/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.287 - (show annotations) (download)
Sun Mar 1 04:07:14 2009 UTC (5 years, 4 months ago) by gengor
Branch: MAIN
Changes since 1.286: +5 -1 lines
Stable sys-kernel/hardened-sources-2.6.27-r8 on amd64/x86
(Portage version: 2.1.6.7/cvs/Linux i686)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.286 2009/02/24 05:41:41 gengor Exp $
4
5 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
6 hardened-sources-2.6.27-r8.ebuild:
7 Stable on amd64/x86.
8
9 24 Feb 2009; Gordon Malm <gengor@gentoo.org>
10 -hardened-sources-2.6.27-r6.ebuild:
11 Remove old 2.6.27 release.
12
13 *hardened-sources-2.6.27-r8 (24 Feb 2009)
14
15 24 Feb 2009; Gordon Malm <gengor@gentoo.org>
16 +hardened-sources-2.6.27-r8.ebuild:
17 Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
18 and probably more.
19
20 04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
21 ppc stable
22
23 *hardened-sources-2.6.28 (25 Jan 2009)
24
25 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
26 +hardened-sources-2.6.28.ebuild:
27 Initial 2.6.28 release.
28
29 *hardened-sources-2.6.27-r7 (25 Jan 2009)
30
31 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
32 +hardened-sources-2.6.27-r7.ebuild:
33 Bump to Linux 2.6.27.13.
34
35 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
36 hardened-sources-2.6.26-r9.ebuild:
37 Stable amd64/x86.
38
39 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
40 -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
41 -hardened-sources-2.6.27-r5.ebuild:
42 Remove problem versions.
43
44 *hardened-sources-2.6.27-r6 (24 Jan 2009)
45
46 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
47 +hardened-sources-2.6.27-r6.ebuild:
48 Revert PaX test29 to test30 changes. Fixes bug 256226.
49
50 *hardened-sources-2.6.27-r5 (24 Jan 2009)
51
52 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
53 +hardened-sources-2.6.27-r5.ebuild:
54 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
55 254843.
56
57 23 Jan 2009; Gordon Malm <gengor@gentoo.org>
58 -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
59 -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
60 Remove problem versions.
61
62 23 Jan 2009; nixnut <nixnut@gentoo.org>
63 hardened-sources-2.6.25-r13.ebuild:
64 ppc stable
65
66 21 Jan 2009; Gordon Malm <gengor@gentoo.org>
67 hardened-sources-2.6.25-r13.ebuild:
68 Fasttrack stable amd64/x86.
69
70 *hardened-sources-2.6.26-r9 (21 Jan 2009)
71
72 21 Jan 2009; Gordon Malm <gengor@gentoo.org>
73 +hardened-sources-2.6.26-r9.ebuild:
74 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
75
76 *hardened-sources-2.6.25-r13 (20 Jan 2009)
77
78 20 Jan 2009; Gordon Malm <gengor@gentoo.org>
79 +hardened-sources-2.6.25-r13.ebuild:
80 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
81
82 20 Jan 2009; nixnut <nixnut@gentoo.org>
83 hardened-sources-2.6.25-r12.ebuild:
84 ppc stable
85
86 17 Jan 2009; Gordon Malm <gengor@gentoo.org>
87 hardened-sources-2.6.25-r12.ebuild:
88 Stable amd64/x86.
89
90 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
91 -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
92 -hardened-sources-2.6.27-r2.ebuild:
93 Clean out old versions.
94
95 *hardened-sources-2.6.27-r4 (14 Jan 2009)
96 *hardened-sources-2.6.26-r8 (14 Jan 2009)
97 *hardened-sources-2.6.25-r12 (14 Jan 2009)
98
99 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
100 +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
101 +hardened-sources-2.6.27-r4.ebuild:
102 2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
103 2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
104 2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
105 grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
106
107 15 Dec 2008; nixnut <nixnut@gentoo.org>
108 hardened-sources-2.6.25-r11.ebuild:
109 Stable on ppc
110
111 09 Dec 2008; Gordon Malm <gengor@gentoo.org>
112 hardened-sources-2.6.25-r11.ebuild:
113 Stable amd64/x86.
114
115 *hardened-sources-2.6.27-r3 (07 Dec 2008)
116
117 07 Dec 2008; Gordon Malm <gengor@gentoo.org>
118 +hardened-sources-2.6.27-r3.ebuild:
119 Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
120 Fixes bug #248754, #249729 and #246607.
121
122 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
123 -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
124 Remove old versions.
125
126 *hardened-sources-2.6.26-r7 (03 Dec 2008)
127 *hardened-sources-2.6.25-r11 (03 Dec 2008)
128
129 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
130 +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
131 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
132 2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
133 Both include many backports from 2.6.27.{6,7} -stable releases.
134
135 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
136 -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
137 Remove versions broken on ARCHes != x86/amd64.
138
139 *hardened-sources-2.6.27-r2 (24 Nov 2008)
140
141 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
142 +hardened-sources-2.6.27-r2.ebuild:
143 Bump to Linux 2.6.27.7 and latest grsecurity patch.
144
145 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
146 -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
147 Remove old versions.
148
149 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
150 hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
151 Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
152
153 16 Nov 2008; nixnut <nixnut@gentoo.org>
154 hardened-sources-2.6.25-r10.ebuild:
155 Stable on ppc
156
157 15 Nov 2008; Gordon Malm <gengor@gentoo.org>
158 hardened-sources-2.6.25-r10.ebuild:
159 Stable amd64/x86.
160
161 *hardened-sources-2.6.26-r6 (12 Nov 2008)
162
163 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
164 +hardened-sources-2.6.26-r6.ebuild:
165 Bump to Linux 2.6.26.8 and fix security bug #245650.
166
167 *hardened-sources-2.6.25-r10 (12 Nov 2008)
168
169 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
170 +hardened-sources-2.6.25-r10.ebuild:
171 Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
172
173 *hardened-sources-2.6.27-r1 (09 Nov 2008)
174
175 09 Nov 2008; Gordon Malm <gengor@gentoo.org>
176 +hardened-sources-2.6.27-r1.ebuild:
177 Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
178
179 *hardened-sources-2.6.27 (04 Nov 2008)
180
181 04 Nov 2008; Gordon Malm <gengor@gentoo.org>
182 +hardened-sources-2.6.27.ebuild:
183 Initial 2.6.27 release.
184
185 *hardened-sources-2.6.26-r5 (03 Nov 2008)
186
187 03 Nov 2008; Gordon Malm <gengor@gentoo.org>
188 -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
189 +hardened-sources-2.6.26-r5.ebuild:
190 2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
191 Clean out some old versions.
192
193 02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
194 Stable on ppc
195
196 30 Oct 2008; Gordon Malm <gengor@gentoo.org>
197 hardened-sources-2.6.25-r9.ebuild:
198 Stable on amd64/x86.
199
200 *hardened-sources-2.6.25-r9 (26 Oct 2008)
201
202 26 Oct 2008; Gordon Malm <gengor@gentoo.org>
203 +hardened-sources-2.6.25-r9.ebuild:
204 Update to Linux 2.6.25.19
205
206 15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
207 Stable on ppc
208
209 *hardened-sources-2.6.26-r4 (14 Oct 2008)
210
211 14 Oct 2008; Gordon Malm <gengor@gentoo.org>
212 -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
213 Update to latest grsecurity patch, fixing building of non-modular kernels.
214
215 *hardened-sources-2.6.26-r3 (12 Oct 2008)
216
217 12 Oct 2008; Gordon Malm <gengor@gentoo.org>
218 hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
219 +hardened-sources-2.6.26-r3.ebuild:
220 2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
221 2.6.26-r1: Removed.
222 2.6.25-r8: Stable amd64/x86.
223
224 *hardened-sources-2.6.25-r8 (09 Oct 2008)
225
226 09 Oct 2008; Gordon Malm <gengor@gentoo.org>
227 -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
228 -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
229 Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
230
231 20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
232 Stable on ppc
233
234 17 Sep 2008; Gordon Malm <gengor@gentoo.org>
235 hardened-sources-2.6.25-r7.ebuild:
236 Stable amd64/x86.
237
238 *hardened-sources-2.6.26-r2 (13 Sep 2008)
239
240 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
241 -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
242 2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
243 PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
244
245 *hardened-sources-2.6.25-r7 (13 Sep 2008)
246
247 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
248 +hardened-sources-2.6.25-r7.ebuild:
249 Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
250
251 10 Sep 2008; Gordon Malm <gengor@gentoo.org>
252 hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
253 hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
254 hardened-sources-2.6.26-r1.ebuild:
255 Update DESCRIPTION and HGPV_URI.
256
257 *hardened-sources-2.6.25-r6 (09 Sep 2008)
258
259 09 Sep 2008; Gordon Malm <gengor@gentoo.org>
260 -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
261 2.6.25-r6: Update to Linux 2.6.25.17.
262 2.6.24-r3: Removed.
263
264 08 Sep 2008; Gordon Malm <gengor@gentoo.org>
265 hardened-sources-2.6.25-r5.ebuild:
266 Stable on amd64/x86
267
268 07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
269 Update my email address.
270
271 31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
272 stable on ppc
273
274 *hardened-sources-2.6.26-r1 (23 Aug 2008)
275 *hardened-sources-2.6.25-r5 (23 Aug 2008)
276
277 23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
278 -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
279 hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
280 +hardened-sources-2.6.26-r1.ebuild:
281 Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
282 security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
283 fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
284 Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
285 (gengor).
286
287 *hardened-sources-2.6.26 (18 Aug 2008)
288 *hardened-sources-2.6.25-r4 (18 Aug 2008)
289
290 18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
291 +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
292 - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
293 to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
294 2.6.25-r2: Removed.
295
296 16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
297 Remove phreak from metadata.xml (#96398)
298
299 *hardened-sources-2.6.25-r3 (31 Jul 2008)
300
301 31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
302 -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
303 +hardened-sources-2.6.25-r3.ebuild:
304 - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
305 fixes, including security bug #231750.
306
307 28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
308 Stable on ppc
309
310 *hardened-sources-2.6.25-r2 (05 Jul 2008)
311
312 05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
313 -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
314 +hardened-sources-2.6.25-r2.ebuild:
315 2.6.23-r4: Stable x86/amd64
316 2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
317 2.6.23-r{11,12}: Removed due to multiple vulns.
318 (gengor & kerframil)
319
320 04 Jul 2008; nixnut <nixnut@gentoo.org>
321 hardened-sources-2.6.23-r13.ebuild:
322 Stable on ppc
323
324 *hardened-sources-2.6.25-r1 (30 Jun 2008)
325
326 30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
327 +hardened-sources-2.6.25-r1.ebuild:
328 2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
329 grsecurity release. 2.6.23-r13: x86/amd64 stable
330
331 *hardened-sources-2.6.25 (17 Jun 2008)
332 *hardened-sources-2.6.24-r3 (17 Jun 2008)
333 *hardened-sources-2.6.23-r13 (17 Jun 2008)
334
335 17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
336 +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
337 * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
338 #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
339 #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
340 2.6.25: Initial 2.6.25 release.
341
342 15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
343 - fasttrack to stable x86/amd64
344
345 11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
346 Fix broken digest for linux-2.6.24.tar.bz2.
347
348 *hardened-sources-2.6.24-r2 (11 May 2008)
349 *hardened-sources-2.6.23-r12 (11 May 2008)
350
351 11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
352 -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
353 +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
354 -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
355 proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
356 220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
357 security bugs 219901, 220691, 220975, 220979, 221123. New
358 genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
359 should be removed as far as I'm concerned, everything else remove due to
360 vulnerable to numerous security bugs or brokeness.
361
362 10 May 2008; nixnut <nixnut@gentoo.org>
363 hardened-sources-2.6.23-r11.ebuild:
364 Stable on ppc
365
366 05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
367 - -r11 stable on x86/amd64
368
369 *hardened-sources-2.6.23-r11 (01 May 2008)
370
371 01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
372 - version bump to fix ulgy linux bugs
373
374 *hardened-sources-2.6.24-r1 (30 Apr 2008)
375
376 30 Apr 2008; Christian Heim <phreak@gentoo.org>
377 +hardened-sources-2.6.24-r1.ebuild:
378 Revision bump (thanks to Kerin and Gordon, again), pulling
379 genpatches-2.6.24-7, solving #219089. Additionally contains further security
380 fixes plus some minor updates.
381
382 *hardened-sources-2.6.23-r10 (30 Apr 2008)
383
384 30 Apr 2008; Christian Heim <phreak@gentoo.org>
385 +hardened-sources-2.6.23-r10.ebuild:
386 Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
387 Additional contains "various other fixes".
388
389 09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
390 Update the longdescription in metadata, thanks to Gordon Malm.
391
392 08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
393 Stable on ppc wrt bug #213255
394
395 07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
396 -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
397 - stable on x86/amd64 per request. Removed obsolete ebuilds
398
399 *hardened-sources-2.6.24 (07 Apr 2008)
400
401 07 Apr 2008; Christian Heim <phreak@gentoo.org>
402 +hardened-sources-2.6.24.ebuild:
403 Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
404 <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
405 for the many contributions and their continued effort in #216612) based on
406 2.6.24 and genpatches-2.6.24-5.
407
408 The current ebuild/patchset contains these things:
409 * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
410 * Introduces bespoke server and workstation oriented security levels
411 * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
412
413 30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
414 Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
415 maintaining it).
416
417 24 Mar 2008; Christian Heim <phreak@gentoo.org>
418 hardened-sources-2.4.35-r2.ebuild:
419 Fixing SRC_URI for 2.4.35-r2.
420
421 *hardened-sources-2.6.23-r9 (22 Mar 2008)
422
423 22 Mar 2008; Christian Heim <phreak@gentoo.org>
424 +hardened-sources-2.6.23-r9.ebuild:
425 * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
426 * Change the default GIDs for some grsecurity options
427 * Revamp the Hardened [Gentoo] security level and make it the default level
428 * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
429 * Fix a recursive lock -- call to capable() within ptrace_attach()
430 * Fix bug that allows audit and iscsi operations to be controlled via netlink
431
432 *hardened-sources-2.6.23-r8 (27 Feb 2008)
433
434 27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
435 - version bump from Kerin Millar bug 210026
436
437 17 Feb 2008; <solar@gentoo.org> metadata.xml,
438 -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
439 -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
440 -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
441 - stable on x86 and remove old ebuilds
442
443 15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
444 - stable on amd64 per request of amd64 lead
445
446 *hardened-sources-2.6.23-r7 (11 Feb 2008)
447
448 11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
449 - version bump from kerin.millar
450 Changes:
451
452 * Bump to genpatches-base-2.6.23-9
453 * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
454 * Disables COMPAT_VDSO in x86/defconfig
455 * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
456
457 25 Jan 2008; Christian Heim <phreak@gentoo.org>
458 -hardened-sources-2.6.22-r8.ebuild:
459 Cleaning up old versions.
460
461 *hardened-sources-2.6.23-r6 (25 Jan 2008)
462
463 25 Jan 2008; Christian Heim <phreak@gentoo.org>
464 -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
465 Revision bump, pulling in the latest genpatches.
466
467 *hardened-sources-2.6.23-r5 (24 Dec 2007)
468
469 24 Dec 2007; Christian Heim <phreak@gentoo.org>
470 hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
471 hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
472 hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
473 Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
474
475 24 Dec 2007; Christian Heim <phreak@gentoo.org>
476 -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
477 -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
478 -hardened-sources-2.6.23-r3.ebuild:
479 Cleaning out some unused, old versions.
480
481 24 Dec 2007; Christian Heim <phreak@gentoo.org>
482 hardened-sources-2.6.23-r4.ebuild:
483 Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
484 in the tree for long, but there isn't much of a difference between this and
485 -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
486
487 *hardened-sources-2.6.23-r4 (23 Dec 2007)
488
489 23 Dec 2007; Christian Heim <phreak@gentoo.org>
490 +hardened-sources-2.6.23-r4.ebuild:
491 Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
492
493 *hardened-sources-2.6.23-r3 (04 Dec 2007)
494
495 04 Dec 2007; Christian Heim <phreak@gentoo.org>
496 +hardened-sources-2.6.23-r3.ebuild:
497 Revision bump, pulling in 2.6.23.9.
498
499 *hardened-sources-2.6.23-r2 (25 Nov 2007)
500
501 25 Nov 2007; Christian Heim <phreak@gentoo.org>
502 +hardened-sources-2.6.23-r2.ebuild:
503 Updated patchset, thanks to solar.
504
505 *hardened-sources-2.6.23-r1 (31 Oct 2007)
506
507 31 Oct 2007; Christian Heim <phreak@gentoo.org>
508 +hardened-sources-2.6.23-r1.ebuild:
509 Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
510
511 29 Oct 2007; <solar@gentoo.org> metadata.xml:
512 - update metadata.xml
513
514 25 Oct 2007; Christian Heim <phreak@gentoo.org>
515 hardened-sources-2.6.22-r8.ebuild:
516 Marking 2.6.22-r8 stable on amd64 and x86.
517
518 21 Oct 2007; Christian Heim <phreak@gentoo.org>
519 -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
520 -hardened-sources-2.6.21-r4.ebuild:
521 Removing old ebuilds.
522
523 *hardened-sources-2.4.35-r2 (21 Oct 2007)
524
525 21 Oct 2007; Christian Heim <phreak@gentoo.org>
526 +hardened-sources-2.4.35-r2.ebuild:
527 Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
528 patches.
529
530 *hardened-sources-2.6.22-r8 (21 Oct 2007)
531
532 21 Oct 2007; Christian Heim <phreak@gentoo.org>
533 +hardened-sources-2.6.22-r8.ebuild:
534 Yet another new patch, hopefully fixing the remaining issues we had w/
535 2.6.22. Candidate for stabling.
536
537 *hardened-sources-2.6.23 (13 Oct 2007)
538
539 13 Oct 2007; Christian Heim <phreak@gentoo.org>
540 +hardened-sources-2.6.23.ebuild:
541 Initial hardened-sources-2.6.23. If people still have problems w/ bug
542 194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
543
544 11 Oct 2007; Christian Heim <phreak@gentoo.org>
545 hardened-sources-2.6.20-r10.ebuild:
546 Pulling in yet another new genpatches version, fixing the PWC bug for real.
547
548 04 Oct 2007; Christian Heim <phreak@gentoo.org>
549 -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
550 Removing old versions.
551
552 *hardened-sources-2.6.22-r7 (01 Oct 2007)
553
554 01 Oct 2007; Christian Heim <phreak@gentoo.org>
555 +hardened-sources-2.6.22-r7.ebuild:
556 Revision bump, pulling in a newer patch. Should fix #194276.
557
558 30 Sep 2007; Christian Heim <phreak@gentoo.org>
559 hardened-sources-2.6.20-r10.ebuild:
560 Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
561 Mike Doty).
562
563 *hardened-sources-2.6.22-r6 (26 Sep 2007)
564
565 26 Sep 2007; Christian Heim <phreak@gentoo.org>
566 +hardened-sources-2.6.22-r6.ebuild:
567 Revision bump, grabbing up till Linux 2.6.22.9.
568
569 24 Sep 2007; Christian Heim <phreak@gentoo.org>
570 -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
571 Cleaning up further.
572
573 *hardened-sources-2.6.20-r10 (24 Sep 2007)
574
575 24 Sep 2007; Christian Heim <phreak@gentoo.org>
576 -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
577 +hardened-sources-2.6.20-r10.ebuild:
578 Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
579 revisions.
580
581 *hardened-sources-2.6.22-r5 (22 Sep 2007)
582
583 22 Sep 2007; Christian Heim <phreak@gentoo.org>
584 +hardened-sources-2.6.22-r5.ebuild:
585 Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
586
587 17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
588 Removing johnm from metadata.xml (see #186467 for reference).
589
590 *hardened-sources-2.6.22-r4 (17 Sep 2007)
591
592 17 Sep 2007; Christian Heim <phreak@gentoo.org>
593 +hardened-sources-2.6.22-r4.ebuild:
594 Revision bump, hopefully fixing all those weird PAX failures.
595
596 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
597 Updating the metadata.xml.
598
599 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
600 Removing tocharian from metadata due to his retirement (see #71718 for
601 reference).
602
603 *hardened-sources-2.6.20-r9 (30 Aug 2007)
604
605 30 Aug 2007; Christian Heim <phreak@gentoo.org>
606 +hardened-sources-2.6.20-r9.ebuild:
607 Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
608
609 29 Aug 2007; Christian Heim <phreak@gentoo.org>
610 -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
611 -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
612 -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
613 -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
614 -hardened-sources-2.6.22-r2.ebuild:
615 Removing some redundant versions.
616
617 *hardened-sources-2.4.35-r1 (29 Aug 2007)
618
619 29 Aug 2007; Christian Heim <phreak@gentoo.org>
620 +hardened-sources-2.4.35-r1.ebuild:
621 Revision bump, new grsecurity patch.
622
623 *hardened-sources-2.6.20-r8 (26 Aug 2007)
624
625 26 Aug 2007; Christian Heim <phreak@gentoo.org>
626 +hardened-sources-2.6.20-r8.ebuild:
627 Revision bump for Linux 2.6.20.17.
628
629 *hardened-sources-2.6.22-r3 (22 Aug 2007)
630
631 22 Aug 2007; Christian Heim <phreak@gentoo.org>
632 +hardened-sources-2.6.22-r3.ebuild:
633 Revision bump for Linux 2.6.22.4.
634
635 16 Aug 2007; Christian Heim <phreak@gentoo.org>
636 hardened-sources-2.6.22-r2.ebuild:
637 Updated patchset, to fix the alignment against 2.6.22.3.
638
639 *hardened-sources-2.6.22-r2 (16 Aug 2007)
640
641 16 Aug 2007; Christian Heim <phreak@gentoo.org>
642 +hardened-sources-2.6.22-r2.ebuild:
643 Revision bump for Linux 2.6.22.3.
644
645 *hardened-sources-2.4.35 (16 Aug 2007)
646
647 16 Aug 2007; Christian Heim <phreak@gentoo.org>
648 +hardened-sources-2.4.35.ebuild:
649 Version bump, initial version for Linux 2.4.35.
650
651 *hardened-sources-2.6.21-r4 (16 Aug 2007)
652
653 16 Aug 2007; Christian Heim <phreak@gentoo.org>
654 +hardened-sources-2.6.21-r4.ebuild:
655 Revision bump for Linux 2.6.21.6.
656
657 *hardened-sources-2.6.20-r7 (16 Aug 2007)
658
659 16 Aug 2007; Christian Heim <phreak@gentoo.org>
660 +hardened-sources-2.6.20-r7.ebuild:
661 Revision bump for Linux 2.6.20.16.
662
663 *hardened-sources-2.6.22-r1 (13 Aug 2007)
664
665 13 Aug 2007; Christian Heim <phreak@gentoo.org>
666 +hardened-sources-2.6.22-r1.ebuild:
667 Yet another revision bump.
668
669 *hardened-sources-2.6.22 (10 Aug 2007)
670
671 10 Aug 2007; Christian Heim <phreak@gentoo.org>
672 +hardened-sources-2.6.22.ebuild:
673 Initial release for 2.6.22. If you are using hardened-sources on a desktop
674 machine (P4 or newer), be aware you might need to disable
675 CONFIG_PAX_PAGEEXEC.
676
677 04 Aug 2007; Christian Heim <phreak@gentoo.org>
678 hardened-sources-2.6.20-r6.ebuild:
679 Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
680 2.6.20.15.
681
682 10 Jul 2007; Christian Heim <phreak@gentoo.org>
683 hardened-sources-2.6.20-r5.ebuild:
684 Marking hardened-sources-2.6.20-r5 stable on ppc.
685
686 10 Jul 2007; Christian Heim <phreak@gentoo.org>
687 -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
688 Cleanup.
689
690 *hardened-sources-2.6.20-r6 (08 Jul 2007)
691
692 08 Jul 2007; Christian Heim <phreak@gentoo.org>
693 +hardened-sources-2.6.20-r6.ebuild:
694 Revision bump, grabbing yet another stable release.
695
696 17 Jun 2007; Christian Heim <phreak@gentoo.org>
697 -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
698 -hardened-sources-2.6.21-r2.ebuild:
699 Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
700 alpha stable KEYWORD by mistake.
701
702 17 Jun 2007; Christian Heim <phreak@gentoo.org>
703 hardened-sources-2.6.20-r5.ebuild:
704 Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
705 genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
706
707 *hardened-sources-2.6.21-r3 (12 Jun 2007)
708
709 12 Jun 2007; Christian Heim <phreak@gentoo.org>
710 +hardened-sources-2.6.21-r3.ebuild:
711 Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
712 of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
713 love.
714
715 *hardened-sources-2.6.20-r5 (11 Jun 2007)
716
717 11 Jun 2007; Christian Heim <phreak@gentoo.org>
718 +hardened-sources-2.6.20-r5.ebuild:
719 Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
720 of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
721 love.
722
723 *hardened-sources-2.4.34.5 (11 Jun 2007)
724
725 11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
726 +hardened-sources-2.4.34.5.ebuild:
727 added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
728
729 30 May 2007; Christian Heim <phreak@gentoo.org>
730 -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
731 Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
732 stale ebuild(s).
733
734 30 May 2007; Christian Heim <phreak@gentoo.org>
735 -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
736 -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
737 -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
738 Doing some cleanups, remove stale ebuilds.
739
740 26 May 2007; Christian Heim <phreak@gentoo.org>
741 hardened-sources-2.6.21-r2.ebuild:
742 Fixing the grsecurity patch, had one '};' too much.
743
744 *hardened-sources-2.6.21-r2 (26 May 2007)
745
746 26 May 2007; Christian Heim <phreak@gentoo.org>
747 -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
748 +hardened-sources-2.6.21-r2.ebuild:
749 Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
750 grsecurity patch to 2.1.10-2.6.21.1-200705221918.
751
752 *hardened-sources-2.6.20-r4 (26 May 2007)
753
754 26 May 2007; Christian Heim <phreak@gentoo.org>
755 -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
756 Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
757 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
758
759 15 May 2007; Christian Heim <phreak@gentoo.org>
760 hardened-sources-2.6.20-r3.ebuild:
761 Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
762 introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
763 grsecurity patch fail in that exact same hunk.
764
765 *hardened-sources-2.6.20-r3 (15 May 2007)
766
767 15 May 2007; Christian Heim <phreak@gentoo.org>
768 +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
769 Revision bump, incorporating Linux 2.6.20.11.
770
771 *hardened-sources-2.6.21-r1 (11 May 2007)
772
773 11 May 2007; Christian Heim <phreak@gentoo.org>
774 +hardened-sources-2.6.21-r1.ebuild:
775 Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
776 mentioned in #177234.
777
778 07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
779 files/digest-hardened-sources-2.6.21, Manifest:
780 Fix Manifest/digest for linux-2.6.21.tar.bz2
781
782 06 May 2007; Christian Heim <phreak@gentoo.org>
783 hardened-sources-2.6.21.ebuild:
784 Bumping the hardened-patches version, needed for the fix for #177234.
785
786 *hardened-sources-2.6.21 (02 May 2007)
787
788 02 May 2007; Christian Heim <phreak@gentoo.org>
789 +hardened-sources-2.6.21.ebuild:
790 Version bump, Linux 2.6.21-hardened.
791
792 29 Apr 2007; Christian Heim <phreak@gentoo.org>
793 hardened-sources-2.6.20-r2.ebuild:
794 Adding ~ia64 on Ned's request.
795
796 29 Apr 2007; Christian Heim <phreak@gentoo.org>
797 hardened-sources-2.6.20-r2.ebuild:
798 Fixing the included grsecurity patch, wasn't alligning due to the Index:
799 header line(s).
800
801 29 Apr 2007; Christian Heim <phreak@gentoo.org>
802 hardened-sources-2.6.20-r2.ebuild:
803 Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
804
805 *hardened-sources-2.6.20-r2 (10 Apr 2007)
806
807 10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
808 +hardened-sources-2.6.20-r2.ebuild:
809 Version bump, on behalf of phreak
810
811 *hardened-sources-2.6.20-r1 (04 Apr 2007)
812
813 04 Apr 2007; Christian Heim <phreak@gentoo.org>
814 +hardened-sources-2.6.20-r1.ebuild:
815 Revision bump, grabbing a newer grsecurity snapshot.
816
817 *hardened-sources-2.6.20 (25 Mar 2007)
818
819 25 Mar 2007; Christian Heim <phreak@gentoo.org>
820 +hardened-sources-2.6.20.ebuild:
821 Finally a hardened-sources version for 2.6.20; many people have been waiting
822 for this. Thanks to Steve for preliminary testing, thanks to Ned for the
823 testbox.
824
825 16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
826 hardened-sources-2.6.18-r6.ebuild:
827 Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
828
829 *hardened-sources-2.6.18-r6 (16 Mar 2007)
830
831 16 Mar 2007; Christian Heim <phreak@gentoo.org>
832 -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
833 Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
834 yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
835 supposed to be.
836
837 06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
838 Fixing the Manifest, the previous one was broken (as in still had the
839 deleted ebuild in it).
840
841 06 Mar 2007; Christian Heim <phreak@gentoo.org>
842 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
843 +hardened-sources-2.6.18-r5.ebuild:
844 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
845 Linux 2.6.18.8. Also cleaning up the older version.
846
847 *hardened-sources-2.6.18-r5 (06 Mar 2007)
848
849 06 Mar 2007; Christian Heim <phreak@gentoo.org>
850 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
851 +hardened-sources-2.6.18-r5.ebuild:
852 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
853 Linux 2.6.18.8. Also cleaning up the older version.
854
855 24 Feb 2007; Christian Heim <phreak@gentoo.org>
856 -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
857 -hardened-sources-2.6.19-r5.ebuild:
858 Removing some of the old version, that didn't work.
859
860 *hardened-sources-2.6.19-r6 (12 Feb 2007)
861
862 12 Feb 2007; Christian Heim <phreak@gentoo.org>
863 +hardened-sources-2.6.19-r6.ebuild:
864 Revision bump, including a new grsec version fixing #166235.
865
866 *hardened-sources-2.4.34 (24 Jan 2007)
867
868 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
869 Manifest:
870 updating Manifest with checksums of new tarball and ebuild
871
872 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
873 +hardened-sources-2.4.34.ebuild:
874 I added new hardened sources 2.4 update, this is a critical path
875 security bugfix - all users of h-s are strongly advised
876 to update their existing hardened sources to this version.
877 It contains a fix for a kernel vulnerability that is pertaining
878 to the PaX changes to virtual memory management, possibly leading
879 to a local kernel exploit ... see grsecurity.net forums and homepage
880
881 23 Jan 2007; Christian Heim <phreak@gentoo.org>
882 files/digest-hardened-sources-2.6.19-r5, Manifest:
883 Fixing the patch-tarball digest.
884
885 *hardened-sources-2.6.19-r5 (23 Jan 2007)
886
887 23 Jan 2007; Christian Heim <phreak@gentoo.org>
888 +hardened-sources-2.6.19-r5.ebuild:
889 Revision bump, closing the recently discovered PaX expand_stack()
890 vulnerability.
891
892 *hardened-sources-2.6.19-r4 (14 Jan 2007)
893
894 14 Jan 2007; Christian Heim <phreak@gentoo.org>
895 +hardened-sources-2.6.19-r4.ebuild:
896 Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
897 dropping the randomized PID feature.
898
899 11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
900 hardened-sources-2.4.33.4.ebuild:
901 stable x86, bug #161171
902
903 *hardened-sources-2.6.19-r3 (27 Dec 2006)
904
905 27 Dec 2006; Christian Heim <phreak@gentoo.org>
906 -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
907 Revision bump for bug #157186 and #158786.
908
909 *hardened-sources-2.6.18-r4 (27 Dec 2006)
910
911 27 Dec 2006; Christian Heim <phreak@gentoo.org>
912 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
913 Revision bump for bug #157186.
914
915 *hardened-sources-2.6.19-r2 (23 Dec 2006)
916
917 23 Dec 2006; Christian Heim <phreak@gentoo.org>
918 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
919 Revision bump to pull in genpatches-2.6.19-3 for #157186.
920
921 17 Dec 2006; Christian Heim <phreak@gentoo.org>
922 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
923 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
924 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
925 hardened-sources-2.6.19-r1.ebuild:
926 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
927 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
928
929 *hardened-sources-2.4.33.4 (17 Dec 2006)
930
931 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
932 +hardened-sources-2.4.33.4.ebuild:
933 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
934 and quilting
935
936 *hardened-sources-2.6.19-r1 (14 Dec 2006)
937
938 14 Dec 2006; Christian Heim <phreak@gentoo.org>
939 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
940 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
941 for reporting).
942
943 *hardened-sources-2.6.19 (13 Dec 2006)
944
945 13 Dec 2006; Christian Heim <phreak@gentoo.org>
946 +hardened-sources-2.6.19.ebuild:
947 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
948 Brad for providing that prompt update.
949
950 *hardened-sources-2.6.18-r3 (13 Dec 2006)
951
952 13 Dec 2006; Christian Heim <phreak@gentoo.org>
953 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
954 +hardened-sources-2.6.18-r3.ebuild:
955 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
956 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
957
958 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
959 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
960
961 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
962 Stable on ppc wrt bug 157356
963
964 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
965 hardened-sources-2.6.18.ebuild:
966 stable x86, bug #157356
967
968 *hardened-sources-2.6.18-r2 (06 Dec 2006)
969
970 06 Dec 2006; Christian Heim <phreak@gentoo.org>
971 +hardened-sources-2.6.18-r2.ebuild:
972 Revision bump, including 2.6.18.5 (via genpatches) and
973 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
974 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
975 redesign.
976
977 06 Dec 2006; Christian Heim <phreak@gentoo.org>
978 hardened-sources-2.6.18.ebuild:
979 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
980 of Mike Doty).
981
982 *hardened-sources-2.6.18-r1 (23 Nov 2006)
983
984 23 Nov 2006; Christian Heim <phreak@gentoo.org>
985 +hardened-sources-2.6.18-r1.ebuild:
986 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
987
988 *hardened-sources-2.6.18 (11 Nov 2006)
989
990 11 Nov 2006; Christian Heim <phreak@gentoo.org>
991 +hardened-sources-2.6.18.ebuild:
992 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
993
994 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
995 - mark amd64 stable also. bug #151877
996
997 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
998 - mark 2.6.17-r1 stable
999
1000 27 Aug 2006; Christian Heim <phreak@gentoo.org>
1001 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1002 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1003
1004 *hardened-sources-2.6.17-r1 (26 Aug 2006)
1005
1006 26 Aug 2006; Christian Heim <phreak@gentoo.org>
1007 +hardened-sources-2.6.17-r1.ebuild:
1008 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1009 grsecurity patch.
1010
1011 *hardened-sources-2.6.17 (17 Aug 2006)
1012
1013 17 Aug 2006; Christian Heim <phreak@gentoo.org>
1014 +hardened-sources-2.6.17.ebuild:
1015 Bumping the hardened-sources-2.6 series to 2.6.17, using
1016 genpatches-2.6.17-6.base.
1017
1018 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1019 - stable on x86 and amd64
1020
1021 *hardened-sources-2.6.16-r11 (15 Jul 2006)
1022
1023 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1024 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1025 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1026 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1027 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1028 crusty ebuilds
1029
1030 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1031 hardened-sources-2.6.16-r10.ebuild:
1032 marking stable on x86 and amd64
1033
1034 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1035 - 2.4.32-r6 stable on x86. RSBAC state unknown
1036
1037 *hardened-sources-2.4.32-r7 (10 Jul 2006)
1038
1039 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1040 +hardened-sources-2.4.32-r7.ebuild:
1041 Bump PaX for RSBAC to test-17
1042
1043 *hardened-sources-2.6.16-r9 (03 Jul 2006)
1044
1045 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1046 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1047 hardened-sources-2.6.16 bump to latest -base.
1048
1049 *hardened-sources-2.4.32-r6 (30 Jun 2006)
1050
1051 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1052 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1053 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1054 sysctl controlable resource logging
1055
1056 *hardened-sources-2.6.16-r7 (05 Jun 2006)
1057
1058 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1059 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1060 push new 2.6.16 release in preparation for stable
1061
1062 22 May 2006; <solar@gentoo.org> :
1063 - redigest bug 134002
1064
1065 *hardened-sources-2.4.32-r5 (16 May 2006)
1066
1067 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1068 +hardened-sources-2.4.32-r5.ebuild:
1069 Fixes rsbac common patching (new patch in new -r5 patchset)
1070
1071 *hardened-sources-2.4.32-r4 (13 May 2006)
1072
1073 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1074 +hardened-sources-2.4.32-r4.ebuild:
1075 - security bumps
1076
1077 *hardened-sources-2.6.16-r6 (03 May 2006)
1078
1079 03 May 2006; John Mylchreest <johnm@gentoo.org>
1080 +hardened-sources-2.6.16-r6.ebuild:
1081 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1082
1083 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1084 hardened-sources-2.6.14-r8.ebuild:
1085 fix x86_64 build problem, this will delay the digest issue again for a short
1086 while but it will sort itself out
1087
1088 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1089 hardened-sources-2.6.14-r8.ebuild:
1090 bump hardened patchset
1091
1092 27 Apr 2006; Alec Warner <antarus@gentoo.org>
1093 files/digest-hardened-sources-2.4.32-r2,
1094 files/digest-hardened-sources-2.4.32-r3,
1095 files/digest-hardened-sources-2.6.14-r8, Manifest:
1096 Fixing duff SHA256 digests: Bug # 131293
1097
1098 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1099
1100 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1101 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1102 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1103 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1104 cleanup of old uneccessary sources
1105
1106 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1107 fix digest
1108
1109 *hardened-sources-2.6.14-r8 (20 Apr 2006)
1110
1111 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1112 +hardened-sources-2.6.14-r8.ebuild:
1113 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1114
1115 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1116 Turning on gpg-signing again, and recomitting
1117
1118 *hardened-sources-2.6.16-r4 (20 Apr 2006)
1119
1120 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1121 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1122 +hardened-sources-2.6.16-r4.ebuild:
1123 Fix numerous security vulns
1124
1125 *hardened-sources-2.4.32-r3 (16 Apr 2006)
1126
1127 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1128 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1129 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1130 - security bump for bug #112791. Removed old ebuilds
1131
1132 *hardened-sources-2.6.16-r3 (15 Apr 2006)
1133
1134 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1135 +hardened-sources-2.6.16-r3.ebuild:
1136 Removing silly localversion which I missed
1137
1138 *hardened-sources-2.6.14-r7 (14 Apr 2006)
1139
1140 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1141 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1142 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1143
1144 *hardened-sources-2.6.16-r2 (13 Apr 2006)
1145
1146 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1147 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1148 +hardened-sources-2.6.16-r2.ebuild:
1149 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1150 labels, dropping USERGROUP define fixes, since these were merged mainstream.
1151
1152 *hardened-sources-2.6.16-r1 (11 Apr 2006)
1153
1154 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1155 +hardened-sources-2.6.16-r1.ebuild:
1156 Bumping to include ppc build fix and 2.6.16.3
1157
1158 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1159 hardened-sources-2.6.14-r6.ebuild:
1160 Stable on x86; bug #127718
1161
1162 *hardened-sources-2.6.16 (31 Mar 2006)
1163
1164 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1165 +hardened-sources-2.6.16.ebuild:
1166 Bumping to new version of grsec, and kernel base. New squashfs. Based on
1167 2.6.16.1
1168
1169 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1170 hardened-sources-2.6.14-r6.ebuild:
1171 Stable on amd64, bug 127718.
1172
1173 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1174 Stable on ppc. Bug #127718
1175
1176 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1177 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1178 -hardened-sources-2.6.14-r4.ebuild:
1179 Cleanup.
1180
1181 *hardened-sources-2.6.14-r6 (15 Mar 2006)
1182
1183 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1184 +hardened-sources-2.6.14-r6.ebuild:
1185 Fixes grsec policy recreation bug and adds a
1186 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1187
1188 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1189 - stable on x86
1190
1191 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1192 hardened-sources-2.6.14-r5.ebuild:
1193 Stable on ppc.
1194
1195 *hardened-sources-2.6.14-r5 (01 Feb 2006)
1196
1197 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1198 +hardened-sources-2.6.14-r5.ebuild:
1199 fixing every known exploit
1200
1201 *hardened-sources-2.4.32-r2 (26 Jan 2006)
1202
1203 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1204 +hardened-sources-2.4.32-r2.ebuild:
1205 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1206
1207 *hardened-sources-2.6.14-r4 (12 Jan 2006)
1208
1209 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1210 - version bump for new genpatches which fix up a few sec holes
1211
1212 *hardened-sources-2.4.32-r1 (05 Jan 2006)
1213
1214 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1215 - revision bump to add misc vital linux kernel security patches.
1216
1217 *hardened-sources-2.6.14-r3 (30 Dec 2005)
1218
1219 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1220 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1221 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1222
1223 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1224 hardened-sources-2.6.14-r2.ebuild:
1225 making x86 & amd64 stable following testing.
1226
1227 *hardened-sources-2.6.14-r2 (27 Dec 2005)
1228
1229 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1230 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1231 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1232 network hooks.
1233
1234 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1235 hardened-sources-2.6.14-r1.ebuild:
1236 bumping to stable early for sec fix on x86 & amd64
1237
1238 *hardened-sources-2.6.14-r1 (05 Dec 2005)
1239
1240 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1241 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1242 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1243
1244 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1245 - stable on x86 security bug #114227 CAN-2005-3257
1246
1247 *hardened-sources-2.4.32 (19 Nov 2005)
1248
1249 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1250 +hardened-sources-2.4.32.ebuild:
1251 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1252 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1253 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1254 rsbac >> /etc/portage/package.use)
1255
1256 *hardened-sources-2.6.14 (14 Nov 2005)
1257
1258 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1259 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1260 Bumping 2.6 series to 2.6.14.2
1261
1262 *hardened-sources-2.6.13-r2 (20 Oct 2005)
1263
1264 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1265 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1266 +hardened-sources-2.6.13-r2.ebuild:
1267 Fixes minor build error in ppc.
1268
1269 *hardened-sources-2.6.13-r1 (17 Oct 2005)
1270
1271 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1272 +hardened-sources-2.6.13-r1.ebuild:
1273 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1274 2.6.13.4, fixes some major amd64 stability problems.
1275
1276 *hardened-sources-2.6.13 (16 Sep 2005)
1277
1278 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1279 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1280 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1281 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1282 users should test this thoroughly.
1283
1284 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1285 - stable on x86
1286
1287 *hardened-sources-2.6.11-r15 (27 Jun 2005)
1288
1289 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1290 +hardened-sources-2.6.11-r15.ebuild:
1291 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1292 grsec redefining curr_ip struct.
1293
1294 *hardened-sources-2.4.31 (20 Jun 2005)
1295
1296 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1297 initial import of 2.4.31 tree
1298
1299 *hardened-sources-2.6.11-r14 (14 Jun 2005)
1300
1301 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1302 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1303 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1304 naming scheme to abide by genpatches
1305
1306 *hardened-sources-2.6.11-r13 (18 May 2005)
1307
1308 18 May 2005; John Mylchreest <johnm@gentoo.org>
1309 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1310 Managed to mangle the Makefile patch from grsec, to miss out the grsec
1311 target. sorry about that. Fixes bug #93022
1312
1313 *hardened-sources-2.6.11-r12 (17 May 2005)
1314
1315 17 May 2005; John Mylchreest <johnm@gentoo.org>
1316 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1317 +hardened-sources-2.6.11-r12.ebuild:
1318 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1319 merges in genpatches-base
1320
1321 *hardened-sources-2.6.11-r12 (17 May 2005)
1322
1323 17 May 2005; John Mylchreest <johnm@gentoo.org>
1324 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1325 +hardened-sources-2.6.11-r12.ebuild:
1326 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1327 merges in genpatches-base
1328
1329 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1330 -files/2.4.27-cmdline-race.patch,
1331 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1332 -files/2.4.28-grsec-binfmt_a.out.patch,
1333 -files/2.4.28-grsec-cmdline-race.patch,
1334 -files/2.4.28-selinux-binfmt_a.out.patch,
1335 -files/2.4.28-selinux-cmdline-race.patch,
1336 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1337 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1338 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1339 cleanup..
1340
1341 *hardened-sources-2.4.30-r1 (21 Apr 2005)
1342
1343 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1344 - disable aout by default
1345
1346 *hardened-sources-2.4.30 (18 Apr 2005)
1347
1348 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1349 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1350 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1351 use
1352
1353 *hardened-sources-2.4.29 (30 Mar 2005)
1354
1355 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1356 +hardened-sources-2.4.29.ebuild:
1357 New hardened-patches-2.4-29.0 patchball.
1358 Removed SELinux support, upgraded GRSecurity to 2.1.4.
1359
1360 *hardened-sources-2.4.28-r5 (06 Mar 2005)
1361
1362 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1363 +hardened-sources-2.4.28-r5.ebuild:
1364 Added a fix for a PaX vulnerability.
1365
1366 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1367 hardened-sources-2.4.28-r4.ebuild:
1368 Stable on x86
1369
1370 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1371 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1372 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1373 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1374 - fixed/added RDEPEND= in all kernel-2 ebuilds
1375
1376 *hardened-sources-2.4.28-r4 (21 Jan 2005)
1377
1378 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1379 +hardened-sources-2.4.28-r4.ebuild:
1380 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1381 backport of neighbour hash updates.
1382
1383 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1384 hardened-sources-2.4.28-r3.ebuild:
1385 Stable on x86
1386
1387 *hardened-sources-2.6.10-r3 (20 Jan 2005)
1388
1389 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1390 +hardened-sources-2.6.10-r3.ebuild:
1391 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1392 in 2005.0
1393
1394 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1395 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1396 hardened-sources-2.4.28-r2.ebuild:
1397 Mark stable on x86
1398
1399 *hardened-sources-2.4.28-r3 (17 Jan 2005)
1400
1401 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1402 +hardened-sources-2.4.28-r3.ebuild:
1403 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1404
1405 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1406 hardened-sources-2.4.28.ebuild:
1407 Mark stable on x86.
1408
1409 *hardened-sources-2.4.28-r2 (13 Jan 2005)
1410
1411 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1412 +hardened-sources-2.4.28-r2.ebuild:
1413 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1414 Mazinger for grsecurity patches as well.
1415
1416 *hardened-sources-2.4.28-r1 (23 Dec 2004)
1417
1418 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1419 Security bump. Thank tocharian for rolling a new patchset...
1420
1421 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1422 +files/2.4.28-grsec-cmdline-race.patch,
1423 +files/2.4.28-selinux-binfmt_a.out.patch,
1424 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1425 - Round up remaining security patches that appear to be missing in 2.4.28. -
1426 PaX standalone updated to current. hgpv=28.1
1427
1428 *hardened-sources-2.4.28 (28 Nov 2004)
1429
1430 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1431 security bump. Thank tocharian for rolling a new patchset
1432
1433 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1434
1435 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1436 +hardened-sources-2.4.27-r3.ebuild:
1437 Applies the new 2.4-27.2 patchball which updates
1438 GRSecurity to the 2.0.1 version.
1439
1440 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1441
1442 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1443 +hardened-sources-2.4.27-r2.ebuild:
1444 Version bump.
1445 This version uses the new 2.4-27.1 patchball which updates
1446 both the SELinux PaX hooks patch and the SELinux headers.
1447
1448 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1449
1450 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1451 +hardened-sources-2.4.27-r1.ebuild,
1452 -hardened-sources-2.4.27.ebuild,
1453 +files/2.4.27-cmdline-race.patch:
1454 Version bump, fix for cmdline race. See bug #59905.
1455
1456 *hardened-sources-2.4.26-r6 (09 Aug 2004)
1457
1458 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1459 +hardened-sources-2.4.26-r6.ebuild,
1460 -hardened-sources-2.4.26-r5.ebuild,
1461 -hardened-sources-2.4.26-r4.ebuild,
1462 +files/2.4.26-cmdline-race.patch:
1463 Version bump, fix for cmdline race. See bug #59905.
1464
1465 *hardened-sources-2.4.27 (08 Aug 2004)
1466
1467 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1468 +hardened-sources-2.4.27.ebuild,
1469 +files/2.4.27-CAN-2004-0394.patch:
1470 Ported the patchball to the 2.4.27 kernel version.
1471
1472 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1473
1474 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1475 +hardened-sources-2.4.26-r5.ebuild:
1476 Updated to use the new hardened-patches-2.4-26.1 patchball.
1477 It adds the following features:
1478 - Squashfs
1479 - Ebtables
1480 - Netdev random (core+drivers)
1481 - Watchdog Timer (WDT) fix.
1482
1483 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1484
1485 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1486 +hardened-sources-2.4.26-r4.ebuild,
1487 +files/2.4.26-CAN-2004-0415.patch,
1488 -hardened-sources-2.4.26-3:
1489 Version bump, fix for CAN 0415, see bug #59378.
1490
1491 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1492
1493 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1494 +hardened-sources-2.4.26-r3.ebuild,
1495 +files/2.4.26-CAN-2004-0497.patch,
1496 -hardened-sources-2.4.26-r2.ebuild:
1497 Version bump, fixed CAN 0497, see bug #56171.
1498
1499 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1500
1501 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1502 +hardened-sources-2.4.26-r2.ebuild,
1503 +files/2.4.26-CAN-2004-0495.patch,
1504 +files/2.4.26-CAN-2004-0535.patch,
1505 -hardened-sources-2.4.26-r1.ebuild:
1506 Fixes for both CAN 0495 and 0535, see bug #54976
1507
1508 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1509 hardened-sources-2.4.26-r1.ebuild:
1510 QA - fix use invocation
1511
1512 *hardened-sources-2.4.26-r1 (22 June 2004)
1513
1514 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1515 +hardened-sources-2.4.26-r1.ebuild,
1516 +files/2.4.26-CAN-2004-0394.patch,
1517 +files/2.4.26-signal-race.patch,
1518 -hardened-sources-2.4.26.ebuild,
1519 -hardened-sources-2.4.24-r3.ebuild:
1520 Version bump for the CAN-2004-0394 issue and bug #53804
1521 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1522
1523
1524 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1525 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1526 Masked hardened-sources-2.4.26.ebuild broken for ppc
1527
1528 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1529 hardened-sources-2.4.24-r3.ebuild:
1530 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1531
1532 *hardened-sources-2.4.26 (29 May 2004)
1533
1534 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1535 +hardened-sources-2.4.26.ebuild:
1536 Updated hardened-sources for the 2.4.26 kernel
1537 Removed broken components, updated almost everything.
1538
1539 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1540
1541 17 Apr 2004; <plasmaroo@gentoo.org>
1542 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1543 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1544 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1545 +hardened-sources-2.4.24-r3.ebuild:
1546 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1547 vulnerabilities. Old revisions removed.
1548
1549 *hardened-sources-2.4.24-r2 (15 Apr 2004)
1550
1551 15 Apr 2004; <plasmaroo@gentoo.org>
1552 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1553 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1554 Version bump for the CAN-2004-0109 issue; bug #47881.
1555
1556 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1557 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1558 Add eutils to inherit.
1559
1560 *hardened-sources-2.4.24-r1 (19 Feb 2004)
1561
1562 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1563 files/hardened-sources-2.4.24.munmap.patch:
1564 Added the patch for the mremap/munmap vulnerability. Bug #42024.
1565
1566 *hardened-sources-2.4.24 (06 Feb 2004)
1567
1568 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1569 hardened-sources-2.4.24.ebuild:
1570 Version bump, updated most of the components.
1571 This release includes the following:
1572
1573 - Hardened security
1574 - Netfilter patch-o-matic 20031219
1575 - FreeSWAN 2.04 & x509 1.4.8
1576 - EVMS 2.2.2
1577 - XFS 1.3.1
1578 - cryptoloop jari
1579 - grsecurity 2.0-rc4
1580 - SELinux
1581 - PaX 200402060000
1582 - PaX Obscurity 200308302223
1583 - Others...
1584
1585 Neither -ck nor systrace are included anymore.
1586
1587 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1588
1589 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1590 hardened-sources-2.4.22-r2.ebuild:
1591 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1592
1593 *hardened-sources-2.4.22-r1 (02 Dec 2003)
1594
1595 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1596 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1597
1598 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1599 hardened-sources-2.4.22-r1.ebuild:
1600 Version bump for the 'do_brk' vulnerability.
1601
1602 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1603 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1604 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1605 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1606 Fix the 'do_brk' vulnerability.
1607
1608 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1609 hardened-sources-2.4.22.ebuild:
1610 - Removed the src_install() portion for SELinux flask
1611 components. These are no longer handled in the kernel
1612 so this code was not necessary.
1613
1614 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1615 New 2.4.22 based hardened-sources thanks to
1616 Phil West <p.west@computer.org>.
1617
1618 These sources include:
1619 - New SELinux API
1620 - Updated CK-base
1621 - Updated GRSec
1622 - Systrace
1623 - SuperFreeS/WAN 1.99.8
1624 - Propolice kernel build support
1625 - EVMS
1626 - Other various security related patches
1627
1628 *hardened-sources-2.4.21 (14 Sep 2003)
1629
1630 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1631 Updated hardened-sources based on the 2.4.21 Linux kernel.
1632 This includes updates to most major components such as:
1633 - ck-base-0306300059
1634 - selinux-2.4-2003071106
1635 - grsecurity-2.0-rc1
1636 - Updated IPTables patch-o-matic
1637 - Updated SuperFreeS/WAN
1638
1639 Thanks to Phil West <pwest@computer.org> for his work in getting this
1640 updated patch set ready for the 2.4.21 based kernel.
1641
1642 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1643 Initial import of hardened-sources-2.4.20-r4. This revision
1644 includes only a few changes, but one of these is an important
1645 security fix. It is recommended all users of hardened-sources
1646 upgrade to this release.
1647
1648 - ioperm bug fix
1649 - fixed compilation failure when building without GRSec
1650
1651 SAL (Secure Auditing for Linux) is NOT included in this revision
1652 due to time constraints, but is planned for inclusion in the near
1653 future.
1654
1655 *hardened-sources-2.4.20-r2 (12 Jun 2003)
1656
1657 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1658 hardened-sources-2.4.20-r3.ebuild:
1659 Add Header...
1660
1661 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1662 hardened-sources-2.4.20-r3.ebuild:
1663 Removed warnings from ebuild. This kernel should be safe to
1664 use at this point.
1665
1666 *hardened-sources-2.4.20-r3 (08 Jun 2003)
1667
1668 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1669 hardened-sources-2.4.20-r3.ebuild:
1670 New revision. Includes the following changes over -r2:
1671
1672 - ck7-base (O(1), preempt, low latency)
1673 - Super FreeS/WAN 1.99.7rc2
1674 - PaX for the LSM/SELinux branch
1675 - GRSecurity 2.0-pre4 (role based access control)
1676 - Systrace 1.3
1677 - EXT3 fixes
1678 - EVMS 2.0.1
1679 - GCC 3.1+ compile optimizations
1680 - ProPolice kernel build support
1681 - Hashing table security fixes
1682
1683 *hardened-sources-2.4.20-r1 (09 Apr 2003)
1684
1685 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1686 Initial import of hardened-sources-r2. This new
1687 ebuild includes many new performance and security
1688 related patches. As in -r1, it will patch in
1689 LSM/SELinux if "selinux" is in USE, otherwise it
1690 will patch in GRSecurity. The following patches
1691 are included in this revision:
1692
1693 - O(1) Scheduler, Low Latency, and Preempt
1694 (pulled from the base CK patch)
1695 - ptrace exploit patch for the LSM kernel
1696 (the GRSec patch already fixes this)
1697 - LSM 2.4-2003040709
1698 - SELinux 2.4-2003040709
1699 - Systrace v1.2
1700 - IPTables patch-o-matic base patches - 20030107
1701 - CryptoAPI 2.4.20.1 w/ loop-jari patch
1702 - Super FreeS/WAN 1.99.6.1
1703 - GRSecurity 1.9.9g
1704 - MPPE
1705 - EXT3 data journal fix
1706 - CIPE 1.5.4
1707
1708 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1709 hardened-sources-2.4.20-r1.ebuild, manifest:
1710 Updated to install flask components correctly for selinux.
1711
1712 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1713 hardened-sources-2.4.20-r1.ebuild:
1714 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1715 is patched in instead. Ptrace patches for selinux have also been added. In
1716 either case, systrace support will be patched in as well.
1717
1718 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1719 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1720 Revision bump for new sources.
1721
1722 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1723 hardened-sources-2.4.20-r1.ebuild:
1724 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1725
1726 *hardened-sources-2.4.20 (30 Mar 2003)
1727
1728 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1729 hardened-sources-2.4.20.ebuild:
1730 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20