sources-2.6.17 (17 Aug 2006)
1546    
1547     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1548     +hardened-sources-2.6.17.ebuild:
1549     Bumping the hardened-sources-2.6 series to 2.6.17, using
1550     genpatches-2.6.17-6.base.
1551 solar 1.109
1552     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1553     - stable on x86 and amd64
1554 solar 1.108
1555     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1556    
1557     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1558     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1559     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1560     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1561     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1562     crusty ebuilds
1563 johnm 1.107
1564     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1565     hardened-sources-2.6.16-r10.ebuild:
1566     marking stable on x86 and amd64
1567 solar 1.106
1568     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1569     - 2.4.32-r6 stable on x86. RSBAC state unknown
1570 kang 1.105
1571     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1572    
1573     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1574     +hardened-sources-2.4.32-r7.ebuild:
1575     Bump PaX for RSBAC to test-17
1576 johnm 1.104
1577     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1578    
1579     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1580     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1581     hardened-sources-2.6.16 bump to latest -base.
1582 solar 1.103
1583     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1584    
1585     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1586     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1587     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1588     sysctl controlable resource logging
1589 johnm 1.102
1590     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1591    
1592     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1593     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1594     push new 2.6.16 release in preparation for stable
1595 solar 1.101
1596     22 May 2006; <solar@gentoo.org> :
1597     - redigest bug 134002
1598 kang 1.100
1599     *hardened-sources-2.4.32-r5 (16 May 2006)
1600    
1601     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1602     +hardened-sources-2.4.32-r5.ebuild:
1603     Fixes rsbac common patching (new patch in new -r5 patchset)
1604 solar 1.99
1605     *hardened-sources-2.4.32-r4 (13 May 2006)
1606    
1607     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1608     +hardened-sources-2.4.32-r4.ebuild:
1609     - security bumps
1610 johnm 1.98
1611     *hardened-sources-2.6.16-r6 (03 May 2006)
1612    
1613     03 May 2006; John Mylchreest <johnm@gentoo.org>
1614     +hardened-sources-2.6.16-r6.ebuild:
1615     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1616 johnm 1.97
1617     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1618     hardened-sources-2.6.14-r8.ebuild:
1619     fix x86_64 build problem, this will delay the digest issue again for a short
1620     while but it will sort itself out
1621 johnm 1.96
1622     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1623     hardened-sources-2.6.14-r8.ebuild:
1624     bump hardened patchset
1625 antarus 1.94
1626     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1627     files/digest-hardened-sources-2.4.32-r2,
1628     files/digest-hardened-sources-2.4.32-r3,
1629     files/digest-hardened-sources-2.6.14-r8, Manifest:
1630     Fixing duff SHA256 digests: Bug # 131293
1631 johnm 1.93
1632 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1633    
1634     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1635     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1636     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1637     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1638     cleanup of old uneccessary sources
1639    
1640 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1641     fix digest
1642 johnm 1.92
1643     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1644    
1645     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1646     +hardened-sources-2.6.14-r8.ebuild:
1647     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1648 johnm 1.91
1649     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1650     Turning on gpg-signing again, and recomitting
1651 johnm 1.90
1652     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1653    
1654     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1655     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1656     +hardened-sources-2.6.16-r4.ebuild:
1657     Fix numerous security vulns
1658 solar 1.89
1659     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1660    
1661     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1662     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1663     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1664     - security bump for bug #112791. Removed old ebuilds
1665 johnm 1.88
1666     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1667    
1668     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1669     +hardened-sources-2.6.16-r3.ebuild:
1670     Removing silly localversion which I missed
1671 johnm 1.87
1672     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1673    
1674     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1675     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1676     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1677 johnm 1.86
1678     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1679    
1680     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1681     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1682     +hardened-sources-2.6.16-r2.ebuild:
1683     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1684     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1685 johnm 1.85
1686     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1687    
1688     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1689     +hardened-sources-2.6.16-r1.ebuild:
1690     Bumping to include ppc build fix and 2.6.16.3
1691 tsunam 1.84
1692     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1693     hardened-sources-2.6.14-r6.ebuild:
1694     Stable on x86; bug #127718
1695 johnm 1.83
1696     *hardened-sources-2.6.16 (31 Mar 2006)
1697    
1698     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1699     +hardened-sources-2.6.16.ebuild:
1700     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1701     2.6.16.1
1702 cryos 1.82
1703     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1704     hardened-sources-2.6.14-r6.ebuild:
1705     Stable on amd64, bug 127718.
1706 nixnut 1.81
1707     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1708     Stable on ppc. Bug #127718
1709 johnm 1.80
1710     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1711     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1712     -hardened-sources-2.6.14-r4.ebuild:
1713     Cleanup.
1714 johnm 1.79
1715     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1716    
1717     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1718     +hardened-sources-2.6.14-r6.ebuild:
1719     Fixes grsec policy recreation bug and adds a
1720     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1721 solar 1.78
1722     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1723     - stable on x86
1724 hansmi 1.77
1725     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1726     hardened-sources-2.6.14-r5.ebuild:
1727     Stable on ppc.
1728 johnm 1.76
1729     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1730    
1731     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1732     +hardened-sources-2.6.14-r5.ebuild:
1733     fixing every known exploit
1734 solar 1.75
1735     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1736    
1737     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1738     +hardened-sources-2.4.32-r2.ebuild:
1739     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1740 solar 1.74
1741     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1742    
1743     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1744     - version bump for new genpatches which fix up a few sec holes
1745 solar 1.73
1746     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1747    
1748     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1749     - revision bump to add misc vital linux kernel security patches.
1750 johnm 1.72
1751     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1752    
1753     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1754     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1755     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1756 johnm 1.71
1757     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1758     hardened-sources-2.6.14-r2.ebuild:
1759     making x86 & amd64 stable following testing.
1760 johnm 1.70
1761     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1762    
1763     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1764     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1765     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1766     network hooks.
1767 johnm 1.69
1768     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1769     hardened-sources-2.6.14-r1.ebuild:
1770     bumping to stable early for sec fix on x86 & amd64
1771 johnm 1.68
1772     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1773    
1774     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1775     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1776     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1777 solar 1.67
1778     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1779     - stable on x86 security bug #114227 CAN-2005-3257
1780 kang 1.66
1781     *hardened-sources-2.4.32 (19 Nov 2005)
1782    
1783     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1784     +hardened-sources-2.4.32.ebuild:
1785     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1786     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1787     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1788     rsbac >> /etc/portage/package.use)
1789 johnm 1.65
1790     *hardened-sources-2.6.14 (14 Nov 2005)
1791    
1792     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1793     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1794     Bumping 2.6 series to 2.6.14.2
1795 johnm 1.64
1796     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1797    
1798     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1799     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1800     +hardened-sources-2.6.13-r2.ebuild:
1801     Fixes minor build error in ppc.
1802 johnm 1.63
1803     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1804    
1805     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1806     +hardened-sources-2.6.13-r1.ebuild:
1807     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1808     2.6.13.4, fixes some major amd64 stability problems.
1809 johnm 1.62
1810     *hardened-sources-2.6.13 (16 Sep 2005)
1811    
1812     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1813     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1814     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1815     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1816     users should test this thoroughly.
1817 solar 1.61
1818     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1819     - stable on x86
1820 johnm 1.60
1821     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1822    
1823     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1824     +hardened-sources-2.6.11-r15.ebuild:
1825     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1826     grsec redefining curr_ip struct.
1827 solar 1.59
1828     *hardened-sources-2.4.31 (20 Jun 2005)
1829    
1830     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1831     initial import of 2.4.31 tree
1832 johnm 1.58
1833     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1834    
1835     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1836     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1837     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1838     naming scheme to abide by genpatches
1839 johnm 1.57
1840     *hardened-sources-2.6.11-r13 (18 May 2005)
1841    
1842     18 May 2005; John Mylchreest <johnm@gentoo.org>
1843     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1844     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1845     target. sorry about that. Fixes bug #93022
1846 johnm 1.56
1847     *hardened-sources-2.6.11-r12 (17 May 2005)
1848    
1849     17 May 2005; John Mylchreest <johnm@gentoo.org>
1850     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1851     +hardened-sources-2.6.11-r12.ebuild:
1852     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1853     merges in genpatches-base
1854 johnm 1.55
1855     *hardened-sources-2.6.11-r12 (17 May 2005)
1856    
1857     17 May 2005; John Mylchreest <johnm@gentoo.org>
1858     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1859     +hardened-sources-2.6.11-r12.ebuild:
1860     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1861     merges in genpatches-base
1862 solar 1.54
1863     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1864     -files/2.4.27-cmdline-race.patch,
1865     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1866     -files/2.4.28-grsec-binfmt_a.out.patch,
1867     -files/2.4.28-grsec-cmdline-race.patch,
1868     -files/2.4.28-selinux-binfmt_a.out.patch,
1869     -files/2.4.28-selinux-cmdline-race.patch,
1870     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1871     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1872     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1873     cleanup..
1874 solar 1.53
1875     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1876    
1877     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1878     - disable aout by default
1879 solar 1.52
1880     *hardened-sources-2.4.30 (18 Apr 2005)
1881    
1882     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1883     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1884     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1885     use
1886 tocharian 1.50
1887 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1888    
1889     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1890     +hardened-sources-2.4.29.ebuild:
1891     New hardened-patches-2.4-29.0 patchball.
1892     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1893    
1894     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1895    
1896     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1897     +hardened-sources-2.4.28-r5.ebuild:
1898     Added a fix for a PaX vulnerability.
1899    
1900     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1901 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1902     Stable on x86
1903 solar 1.49
1904     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1905     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1906     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1907     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1908     - fixed/added RDEPEND= in all kernel-2 ebuilds
1909 tocharian 1.48
1910     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1911    
1912     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1913     +hardened-sources-2.4.28-r4.ebuild:
1914     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1915     backport of neighbour hash updates.
1916 tocharian 1.47
1917     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1918     hardened-sources-2.4.28-r3.ebuild:
1919     Stable on x86
1920 tseng 1.46
1921     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1922    
1923     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1924     +hardened-sources-2.6.10-r3.ebuild:
1925     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1926     in 2005.0
1927 tocharian 1.45
1928     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1929     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1930     hardened-sources-2.4.28-r2.ebuild:
1931     Mark stable on x86
1932 tocharian 1.44
1933     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1934    
1935     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1936     +hardened-sources-2.4.28-r3.ebuild:
1937     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1938 tocharian 1.43
1939     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1940     hardened-sources-2.4.28.ebuild:
1941     Mark stable on x86.
1942 tocharian 1.42
1943     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1944    
1945     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1946     +hardened-sources-2.4.28-r2.ebuild:
1947     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1948     Mazinger for grsecurity patches as well.
1949 plasmaroo 1.41
1950     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1951    
1952     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1953     Security bump. Thank tocharian for rolling a new patchset...
1954 solar 1.40
1955     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1956     +files/2.4.28-grsec-cmdline-race.patch,
1957     +files/2.4.28-selinux-binfmt_a.out.patch,
1958     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1959     - Round up remaining security patches that appear to be missing in 2.4.28. -
1960     PaX standalone updated to current. hgpv=28.1
1961 solar 1.39
1962     *hardened-sources-2.4.28 (28 Nov 2004)
1963    
1964     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1965     security bump. Thank tocharian for rolling a new patchset
1966 scox 1.31
1967 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1968    
1969     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1970     +hardened-sources-2.4.27-r3.ebuild:
1971     Applies the new 2.4-27.2 patchball which updates
1972     GRSecurity to the 2.0.1 version.
1973    
1974 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1975    
1976     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1977     +hardened-sources-2.4.27-r2.ebuild:
1978     Version bump.
1979     This version uses the new 2.4-27.1 patchball which updates
1980     both the SELinux PaX hooks patch and the SELinux headers.
1981    
1982 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1983    
1984     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1985     +hardened-sources-2.4.27-r1.ebuild,
1986     -hardened-sources-2.4.27.ebuild,
1987     +files/2.4.27-cmdline-race.patch:
1988     Version bump, fix for cmdline race. See bug #59905.
1989    
1990     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1991    
1992     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1993     +hardened-sources-2.4.26-r6.ebuild,
1994     -hardened-sources-2.4.26-r5.ebuild,
1995     -hardened-sources-2.4.26-r4.ebuild,
1996     +files/2.4.26-cmdline-race.patch:
1997     Version bump, fix for cmdline race. See bug #59905.
1998    
1999 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
2000    
2001     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
2002     +hardened-sources-2.4.27.ebuild,
2003     +files/2.4.27-CAN-2004-0394.patch:
2004     Ported the patchball to the 2.4.27 kernel version.
2005    
2006 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
2007    
2008     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
2009     +hardened-sources-2.4.26-r5.ebuild:
2010 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
2011 scox 1.34 It adds the following features:
2012     - Squashfs
2013     - Ebtables
2014     - Netdev random (core+drivers)
2015     - Watchdog Timer (WDT) fix.
2016    
2017 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
2018    
2019     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
2020     +hardened-sources-2.4.26-r4.ebuild,
2021     +files/2.4.26-CAN-2004-0415.patch,
2022     -hardened-sources-2.4.26-3:
2023     Version bump, fix for CAN 0415, see bug #59378.
2024    
2025 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
2026    
2027     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
2028     +hardened-sources-2.4.26-r3.ebuild,
2029     +files/2.4.26-CAN-2004-0497.patch,
2030     -hardened-sources-2.4.26-r2.ebuild:
2031     Version bump, fixed CAN 0497, see bug #56171.
2032    
2033 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
2034    
2035     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
2036 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
2037 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
2038     +files/2.4.26-CAN-2004-0535.patch,
2039     -hardened-sources-2.4.26-r1.ebuild:
2040     Fixes for both CAN 0495 and 0535, see bug #54976
2041 pvdabeel 1.27
2042 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
2043     hardened-sources-2.4.26-r1.ebuild:
2044     QA - fix use invocation
2045 scox 1.28
2046     *hardened-sources-2.4.26-r1 (22 June 2004)
2047    
2048     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
2049     +hardened-sources-2.4.26-r1.ebuild,
2050     +files/2.4.26-CAN-2004-0394.patch,
2051     +files/2.4.26-signal-race.patch,
2052     -hardened-sources-2.4.26.ebuild,
2053     -hardened-sources-2.4.24-r3.ebuild:
2054     Version bump for the CAN-2004-0394 issue and bug #53804
2055     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
2056    
2057    
2058 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
2059     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
2060     Masked hardened-sources-2.4.26.ebuild broken for ppc
2061    
2062     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
2063     hardened-sources-2.4.24-r3.ebuild:
2064     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
2065 plasmaroo 1.25
2066 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
2067    
2068     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
2069     +hardened-sources-2.4.26.ebuild:
2070     Updated hardened-sources for the 2.4.26 kernel
2071     Removed broken components, updated almost everything.
2072    
2073 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
2074    
2075     17 Apr 2004; <plasmaroo@gentoo.org>
2076     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
2077     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
2078     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
2079     +hardened-sources-2.4.24-r3.ebuild:
2080     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
2081     vulnerabilities. Old revisions removed.
2082 plasmaroo 1.24
2083     *hardened-sources-2.4.24-r2 (15 Apr 2004)
2084    
2085     15 Apr 2004; <plasmaroo@gentoo.org>
2086     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
2087     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
2088     Version bump for the CAN-2004-0109 issue; bug #47881.
2089 aliz 1.23
2090     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
2091     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
2092     Add eutils to inherit.
2093 plasmaroo 1.22
2094     *hardened-sources-2.4.24-r1 (19 Feb 2004)
2095    
2096     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
2097     files/hardened-sources-2.4.24.munmap.patch:
2098     Added the patch for the mremap/munmap vulnerability. Bug #42024.
2099 scox 1.19
2100 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
2101 scox 1.26
2102 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
2103     hardened-sources-2.4.24.ebuild:
2104     Version bump, updated most of the components.
2105     This release includes the following:
2106    
2107     - Hardened security
2108     - Netfilter patch-o-matic 20031219
2109     - FreeSWAN 2.04 & x509 1.4.8
2110     - EVMS 2.2.2
2111     - XFS 1.3.1
2112     - cryptoloop jari
2113     - grsecurity 2.0-rc4
2114     - SELinux
2115     - PaX 200402060000
2116     - PaX Obscurity 200308302223
2117     - Others...
2118    
2119     Neither -ck nor systrace are included anymore.
2120    
2121 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
2122    
2123     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
2124     hardened-sources-2.4.22-r2.ebuild:
2125 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
2126 scox 1.19
2127     *hardened-sources-2.4.22-r1 (02 Dec 2003)
2128 iggy 1.17
2129     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
2130 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
2131 iggy 1.16
2132     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
2133 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
2134     Version bump for the 'do_brk' vulnerability.
2135 iggy 1.15
2136     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
2137     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
2138     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
2139     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
2140 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
2141 frogger 1.14
2142     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
2143     hardened-sources-2.4.22.ebuild:
2144 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
2145     components. These are no longer handled in the kernel
2146     so this code was not necessary.
2147 frogger 1.13
2148     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
2149     New 2.4.22 based hardened-sources thanks to
2150     Phil West <p.west@computer.org>.
2151    
2152     These sources include:
2153 plasmaroo 1.18 - New SELinux API
2154     - Updated CK-base
2155     - Updated GRSec
2156     - Systrace
2157     - SuperFreeS/WAN 1.99.8
2158     - Propolice kernel build support
2159     - EVMS
2160     - Other various security related patches
2161 frogger 1.11
2162 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
2163    
2164     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
2165     Updated hardened-sources based on the 2.4.21 Linux kernel.
2166     This includes updates to most major components such as:
2167 plasmaroo 1.18 - ck-base-0306300059
2168     - selinux-2.4-2003071106
2169     - grsecurity-2.0-rc1
2170     - Updated IPTables patch-o-matic
2171     - Updated SuperFreeS/WAN
2172    
2173 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
2174     updated patch set ready for the 2.4.21 based kernel.
2175    
2176 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
2177     Initial import of hardened-sources-2.4.20-r4. This revision
2178     includes only a few changes, but one of these is an important
2179     security fix. It is recommended all users of hardened-sources
2180     upgrade to this release.
2181 plasmaroo 1.18
2182 frogger 1.11 - ioperm bug fix
2183     - fixed compilation failure when building without GRSec
2184 plasmaroo 1.18
2185 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
2186     due to time constraints, but is planned for inclusion in the near
2187     future.
2188 msterret 1.10
2189     *hardened-sources-2.4.20-r2 (12 Jun 2003)
2190    
2191     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
2192     hardened-sources-2.4.20-r3.ebuild:
2193 plasmaroo 1.18 Add Header...
2194 frogger 1.9
2195     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2196     hardened-sources-2.4.20-r3.ebuild:
2197     Removed warnings from ebuild. This kernel should be safe to
2198     use at this point.
2199 frogger 1.8
2200     *hardened-sources-2.4.20-r3 (08 Jun 2003)
2201    
2202     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2203     hardened-sources-2.4.20-r3.ebuild:
2204     New revision. Includes the following changes over -r2:
2205 plasmaroo 1.18
2206 frogger 1.8 - ck7-base (O(1), preempt, low latency)
2207     - Super FreeS/WAN 1.99.7rc2
2208     - PaX for the LSM/SELinux branch
2209     - GRSecurity 2.0-pre4 (role based access control)
2210     - Systrace 1.3
2211     - EXT3 fixes
2212     - EVMS 2.0.1
2213     - GCC 3.1+ compile optimizations
2214     - ProPolice kernel build support
2215     - Hashing table security fixes
2216 frogger 1.3
2217     *hardened-sources-2.4.20-r1 (09 Apr 2003)
2218 frogger 1.7
2219     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
2220     Initial import of hardened-sources-r2. This new
2221     ebuild includes many new performance and security
2222     related patches. As in -r1, it will patch in
2223     LSM/SELinux if "selinux" is in USE, otherwise it
2224     will patch in GRSecurity. The following patches
2225     are included in this revision:
2226 plasmaroo 1.18
2227 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
2228     (pulled from the base CK patch)
2229     - ptrace exploit patch for the LSM kernel
2230     (the GRSec patch already fixes this)
2231     - LSM 2.4-2003040709
2232     - SELinux 2.4-2003040709
2233     - Systrace v1.2
2234     - IPTables patch-o-matic base patches - 20030107
2235     - CryptoAPI 2.4.20.1 w/ loop-jari patch
2236     - Super FreeS/WAN 1.99.6.1
2237     - GRSecurity 1.9.9g
2238     - MPPE
2239     - EXT3 data journal fix
2240     - CIPE 1.5.4
2241 frogger 1.6
2242     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2243     hardened-sources-2.4.20-r1.ebuild, manifest:
2244 plasmaroo 1.18 Updated to install flask components correctly for selinux.
2245 frogger 1.5
2246     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2247     hardened-sources-2.4.20-r1.ebuild:
2248     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2249     is patched in instead. Ptrace patches for selinux have also been added. In
2250     either case, systrace support will be patched in as well.
2251 frogger 1.3
2252     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2253     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2254 plasmaroo 1.18 Revision bump for new sources.
2255 frogger 1.4
2256 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2257 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
2258 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2259 method 1.1
2260 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
2261    
2262 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2263     hardened-sources-2.4.20.ebuild:
2264 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20