/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.311 - (show annotations) (download)
Sun May 31 12:58:45 2009 UTC (5 years, 6 months ago) by nixnut
Branch: MAIN
Changes since 1.310: +4 -1 lines
ppc stable
(Portage version: 2.1.6.13/cvs/Linux ppc)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.310 2009/05/29 07:53:10 gengor Exp $
4
5 31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
6 ppc stable
7
8 29 May 2009; Gordon Malm <gengor@gentoo.org>
9 -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
10 Stable amd64/x86 and remove old.
11
12 *hardened-sources-2.6.29 (25 May 2009)
13
14 25 May 2009; Gordon Malm <gengor@gentoo.org>
15 +hardened-sources-2.6.29.ebuild:
16 Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
17 release candidates.
18
19 *hardened-sources-2.6.28-r9 (25 May 2009)
20
21 25 May 2009; Gordon Malm <gengor@gentoo.org>
22 -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
23 Fix x86-32 boot failure (regression vs. 2.6.28-r7).
24
25 *hardened-sources-2.6.28-r8 (18 May 2009)
26
27 18 May 2009; Gordon Malm <gengor@gentoo.org>
28 +hardened-sources-2.6.28-r8.ebuild:
29 Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
30 and #262862 among others.
31
32 01 May 2009; Gordon Malm <gengor@gentoo.org>
33 hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
34 hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
35 Remove unnecessary mirror://gentoo from SRC_URI.
36
37 05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
38 ppc stable
39
40 30 Mar 2009; Gordon Malm <gengor@gentoo.org>
41 -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
42 Stable amd64/x86 and remove old.
43
44 *hardened-sources-2.6.28-r7 (27 Mar 2009)
45
46 27 Mar 2009; Gordon Malm <gengor@gentoo.org>
47 +hardened-sources-2.6.28-r7.ebuild:
48 Add Linux 2.6.28.9. Fix bugs 263424, 263870.
49
50 22 Mar 2009; Gordon Malm <gengor@gentoo.org>
51 -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
52 -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
53 -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
54 Stable amd64/x86 and remove old versions.
55
56 22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
57 ppc stable
58
59 *hardened-sources-2.6.28-r6 (21 Mar 2009)
60
61 21 Mar 2009; Gordon Malm <gengor@gentoo.org>
62 -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
63 Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
64
65 *hardened-sources-2.6.28-r5 (20 Mar 2009)
66
67 20 Mar 2009; Gordon Malm <gengor@gentoo.org>
68 +hardened-sources-2.6.28-r5.ebuild:
69 Bump genpatches. Grsecurity patch bump, fixes bug #262752.
70
71 20 Mar 2009; Gordon Malm <gengor@gentoo.org>
72 hardened-sources-2.6.28-r4.ebuild:
73 Stable amd64/x86.
74
75 *hardened-sources-2.6.28-r4 (18 Mar 2009)
76
77 18 Mar 2009; Gordon Malm <gengor@gentoo.org>
78 +hardened-sources-2.6.28-r4.ebuild:
79 Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
80 compilation with CPA_DEBUG and more.
81
82 17 Mar 2009; Gordon Malm <gengor@gentoo.org>
83 hardened-sources-2.6.28-r3.ebuild:
84 Quick stable amd64/x86.
85
86 *hardened-sources-2.6.28-r3 (15 Mar 2009)
87
88 15 Mar 2009; Gordon Malm <gengor@gentoo.org>
89 +hardened-sources-2.6.28-r3.ebuild:
90 Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
91
92 14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
93 ppc stable
94
95 13 Mar 2009; Gordon Malm <gengor@gentoo.org>
96 hardened-sources-2.6.28-r2.ebuild:
97 Stable amd64/x86.
98
99 *hardened-sources-2.6.28-r2 (11 Mar 2009)
100
101 11 Mar 2009; Gordon Malm <gengor@gentoo.org>
102 +hardened-sources-2.6.28-r2.ebuild:
103 Version bump bringing in latest grsecurity patch.
104
105 *hardened-sources-2.6.28-r1 (09 Mar 2009)
106
107 09 Mar 2009; Gordon Malm <gengor@gentoo.org>
108 -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
109 Version bump and remove old.
110
111 07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
112 ppc stable
113
114 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
115 hardened-sources-2.6.27-r8.ebuild:
116 Remove amd64 testing keyword, bug 256226.
117
118 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
119 hardened-sources-2.6.27-r8.ebuild:
120 Revert amd64 stable, bug #256226.
121
122 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
123 hardened-sources-2.6.27-r8.ebuild:
124 Stable on amd64/x86.
125
126 24 Feb 2009; Gordon Malm <gengor@gentoo.org>
127 -hardened-sources-2.6.27-r6.ebuild:
128 Remove old 2.6.27 release.
129
130 *hardened-sources-2.6.27-r8 (24 Feb 2009)
131
132 24 Feb 2009; Gordon Malm <gengor@gentoo.org>
133 +hardened-sources-2.6.27-r8.ebuild:
134 Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
135 and probably more.
136
137 04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
138 ppc stable
139
140 *hardened-sources-2.6.28 (25 Jan 2009)
141
142 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
143 +hardened-sources-2.6.28.ebuild:
144 Initial 2.6.28 release.
145
146 *hardened-sources-2.6.27-r7 (25 Jan 2009)
147
148 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
149 +hardened-sources-2.6.27-r7.ebuild:
150 Bump to Linux 2.6.27.13.
151
152 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
153 hardened-sources-2.6.26-r9.ebuild:
154 Stable amd64/x86.
155
156 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
157 -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
158 -hardened-sources-2.6.27-r5.ebuild:
159 Remove problem versions.
160
161 *hardened-sources-2.6.27-r6 (24 Jan 2009)
162
163 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
164 +hardened-sources-2.6.27-r6.ebuild:
165 Revert PaX test29 to test30 changes. Fixes bug 256226.
166
167 *hardened-sources-2.6.27-r5 (24 Jan 2009)
168
169 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
170 +hardened-sources-2.6.27-r5.ebuild:
171 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
172 254843.
173
174 23 Jan 2009; Gordon Malm <gengor@gentoo.org>
175 -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
176 -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
177 Remove problem versions.
178
179 23 Jan 2009; nixnut <nixnut@gentoo.org>
180 hardened-sources-2.6.25-r13.ebuild:
181 ppc stable
182
183 21 Jan 2009; Gordon Malm <gengor@gentoo.org>
184 hardened-sources-2.6.25-r13.ebuild:
185 Fasttrack stable amd64/x86.
186
187 *hardened-sources-2.6.26-r9 (21 Jan 2009)
188
189 21 Jan 2009; Gordon Malm <gengor@gentoo.org>
190 +hardened-sources-2.6.26-r9.ebuild:
191 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
192
193 *hardened-sources-2.6.25-r13 (20 Jan 2009)
194
195 20 Jan 2009; Gordon Malm <gengor@gentoo.org>
196 +hardened-sources-2.6.25-r13.ebuild:
197 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
198
199 20 Jan 2009; nixnut <nixnut@gentoo.org>
200 hardened-sources-2.6.25-r12.ebuild:
201 ppc stable
202
203 17 Jan 2009; Gordon Malm <gengor@gentoo.org>
204 hardened-sources-2.6.25-r12.ebuild:
205 Stable amd64/x86.
206
207 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
208 -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
209 -hardened-sources-2.6.27-r2.ebuild:
210 Clean out old versions.
211
212 *hardened-sources-2.6.27-r4 (14 Jan 2009)
213 *hardened-sources-2.6.26-r8 (14 Jan 2009)
214 *hardened-sources-2.6.25-r12 (14 Jan 2009)
215
216 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
217 +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
218 +hardened-sources-2.6.27-r4.ebuild:
219 2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
220 2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
221 2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
222 grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
223
224 15 Dec 2008; nixnut <nixnut@gentoo.org>
225 hardened-sources-2.6.25-r11.ebuild:
226 Stable on ppc
227
228 09 Dec 2008; Gordon Malm <gengor@gentoo.org>
229 hardened-sources-2.6.25-r11.ebuild:
230 Stable amd64/x86.
231
232 *hardened-sources-2.6.27-r3 (07 Dec 2008)
233
234 07 Dec 2008; Gordon Malm <gengor@gentoo.org>
235 +hardened-sources-2.6.27-r3.ebuild:
236 Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
237 Fixes bug #248754, #249729 and #246607.
238
239 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
240 -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
241 Remove old versions.
242
243 *hardened-sources-2.6.26-r7 (03 Dec 2008)
244 *hardened-sources-2.6.25-r11 (03 Dec 2008)
245
246 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
247 +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
248 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
249 2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
250 Both include many backports from 2.6.27.{6,7} -stable releases.
251
252 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
253 -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
254 Remove versions broken on ARCHes != x86/amd64.
255
256 *hardened-sources-2.6.27-r2 (24 Nov 2008)
257
258 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
259 +hardened-sources-2.6.27-r2.ebuild:
260 Bump to Linux 2.6.27.7 and latest grsecurity patch.
261
262 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
263 -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
264 Remove old versions.
265
266 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
267 hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
268 Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
269
270 16 Nov 2008; nixnut <nixnut@gentoo.org>
271 hardened-sources-2.6.25-r10.ebuild:
272 Stable on ppc
273
274 15 Nov 2008; Gordon Malm <gengor@gentoo.org>
275 hardened-sources-2.6.25-r10.ebuild:
276 Stable amd64/x86.
277
278 *hardened-sources-2.6.26-r6 (12 Nov 2008)
279
280 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
281 +hardened-sources-2.6.26-r6.ebuild:
282 Bump to Linux 2.6.26.8 and fix security bug #245650.
283
284 *hardened-sources-2.6.25-r10 (12 Nov 2008)
285
286 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
287 +hardened-sources-2.6.25-r10.ebuild:
288 Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
289
290 *hardened-sources-2.6.27-r1 (09 Nov 2008)
291
292 09 Nov 2008; Gordon Malm <gengor@gentoo.org>
293 +hardened-sources-2.6.27-r1.ebuild:
294 Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
295
296 *hardened-sources-2.6.27 (04 Nov 2008)
297
298 04 Nov 2008; Gordon Malm <gengor@gentoo.org>
299 +hardened-sources-2.6.27.ebuild:
300 Initial 2.6.27 release.
301
302 *hardened-sources-2.6.26-r5 (03 Nov 2008)
303
304 03 Nov 2008; Gordon Malm <gengor@gentoo.org>
305 -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
306 +hardened-sources-2.6.26-r5.ebuild:
307 2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
308 Clean out some old versions.
309
310 02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
311 Stable on ppc
312
313 30 Oct 2008; Gordon Malm <gengor@gentoo.org>
314 hardened-sources-2.6.25-r9.ebuild:
315 Stable on amd64/x86.
316
317 *hardened-sources-2.6.25-r9 (26 Oct 2008)
318
319 26 Oct 2008; Gordon Malm <gengor@gentoo.org>
320 +hardened-sources-2.6.25-r9.ebuild:
321 Update to Linux 2.6.25.19
322
323 15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
324 Stable on ppc
325
326 *hardened-sources-2.6.26-r4 (14 Oct 2008)
327
328 14 Oct 2008; Gordon Malm <gengor@gentoo.org>
329 -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
330 Update to latest grsecurity patch, fixing building of non-modular kernels.
331
332 *hardened-sources-2.6.26-r3 (12 Oct 2008)
333
334 12 Oct 2008; Gordon Malm <gengor@gentoo.org>
335 hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
336 +hardened-sources-2.6.26-r3.ebuild:
337 2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
338 2.6.26-r1: Removed.
339 2.6.25-r8: Stable amd64/x86.
340
341 *hardened-sources-2.6.25-r8 (09 Oct 2008)
342
343 09 Oct 2008; Gordon Malm <gengor@gentoo.org>
344 -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
345 -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
346 Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
347
348 20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
349 Stable on ppc
350
351 17 Sep 2008; Gordon Malm <gengor@gentoo.org>
352 hardened-sources-2.6.25-r7.ebuild:
353 Stable amd64/x86.
354
355 *hardened-sources-2.6.26-r2 (13 Sep 2008)
356
357 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
358 -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
359 2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
360 PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
361
362 *hardened-sources-2.6.25-r7 (13 Sep 2008)
363
364 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
365 +hardened-sources-2.6.25-r7.ebuild:
366 Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
367
368 10 Sep 2008; Gordon Malm <gengor@gentoo.org>
369 hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
370 hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
371 hardened-sources-2.6.26-r1.ebuild:
372 Update DESCRIPTION and HGPV_URI.
373
374 *hardened-sources-2.6.25-r6 (09 Sep 2008)
375
376 09 Sep 2008; Gordon Malm <gengor@gentoo.org>
377 -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
378 2.6.25-r6: Update to Linux 2.6.25.17.
379 2.6.24-r3: Removed.
380
381 08 Sep 2008; Gordon Malm <gengor@gentoo.org>
382 hardened-sources-2.6.25-r5.ebuild:
383 Stable on amd64/x86
384
385 07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
386 Update my email address.
387
388 31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
389 stable on ppc
390
391 *hardened-sources-2.6.26-r1 (23 Aug 2008)
392 *hardened-sources-2.6.25-r5 (23 Aug 2008)
393
394 23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
395 -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
396 hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
397 +hardened-sources-2.6.26-r1.ebuild:
398 Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
399 security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
400 fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
401 Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
402 (gengor).
403
404 *hardened-sources-2.6.26 (18 Aug 2008)
405 *hardened-sources-2.6.25-r4 (18 Aug 2008)
406
407 18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
408 +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
409 - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
410 to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
411 2.6.25-r2: Removed.
412
413 16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
414 Remove phreak from metadata.xml (#96398)
415
416 *hardened-sources-2.6.25-r3 (31 Jul 2008)
417
418 31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
419 -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
420 +hardened-sources-2.6.25-r3.ebuild:
421 - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
422 fixes, including security bug #231750.
423
424 28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
425 Stable on ppc
426
427 *hardened-sources-2.6.25-r2 (05 Jul 2008)
428
429 05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
430 -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
431 +hardened-sources-2.6.25-r2.ebuild:
432 2.6.23-r4: Stable x86/amd64
433 2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
434 2.6.23-r{11,12}: Removed due to multiple vulns.
435 (gengor & kerframil)
436
437 04 Jul 2008; nixnut <nixnut@gentoo.org>
438 hardened-sources-2.6.23-r13.ebuild:
439 Stable on ppc
440
441 *hardened-sources-2.6.25-r1 (30 Jun 2008)
442
443 30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
444 +hardened-sources-2.6.25-r1.ebuild:
445 2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
446 grsecurity release. 2.6.23-r13: x86/amd64 stable
447
448 *hardened-sources-2.6.25 (17 Jun 2008)
449 *hardened-sources-2.6.24-r3 (17 Jun 2008)
450 *hardened-sources-2.6.23-r13 (17 Jun 2008)
451
452 17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
453 +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
454 * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
455 #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
456 #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
457 2.6.25: Initial 2.6.25 release.
458
459 15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
460 - fasttrack to stable x86/amd64
461
462 11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
463 Fix broken digest for linux-2.6.24.tar.bz2.
464
465 *hardened-sources-2.6.24-r2 (11 May 2008)
466 *hardened-sources-2.6.23-r12 (11 May 2008)
467
468 11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
469 -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
470 +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
471 -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
472 proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
473 220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
474 security bugs 219901, 220691, 220975, 220979, 221123. New
475 genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
476 should be removed as far as I'm concerned, everything else remove due to
477 vulnerable to numerous security bugs or brokeness.
478
479 10 May 2008; nixnut <nixnut@gentoo.org>
480 hardened-sources-2.6.23-r11.ebuild:
481 Stable on ppc
482
483 05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
484 - -r11 stable on x86/amd64
485
486 *hardened-sources-2.6.23-r11 (01 May 2008)
487
488 01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
489 - version bump to fix ulgy linux bugs
490
491 *hardened-sources-2.6.24-r1 (30 Apr 2008)
492
493 30 Apr 2008; Christian Heim <phreak@gentoo.org>
494 +hardened-sources-2.6.24-r1.ebuild:
495 Revision bump (thanks to Kerin and Gordon, again), pulling
496 genpatches-2.6.24-7, solving #219089. Additionally contains further security
497 fixes plus some minor updates.
498
499 *hardened-sources-2.6.23-r10 (30 Apr 2008)
500
501 30 Apr 2008; Christian Heim <phreak@gentoo.org>
502 +hardened-sources-2.6.23-r10.ebuild:
503 Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
504 Additional contains "various other fixes".
505
506 09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
507 Update the longdescription in metadata, thanks to Gordon Malm.
508
509 08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
510 Stable on ppc wrt bug #213255
511
512 07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
513 -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
514 - stable on x86/amd64 per request. Removed obsolete ebuilds
515
516 *hardened-sources-2.6.24 (07 Apr 2008)
517
518 07 Apr 2008; Christian Heim <phreak@gentoo.org>
519 +hardened-sources-2.6.24.ebuild:
520 Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
521 <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
522 for the many contributions and their continued effort in #216612) based on
523 2.6.24 and genpatches-2.6.24-5.
524
525 The current ebuild/patchset contains these things:
526 * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
527 * Introduces bespoke server and workstation oriented security levels
528 * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
529
530 30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
531 Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
532 maintaining it).
533
534 24 Mar 2008; Christian Heim <phreak@gentoo.org>
535 hardened-sources-2.4.35-r2.ebuild:
536 Fixing SRC_URI for 2.4.35-r2.
537
538 *hardened-sources-2.6.23-r9 (22 Mar 2008)
539
540 22 Mar 2008; Christian Heim <phreak@gentoo.org>
541 +hardened-sources-2.6.23-r9.ebuild:
542 * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
543 * Change the default GIDs for some grsecurity options
544 * Revamp the Hardened [Gentoo] security level and make it the default level
545 * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
546 * Fix a recursive lock -- call to capable() within ptrace_attach()
547 * Fix bug that allows audit and iscsi operations to be controlled via netlink
548
549 *hardened-sources-2.6.23-r8 (27 Feb 2008)
550
551 27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
552 - version bump from Kerin Millar bug 210026
553
554 17 Feb 2008; <solar@gentoo.org> metadata.xml,
555 -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
556 -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
557 -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
558 - stable on x86 and remove old ebuilds
559
560 15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
561 - stable on amd64 per request of amd64 lead
562
563 *hardened-sources-2.6.23-r7 (11 Feb 2008)
564
565 11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
566 - version bump from kerin.millar
567 Changes:
568
569 * Bump to genpatches-base-2.6.23-9
570 * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
571 * Disables COMPAT_VDSO in x86/defconfig
572 * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
573
574 25 Jan 2008; Christian Heim <phreak@gentoo.org>
575 -hardened-sources-2.6.22-r8.ebuild:
576 Cleaning up old versions.
577
578 *hardened-sources-2.6.23-r6 (25 Jan 2008)
579
580 25 Jan 2008; Christian Heim <phreak@gentoo.org>
581 -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
582 Revision bump, pulling in the latest genpatches.
583
584 *hardened-sources-2.6.23-r5 (24 Dec 2007)
585
586 24 Dec 2007; Christian Heim <phreak@gentoo.org>
587 hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
588 hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
589 hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
590 Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
591
592 24 Dec 2007; Christian Heim <phreak@gentoo.org>
593 -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
594 -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
595 -hardened-sources-2.6.23-r3.ebuild:
596 Cleaning out some unused, old versions.
597
598 24 Dec 2007; Christian Heim <phreak@gentoo.org>
599 hardened-sources-2.6.23-r4.ebuild:
600 Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
601 in the tree for long, but there isn't much of a difference between this and
602 -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
603
604 *hardened-sources-2.6.23-r4 (23 Dec 2007)
605
606 23 Dec 2007; Christian Heim <phreak@gentoo.org>
607 +hardened-sources-2.6.23-r4.ebuild:
608 Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
609
610 *hardened-sources-2.6.23-r3 (04 Dec 2007)
611
612 04 Dec 2007; Christian Heim <phreak@gentoo.org>
613 +hardened-sources-2.6.23-r3.ebuild:
614 Revision bump, pulling in 2.6.23.9.
615
616 *hardened-sources-2.6.23-r2 (25 Nov 2007)
617
618 25 Nov 2007; Christian Heim <phreak@gentoo.org>
619 +hardened-sources-2.6.23-r2.ebuild:
620 Updated patchset, thanks to solar.
621
622 *hardened-sources-2.6.23-r1 (31 Oct 2007)
623
624 31 Oct 2007; Christian Heim <phreak@gentoo.org>
625 +hardened-sources-2.6.23-r1.ebuild:
626 Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
627
628 29 Oct 2007; <solar@gentoo.org> metadata.xml:
629 - update metadata.xml
630
631 25 Oct 2007; Christian Heim <phreak@gentoo.org>
632 hardened-sources-2.6.22-r8.ebuild:
633 Marking 2.6.22-r8 stable on amd64 and x86.
634
635 21 Oct 2007; Christian Heim <phreak@gentoo.org>
636 -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
637 -hardened-sources-2.6.21-r4.ebuild:
638 Removing old ebuilds.
639
640 *hardened-sources-2.4.35-r2 (21 Oct 2007)
641
642 21 Oct 2007; Christian Heim <phreak@gentoo.org>
643 +hardened-sources-2.4.35-r2.ebuild:
644 Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
645 patches.
646
647 *hardened-sources-2.6.22-r8 (21 Oct 2007)
648
649 21 Oct 2007; Christian Heim <phreak@gentoo.org>
650 +hardened-sources-2.6.22-r8.ebuild:
651 Yet another new patch, hopefully fixing the remaining issues we had w/
652 2.6.22. Candidate for stabling.
653
654 *hardened-sources-2.6.23 (13 Oct 2007)
655
656 13 Oct 2007; Christian Heim <phreak@gentoo.org>
657 +hardened-sources-2.6.23.ebuild:
658 Initial hardened-sources-2.6.23. If people still have problems w/ bug
659 194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
660
661 11 Oct 2007; Christian Heim <phreak@gentoo.org>
662 hardened-sources-2.6.20-r10.ebuild:
663 Pulling in yet another new genpatches version, fixing the PWC bug for real.
664
665 04 Oct 2007; Christian Heim <phreak@gentoo.org>
666 -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
667 Removing old versions.
668
669 *hardened-sources-2.6.22-r7 (01 Oct 2007)
670
671 01 Oct 2007; Christian Heim <phreak@gentoo.org>
672 +hardened-sources-2.6.22-r7.ebuild:
673 Revision bump, pulling in a newer patch. Should fix #194276.
674
675 30 Sep 2007; Christian Heim <phreak@gentoo.org>
676 hardened-sources-2.6.20-r10.ebuild:
677 Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
678 Mike Doty).
679
680 *hardened-sources-2.6.22-r6 (26 Sep 2007)
681
682 26 Sep 2007; Christian Heim <phreak@gentoo.org>
683 +hardened-sources-2.6.22-r6.ebuild:
684 Revision bump, grabbing up till Linux 2.6.22.9.
685
686 24 Sep 2007; Christian Heim <phreak@gentoo.org>
687 -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
688 Cleaning up further.
689
690 *hardened-sources-2.6.20-r10 (24 Sep 2007)
691
692 24 Sep 2007; Christian Heim <phreak@gentoo.org>
693 -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
694 +hardened-sources-2.6.20-r10.ebuild:
695 Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
696 revisions.
697
698 *hardened-sources-2.6.22-r5 (22 Sep 2007)
699
700 22 Sep 2007; Christian Heim <phreak@gentoo.org>
701 +hardened-sources-2.6.22-r5.ebuild:
702 Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
703
704 17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
705 Removing johnm from metadata.xml (see #186467 for reference).
706
707 *hardened-sources-2.6.22-r4 (17 Sep 2007)
708
709 17 Sep 2007; Christian Heim <phreak@gentoo.org>
710 +hardened-sources-2.6.22-r4.ebuild:
711 Revision bump, hopefully fixing all those weird PAX failures.
712
713 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
714 Updating the metadata.xml.
715
716 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
717 Removing tocharian from metadata due to his retirement (see #71718 for
718 reference).
719
720 *hardened-sources-2.6.20-r9 (30 Aug 2007)
721
722 30 Aug 2007; Christian Heim <phreak@gentoo.org>
723 +hardened-sources-2.6.20-r9.ebuild:
724 Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
725
726 29 Aug 2007; Christian Heim <phreak@gentoo.org>
727 -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
728 -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
729 -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
730 -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
731 -hardened-sources-2.6.22-r2.ebuild:
732 Removing some redundant versions.
733
734 *hardened-sources-2.4.35-r1 (29 Aug 2007)
735
736 29 Aug 2007; Christian Heim <phreak@gentoo.org>
737 +hardened-sources-2.4.35-r1.ebuild:
738 Revision bump, new grsecurity patch.
739
740 *hardened-sources-2.6.20-r8 (26 Aug 2007)
741
742 26 Aug 2007; Christian Heim <phreak@gentoo.org>
743 +hardened-sources-2.6.20-r8.ebuild:
744 Revision bump for Linux 2.6.20.17.
745
746 *hardened-sources-2.6.22-r3 (22 Aug 2007)
747
748 22 Aug 2007; Christian Heim <phreak@gentoo.org>
749 +hardened-sources-2.6.22-r3.ebuild:
750 Revision bump for Linux 2.6.22.4.
751
752 16 Aug 2007; Christian Heim <phreak@gentoo.org>
753 hardened-sources-2.6.22-r2.ebuild:
754 Updated patchset, to fix the alignment against 2.6.22.3.
755
756 *hardened-sources-2.6.22-r2 (16 Aug 2007)
757
758 16 Aug 2007; Christian Heim <phreak@gentoo.org>
759 +hardened-sources-2.6.22-r2.ebuild:
760 Revision bump for Linux 2.6.22.3.
761
762 *hardened-sources-2.4.35 (16 Aug 2007)
763
764 16 Aug 2007; Christian Heim <phreak@gentoo.org>
765 +hardened-sources-2.4.35.ebuild:
766 Version bump, initial version for Linux 2.4.35.
767
768 *hardened-sources-2.6.21-r4 (16 Aug 2007)
769
770 16 Aug 2007; Christian Heim <phreak@gentoo.org>
771 +hardened-sources-2.6.21-r4.ebuild:
772 Revision bump for Linux 2.6.21.6.
773
774 *hardened-sources-2.6.20-r7 (16 Aug 2007)
775
776 16 Aug 2007; Christian Heim <phreak@gentoo.org>
777 +hardened-sources-2.6.20-r7.ebuild:
778 Revision bump for Linux 2.6.20.16.
779
780 *hardened-sources-2.6.22-r1 (13 Aug 2007)
781
782 13 Aug 2007; Christian Heim <phreak@gentoo.org>
783 +hardened-sources-2.6.22-r1.ebuild:
784 Yet another revision bump.
785
786 *hardened-sources-2.6.22 (10 Aug 2007)
787
788 10 Aug 2007; Christian Heim <phreak@gentoo.org>
789 +hardened-sources-2.6.22.ebuild:
790 Initial release for 2.6.22. If you are using hardened-sources on a desktop
791 machine (P4 or newer), be aware you might need to disable
792 CONFIG_PAX_PAGEEXEC.
793
794 04 Aug 2007; Christian Heim <phreak@gentoo.org>
795 hardened-sources-2.6.20-r6.ebuild:
796 Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
797 2.6.20.15.
798
799 10 Jul 2007; Christian Heim <phreak@gentoo.org>
800 hardened-sources-2.6.20-r5.ebuild:
801 Marking hardened-sources-2.6.20-r5 stable on ppc.
802
803 10 Jul 2007; Christian Heim <phreak@gentoo.org>
804 -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
805 Cleanup.
806
807 *hardened-sources-2.6.20-r6 (08 Jul 2007)
808
809 08 Jul 2007; Christian Heim <phreak@gentoo.org>
810 +hardened-sources-2.6.20-r6.ebuild:
811 Revision bump, grabbing yet another stable release.
812
813 17 Jun 2007; Christian Heim <phreak@gentoo.org>
814 -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
815 -hardened-sources-2.6.21-r2.ebuild:
816 Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
817 alpha stable KEYWORD by mistake.
818
819 17 Jun 2007; Christian Heim <phreak@gentoo.org>
820 hardened-sources-2.6.20-r5.ebuild:
821 Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
822 genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
823
824 *hardened-sources-2.6.21-r3 (12 Jun 2007)
825
826 12 Jun 2007; Christian Heim <phreak@gentoo.org>
827 +hardened-sources-2.6.21-r3.ebuild:
828 Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
829 of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
830 love.
831
832 *hardened-sources-2.6.20-r5 (11 Jun 2007)
833
834 11 Jun 2007; Christian Heim <phreak@gentoo.org>
835 +hardened-sources-2.6.20-r5.ebuild:
836 Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
837 of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
838 love.
839
840 *hardened-sources-2.4.34.5 (11 Jun 2007)
841
842 11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
843 +hardened-sources-2.4.34.5.ebuild:
844 added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
845
846 30 May 2007; Christian Heim <phreak@gentoo.org>
847 -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
848 Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
849 stale ebuild(s).
850
851 30 May 2007; Christian Heim <phreak@gentoo.org>
852 -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
853 -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
854 -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
855 Doing some cleanups, remove stale ebuilds.
856
857 26 May 2007; Christian Heim <phreak@gentoo.org>
858 hardened-sources-2.6.21-r2.ebuild:
859 Fixing the grsecurity patch, had one '};' too much.
860
861 *hardened-sources-2.6.21-r2 (26 May 2007)
862
863 26 May 2007; Christian Heim <phreak@gentoo.org>
864 -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
865 +hardened-sources-2.6.21-r2.ebuild:
866 Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
867 grsecurity patch to 2.1.10-2.6.21.1-200705221918.
868
869 *hardened-sources-2.6.20-r4 (26 May 2007)
870
871 26 May 2007; Christian Heim <phreak@gentoo.org>
872 -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
873 Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
874 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
875
876 15 May 2007; Christian Heim <phreak@gentoo.org>
877 hardened-sources-2.6.20-r3.ebuild:
878 Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
879 introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
880 grsecurity patch fail in that exact same hunk.
881
882 *hardened-sources-2.6.20-r3 (15 May 2007)
883
884 15 May 2007; Christian Heim <phreak@gentoo.org>
885 +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
886 Revision bump, incorporating Linux 2.6.20.11.
887
888 *hardened-sources-2.6.21-r1 (11 May 2007)
889
890 11 May 2007; Christian Heim <phreak@gentoo.org>
891 +hardened-sources-2.6.21-r1.ebuild:
892 Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
893 mentioned in #177234.
894
895 07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
896 files/digest-hardened-sources-2.6.21, Manifest:
897 Fix Manifest/digest for linux-2.6.21.tar.bz2
898
899 06 May 2007; Christian Heim <phreak@gentoo.org>
900 hardened-sources-2.6.21.ebuild:
901 Bumping the hardened-patches version, needed for the fix for #177234.
902
903 *hardened-sources-2.6.21 (02 May 2007)
904
905 02 May 2007; Christian Heim <phreak@gentoo.org>
906 +hardened-sources-2.6.21.ebuild:
907 Version bump, Linux 2.6.21-hardened.
908
909 29 Apr 2007; Christian Heim <phreak@gentoo.org>
910 hardened-sources-2.6.20-r2.ebuild:
911 Adding ~ia64 on Ned's request.
912
913 29 Apr 2007; Christian Heim <phreak@gentoo.org>
914 hardened-sources-2.6.20-r2.ebuild:
915 Fixing the included grsecurity patch, wasn't alligning due to the Index:
916 header line(s).
917
918 29 Apr 2007; Christian Heim <phreak@gentoo.org>
919 hardened-sources-2.6.20-r2.ebuild:
920 Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
921
922 *hardened-sources-2.6.20-r2 (10 Apr 2007)
923
924 10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
925 +hardened-sources-2.6.20-r2.ebuild:
926 Version bump, on behalf of phreak
927
928 *hardened-sources-2.6.20-r1 (04 Apr 2007)
929
930 04 Apr 2007; Christian Heim <phreak@gentoo.org>
931 +hardened-sources-2.6.20-r1.ebuild:
932 Revision bump, grabbing a newer grsecurity snapshot.
933
934 *hardened-sources-2.6.20 (25 Mar 2007)
935
936 25 Mar 2007; Christian Heim <phreak@gentoo.org>
937 +hardened-sources-2.6.20.ebuild:
938 Finally a hardened-sources version for 2.6.20; many people have been waiting
939 for this. Thanks to Steve for preliminary testing, thanks to Ned for the
940 testbox.
941
942 16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
943 hardened-sources-2.6.18-r6.ebuild:
944 Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
945
946 *hardened-sources-2.6.18-r6 (16 Mar 2007)
947
948 16 Mar 2007; Christian Heim <phreak@gentoo.org>
949 -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
950 Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
951 yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
952 supposed to be.
953
954 06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
955 Fixing the Manifest, the previous one was broken (as in still had the
956 deleted ebuild in it).
957
958 06 Mar 2007; Christian Heim <phreak@gentoo.org>
959 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
960 +hardened-sources-2.6.18-r5.ebuild:
961 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
962 Linux 2.6.18.8. Also cleaning up the older version.
963
964 *hardened-sources-2.6.18-r5 (06 Mar 2007)
965
966 06 Mar 2007; Christian Heim <phreak@gentoo.org>
967 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
968 +hardened-sources-2.6.18-r5.ebuild:
969 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
970 Linux 2.6.18.8. Also cleaning up the older version.
971
972 24 Feb 2007; Christian Heim <phreak@gentoo.org>
973 -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
974 -hardened-sources-2.6.19-r5.ebuild:
975 Removing some of the old version, that didn't work.
976
977 *hardened-sources-2.6.19-r6 (12 Feb 2007)
978
979 12 Feb 2007; Christian Heim <phreak@gentoo.org>
980 +hardened-sources-2.6.19-r6.ebuild:
981 Revision bump, including a new grsec version fixing #166235.
982
983 *hardened-sources-2.4.34 (24 Jan 2007)
984
985 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
986 Manifest:
987 updating Manifest with checksums of new tarball and ebuild
988
989 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
990 +hardened-sources-2.4.34.ebuild:
991 I added new hardened sources 2.4 update, this is a critical path
992 security bugfix - all users of h-s are strongly advised
993 to update their existing hardened sources to this version.
994 It contains a fix for a kernel vulnerability that is pertaining
995 to the PaX changes to virtual memory management, possibly leading
996 to a local kernel exploit ... see grsecurity.net forums and homepage
997
998 23 Jan 2007; Christian Heim <phreak@gentoo.org>
999 files/digest-hardened-sources-2.6.19-r5, Manifest:
1000 Fixing the patch-tarball digest.
1001
1002 *hardened-sources-2.6.19-r5 (23 Jan 2007)
1003
1004 23 Jan 2007; Christian Heim <phreak@gentoo.org>
1005 +hardened-sources-2.6.19-r5.ebuild:
1006 Revision bump, closing the recently discovered PaX expand_stack()
1007 vulnerability.
1008
1009 *hardened-sources-2.6.19-r4 (14 Jan 2007)
1010
1011 14 Jan 2007; Christian Heim <phreak@gentoo.org>
1012 +hardened-sources-2.6.19-r4.ebuild:
1013 Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1014 dropping the randomized PID feature.
1015
1016 11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1017 hardened-sources-2.4.33.4.ebuild:
1018 stable x86, bug #161171
1019
1020 *hardened-sources-2.6.19-r3 (27 Dec 2006)
1021
1022 27 Dec 2006; Christian Heim <phreak@gentoo.org>
1023 -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1024 Revision bump for bug #157186 and #158786.
1025
1026 *hardened-sources-2.6.18-r4 (27 Dec 2006)
1027
1028 27 Dec 2006; Christian Heim <phreak@gentoo.org>
1029 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1030 Revision bump for bug #157186.
1031
1032 *hardened-sources-2.6.19-r2 (23 Dec 2006)
1033
1034 23 Dec 2006; Christian Heim <phreak@gentoo.org>
1035 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1036 Revision bump to pull in genpatches-2.6.19-3 for #157186.
1037
1038 17 Dec 2006; Christian Heim <phreak@gentoo.org>
1039 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1040 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1041 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1042 hardened-sources-2.6.19-r1.ebuild:
1043 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1044 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1045
1046 *hardened-sources-2.4.33.4 (17 Dec 2006)
1047
1048 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1049 +hardened-sources-2.4.33.4.ebuild:
1050 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1051 and quilting
1052
1053 *hardened-sources-2.6.19-r1 (14 Dec 2006)
1054
1055 14 Dec 2006; Christian Heim <phreak@gentoo.org>
1056 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1057 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1058 for reporting).
1059
1060 *hardened-sources-2.6.19 (13 Dec 2006)
1061
1062 13 Dec 2006; Christian Heim <phreak@gentoo.org>
1063 +hardened-sources-2.6.19.ebuild:
1064 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1065 Brad for providing that prompt update.
1066
1067 *hardened-sources-2.6.18-r3 (13 Dec 2006)
1068
1069 13 Dec 2006; Christian Heim <phreak@gentoo.org>
1070 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1071 +hardened-sources-2.6.18-r3.ebuild:
1072 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1073 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1074
1075 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1076 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1077
1078 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1079 Stable on ppc wrt bug 157356
1080
1081 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1082 hardened-sources-2.6.18.ebuild:
1083 stable x86, bug #157356
1084
1085 *hardened-sources-2.6.18-r2 (06 Dec 2006)
1086
1087 06 Dec 2006; Christian Heim <phreak@gentoo.org>
1088 +hardened-sources-2.6.18-r2.ebuild:
1089 Revision bump, including 2.6.18.5 (via genpatches) and
1090 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1091 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1092 redesign.
1093
1094 06 Dec 2006; Christian Heim <phreak@gentoo.org>
1095 hardened-sources-2.6.18.ebuild:
1096 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1097 of Mike Doty).
1098
1099 *hardened-sources-2.6.18-r1 (23 Nov 2006)
1100
1101 23 Nov 2006; Christian Heim <phreak@gentoo.org>
1102 +hardened-sources-2.6.18-r1.ebuild:
1103 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1104
1105 *hardened-sources-2.6.18 (11 Nov 2006)
1106
1107 11 Nov 2006; Christian Heim <phreak@gentoo.org>
1108 +hardened-sources-2.6.18.ebuild:
1109 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1110
1111 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1112 - mark amd64 stable also. bug #151877
1113
1114 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1115 - mark 2.6.17-r1 stable
1116
1117 27 Aug 2006; Christian Heim <phreak@gentoo.org>
1118 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1119 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1120
1121 *hardened-sources-2.6.17-r1 (26 Aug 2006)
1122
1123 26 Aug 2006; Christian Heim <phreak@gentoo.org>
1124 +hardened-sources-2.6.17-r1.ebuild:
1125 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1126 grsecurity patch.
1127
1128 *hardened-sources-2.6.17 (17 Aug 2006)
1129
1130 17 Aug 2006; Christian Heim <phreak@gentoo.org>
1131 +hardened-sources-2.6.17.ebuild:
1132 Bumping the hardened-sources-2.6 series to 2.6.17, using
1133 genpatches-2.6.17-6.base.
1134
1135 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1136 - stable on x86 and amd64
1137
1138 *hardened-sources-2.6.16-r11 (15 Jul 2006)
1139
1140 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1141 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1142 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1143 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1144 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1145 crusty ebuilds
1146
1147 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1148 hardened-sources-2.6.16-r10.ebuild:
1149 marking stable on x86 and amd64
1150
1151 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1152 - 2.4.32-r6 stable on x86. RSBAC state unknown
1153
1154 *hardened-sources-2.4.32-r7 (10 Jul 2006)
1155
1156 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1157 +hardened-sources-2.4.32-r7.ebuild:
1158 Bump PaX for RSBAC to test-17
1159
1160 *hardened-sources-2.6.16-r9 (03 Jul 2006)
1161
1162 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1163 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1164 hardened-sources-2.6.16 bump to latest -base.
1165
1166 *hardened-sources-2.4.32-r6 (30 Jun 2006)
1167
1168 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1169 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1170 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1171 sysctl controlable resource logging
1172
1173 *hardened-sources-2.6.16-r7 (05 Jun 2006)
1174
1175 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1176 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1177 push new 2.6.16 release in preparation for stable
1178
1179 22 May 2006; <solar@gentoo.org> :
1180 - redigest bug 134002
1181
1182 *hardened-sources-2.4.32-r5 (16 May 2006)
1183
1184 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1185 +hardened-sources-2.4.32-r5.ebuild:
1186 Fixes rsbac common patching (new patch in new -r5 patchset)
1187
1188 *hardened-sources-2.4.32-r4 (13 May 2006)
1189
1190 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1191 +hardened-sources-2.4.32-r4.ebuild:
1192 - security bumps
1193
1194 *hardened-sources-2.6.16-r6 (03 May 2006)
1195
1196 03 May 2006; John Mylchreest <johnm@gentoo.org>
1197 +hardened-sources-2.6.16-r6.ebuild:
1198 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1199
1200 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1201 hardened-sources-2.6.14-r8.ebuild:
1202 fix x86_64 build problem, this will delay the digest issue again for a short
1203 while but it will sort itself out
1204
1205 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1206 hardened-sources-2.6.14-r8.ebuild:
1207 bump hardened patchset
1208
1209 27 Apr 2006; Alec Warner <antarus@gentoo.org>
1210 files/digest-hardened-sources-2.4.32-r2,
1211 files/digest-hardened-sources-2.4.32-r3,
1212 files/digest-hardened-sources-2.6.14-r8, Manifest:
1213 Fixing duff SHA256 digests: Bug # 131293
1214
1215 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1216
1217 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1218 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1219 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1220 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1221 cleanup of old uneccessary sources
1222
1223 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1224 fix digest
1225
1226 *hardened-sources-2.6.14-r8 (20 Apr 2006)
1227
1228 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1229 +hardened-sources-2.6.14-r8.ebuild:
1230 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1231
1232 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1233 Turning on gpg-signing again, and recomitting
1234
1235 *hardened-sources-2.6.16-r4 (20 Apr 2006)
1236
1237 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1238 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1239 +hardened-sources-2.6.16-r4.ebuild:
1240 Fix numerous security vulns
1241
1242 *hardened-sources-2.4.32-r3 (16 Apr 2006)
1243
1244 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1245 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1246 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1247 - security bump for bug #112791. Removed old ebuilds
1248
1249 *hardened-sources-2.6.16-r3 (15 Apr 2006)
1250
1251 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1252 +hardened-sources-2.6.16-r3.ebuild:
1253 Removing silly localversion which I missed
1254
1255 *hardened-sources-2.6.14-r7 (14 Apr 2006)
1256
1257 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1258 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1259 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1260
1261 *hardened-sources-2.6.16-r2 (13 Apr 2006)
1262
1263 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1264 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1265 +hardened-sources-2.6.16-r2.ebuild:
1266 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1267 labels, dropping USERGROUP define fixes, since these were merged mainstream.
1268
1269 *hardened-sources-2.6.16-r1 (11 Apr 2006)
1270
1271 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1272 +hardened-sources-2.6.16-r1.ebuild:
1273 Bumping to include ppc build fix and 2.6.16.3
1274
1275 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1276 hardened-sources-2.6.14-r6.ebuild:
1277 Stable on x86; bug #127718
1278
1279 *hardened-sources-2.6.16 (31 Mar 2006)
1280
1281 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1282 +hardened-sources-2.6.16.ebuild:
1283 Bumping to new version of grsec, and kernel base. New squashfs. Based on
1284 2.6.16.1
1285
1286 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1287 hardened-sources-2.6.14-r6.ebuild:
1288 Stable on amd64, bug 127718.
1289
1290 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1291 Stable on ppc. Bug #127718
1292
1293 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1294 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1295 -hardened-sources-2.6.14-r4.ebuild:
1296 Cleanup.
1297
1298 *hardened-sources-2.6.14-r6 (15 Mar 2006)
1299
1300 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1301 +hardened-sources-2.6.14-r6.ebuild:
1302 Fixes grsec policy recreation bug and adds a
1303 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1304
1305 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1306 - stable on x86
1307
1308 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1309 hardened-sources-2.6.14-r5.ebuild:
1310 Stable on ppc.
1311
1312 *hardened-sources-2.6.14-r5 (01 Feb 2006)
1313
1314 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1315 +hardened-sources-2.6.14-r5.ebuild:
1316 fixing every known exploit
1317
1318 *hardened-sources-2.4.32-r2 (26 Jan 2006)
1319
1320 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1321 +hardened-sources-2.4.32-r2.ebuild:
1322 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1323
1324 *hardened-sources-2.6.14-r4 (12 Jan 2006)
1325
1326 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1327 - version bump for new genpatches which fix up a few sec holes
1328
1329 *hardened-sources-2.4.32-r1 (05 Jan 2006)
1330
1331 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1332 - revision bump to add misc vital linux kernel security patches.
1333
1334 *hardened-sources-2.6.14-r3 (30 Dec 2005)
1335
1336 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1337 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1338 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1339
1340 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1341 hardened-sources-2.6.14-r2.ebuild:
1342 making x86 & amd64 stable following testing.
1343
1344 *hardened-sources-2.6.14-r2 (27 Dec 2005)
1345
1346 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1347 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1348 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1349 network hooks.
1350
1351 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1352 hardened-sources-2.6.14-r1.ebuild:
1353 bumping to stable early for sec fix on x86 & amd64
1354
1355 *hardened-sources-2.6.14-r1 (05 Dec 2005)
1356
1357 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1358 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1359 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1360
1361 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1362 - stable on x86 security bug #114227 CAN-2005-3257
1363
1364 *hardened-sources-2.4.32 (19 Nov 2005)
1365
1366 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1367 +hardened-sources-2.4.32.ebuild:
1368 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1369 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1370 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1371 rsbac >> /etc/portage/package.use)
1372
1373 *hardened-sources-2.6.14 (14 Nov 2005)
1374
1375 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1376 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1377 Bumping 2.6 series to 2.6.14.2
1378
1379 *hardened-sources-2.6.13-r2 (20 Oct 2005)
1380
1381 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1382 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1383 +hardened-sources-2.6.13-r2.ebuild:
1384 Fixes minor build error in ppc.
1385
1386 *hardened-sources-2.6.13-r1 (17 Oct 2005)
1387
1388 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1389 +hardened-sources-2.6.13-r1.ebuild:
1390 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1391 2.6.13.4, fixes some major amd64 stability problems.
1392
1393 *hardened-sources-2.6.13 (16 Sep 2005)
1394
1395 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1396 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1397 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1398 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1399 users should test this thoroughly.
1400
1401 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1402 - stable on x86
1403
1404 *hardened-sources-2.6.11-r15 (27 Jun 2005)
1405
1406 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1407 +hardened-sources-2.6.11-r15.ebuild:
1408 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1409 grsec redefining curr_ip struct.
1410
1411 *hardened-sources-2.4.31 (20 Jun 2005)
1412
1413 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1414 initial import of 2.4.31 tree
1415
1416 *hardened-sources-2.6.11-r14 (14 Jun 2005)
1417
1418 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1419 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1420 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1421 naming scheme to abide by genpatches
1422
1423 *hardened-sources-2.6.11-r13 (18 May 2005)
1424
1425 18 May 2005; John Mylchreest <johnm@gentoo.org>
1426 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1427 Managed to mangle the Makefile patch from grsec, to miss out the grsec
1428 target. sorry about that. Fixes bug #93022
1429
1430 *hardened-sources-2.6.11-r12 (17 May 2005)
1431
1432 17 May 2005; John Mylchreest <johnm@gentoo.org>
1433 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1434 +hardened-sources-2.6.11-r12.ebuild:
1435 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1436 merges in genpatches-base
1437
1438 *hardened-sources-2.6.11-r12 (17 May 2005)
1439
1440 17 May 2005; John Mylchreest <johnm@gentoo.org>
1441 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1442 +hardened-sources-2.6.11-r12.ebuild:
1443 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1444 merges in genpatches-base
1445
1446 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1447 -files/2.4.27-cmdline-race.patch,
1448 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1449 -files/2.4.28-grsec-binfmt_a.out.patch,
1450 -files/2.4.28-grsec-cmdline-race.patch,
1451 -files/2.4.28-selinux-binfmt_a.out.patch,
1452 -files/2.4.28-selinux-cmdline-race.patch,
1453 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1454 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1455 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1456 cleanup..
1457
1458 *hardened-sources-2.4.30-r1 (21 Apr 2005)
1459
1460 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1461 - disable aout by default
1462
1463 *hardened-sources-2.4.30 (18 Apr 2005)
1464
1465 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1466 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1467 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1468 use
1469
1470 *hardened-sources-2.4.29 (30 Mar 2005)
1471
1472 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1473 +hardened-sources-2.4.29.ebuild:
1474 New hardened-patches-2.4-29.0 patchball.
1475 Removed SELinux support, upgraded GRSecurity to 2.1.4.
1476
1477 *hardened-sources-2.4.28-r5 (06 Mar 2005)
1478
1479 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1480 +hardened-sources-2.4.28-r5.ebuild:
1481 Added a fix for a PaX vulnerability.
1482
1483 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1484 hardened-sources-2.4.28-r4.ebuild:
1485 Stable on x86
1486
1487 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1488 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1489 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1490 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1491 - fixed/added RDEPEND= in all kernel-2 ebuilds
1492
1493 *hardened-sources-2.4.28-r4 (21 Jan 2005)
1494
1495 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1496 +hardened-sources-2.4.28-r4.ebuild:
1497 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1498 backport of neighbour hash updates.
1499
1500 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1501 hardened-sources-2.4.28-r3.ebuild:
1502 Stable on x86
1503
1504 *hardened-sources-2.6.10-r3 (20 Jan 2005)
1505
1506 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1507 +hardened-sources-2.6.10-r3.ebuild:
1508 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1509 in 2005.0
1510
1511 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1512 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1513 hardened-sources-2.4.28-r2.ebuild:
1514 Mark stable on x86
1515
1516 *hardened-sources-2.4.28-r3 (17 Jan 2005)
1517
1518 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1519 +hardened-sources-2.4.28-r3.ebuild:
1520 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1521
1522 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1523 hardened-sources-2.4.28.ebuild:
1524 Mark stable on x86.
1525
1526 *hardened-sources-2.4.28-r2 (13 Jan 2005)
1527
1528 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1529 +hardened-sources-2.4.28-r2.ebuild:
1530 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1531 Mazinger for grsecurity patches as well.
1532
1533 *hardened-sources-2.4.28-r1 (23 Dec 2004)
1534
1535 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1536 Security bump. Thank tocharian for rolling a new patchset...
1537
1538 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1539 +files/2.4.28-grsec-cmdline-race.patch,
1540 +files/2.4.28-selinux-binfmt_a.out.patch,
1541 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1542 - Round up remaining security patches that appear to be missing in 2.4.28. -
1543 PaX standalone updated to current. hgpv=28.1
1544
1545 *hardened-sources-2.4.28 (28 Nov 2004)
1546
1547 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1548 security bump. Thank tocharian for rolling a new patchset
1549
1550 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1551
1552 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1553 +hardened-sources-2.4.27-r3.ebuild:
1554 Applies the new 2.4-27.2 patchball which updates
1555 GRSecurity to the 2.0.1 version.
1556
1557 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1558
1559 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1560 +hardened-sources-2.4.27-r2.ebuild:
1561 Version bump.
1562 This version uses the new 2.4-27.1 patchball which updates
1563 both the SELinux PaX hooks patch and the SELinux headers.
1564
1565 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1566
1567 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1568 +hardened-sources-2.4.27-r1.ebuild,
1569 -hardened-sources-2.4.27.ebuild,
1570 +files/2.4.27-cmdline-race.patch:
1571 Version bump, fix for cmdline race. See bug #59905.
1572
1573 *hardened-sources-2.4.26-r6 (09 Aug 2004)
1574
1575 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1576 +hardened-sources-2.4.26-r6.ebuild,
1577 -hardened-sources-2.4.26-r5.ebuild,
1578 -hardened-sources-2.4.26-r4.ebuild,
1579 +files/2.4.26-cmdline-race.patch:
1580 Version bump, fix for cmdline race. See bug #59905.
1581
1582 *hardened-sources-2.4.27 (08 Aug 2004)
1583
1584 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1585 +hardened-sources-2.4.27.ebuild,
1586 +files/2.4.27-CAN-2004-0394.patch:
1587 Ported the patchball to the 2.4.27 kernel version.
1588
1589 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1590
1591 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1592 +hardened-sources-2.4.26-r5.ebuild:
1593 Updated to use the new hardened-patches-2.4-26.1 patchball.
1594 It adds the following features:
1595 - Squashfs
1596 - Ebtables
1597 - Netdev random (core+drivers)
1598 - Watchdog Timer (WDT) fix.
1599
1600 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1601
1602 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1603 +hardened-sources-2.4.26-r4.ebuild,
1604 +files/2.4.26-CAN-2004-0415.patch,
1605 -hardened-sources-2.4.26-3:
1606 Version bump, fix for CAN 0415, see bug #59378.
1607
1608 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1609
1610 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1611 +hardened-sources-2.4.26-r3.ebuild,
1612 +files/2.4.26-CAN-2004-0497.patch,
1613 -hardened-sources-2.4.26-r2.ebuild:
1614 Version bump, fixed CAN 0497, see bug #56171.
1615
1616 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1617
1618 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1619 +hardened-sources-2.4.26-r2.ebuild,
1620 +files/2.4.26-CAN-2004-0495.patch,
1621 +files/2.4.26-CAN-2004-0535.patch,
1622 -hardened-sources-2.4.26-r1.ebuild:
1623 Fixes for both CAN 0495 and 0535, see bug #54976
1624
1625 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1626 hardened-sources-2.4.26-r1.ebuild:
1627 QA - fix use invocation
1628
1629 *hardened-sources-2.4.26-r1 (22 June 2004)
1630
1631 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1632 +hardened-sources-2.4.26-r1.ebuild,
1633 +files/2.4.26-CAN-2004-0394.patch,
1634 +files/2.4.26-signal-race.patch,
1635 -hardened-sources-2.4.26.ebuild,
1636 -hardened-sources-2.4.24-r3.ebuild:
1637 Version bump for the CAN-2004-0394 issue and bug #53804
1638 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1639
1640
1641 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1642 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1643 Masked hardened-sources-2.4.26.ebuild broken for ppc
1644
1645 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1646 hardened-sources-2.4.24-r3.ebuild:
1647 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1648
1649 *hardened-sources-2.4.26 (29 May 2004)
1650
1651 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1652 +hardened-sources-2.4.26.ebuild:
1653 Updated hardened-sources for the 2.4.26 kernel
1654 Removed broken components, updated almost everything.
1655
1656 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1657
1658 17 Apr 2004; <plasmaroo@gentoo.org>
1659 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1660 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1661 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1662 +hardened-sources-2.4.24-r3.ebuild:
1663 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1664 vulnerabilities. Old revisions removed.
1665
1666 *hardened-sources-2.4.24-r2 (15 Apr 2004)
1667
1668 15 Apr 2004; <plasmaroo@gentoo.org>
1669 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1670 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1671 Version bump for the CAN-2004-0109 issue; bug #47881.
1672
1673 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1674 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1675 Add eutils to inherit.
1676
1677 *hardened-sources-2.4.24-r1 (19 Feb 2004)
1678
1679 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1680 files/hardened-sources-2.4.24.munmap.patch:
1681 Added the patch for the mremap/munmap vulnerability. Bug #42024.
1682
1683 *hardened-sources-2.4.24 (06 Feb 2004)
1684
1685 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1686 hardened-sources-2.4.24.ebuild:
1687 Version bump, updated most of the components.
1688 This release includes the following:
1689
1690 - Hardened security
1691 - Netfilter patch-o-matic 20031219
1692 - FreeSWAN 2.04 & x509 1.4.8
1693 - EVMS 2.2.2
1694 - XFS 1.3.1
1695 - cryptoloop jari
1696 - grsecurity 2.0-rc4
1697 - SELinux
1698 - PaX 200402060000
1699 - PaX Obscurity 200308302223
1700 - Others...
1701
1702 Neither -ck nor systrace are included anymore.
1703
1704 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1705
1706 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1707 hardened-sources-2.4.22-r2.ebuild:
1708 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1709
1710 *hardened-sources-2.4.22-r1 (02 Dec 2003)
1711
1712 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1713 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1714
1715 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1716 hardened-sources-2.4.22-r1.ebuild:
1717 Version bump for the 'do_brk' vulnerability.
1718
1719 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1720 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1721 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1722 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1723 Fix the 'do_brk' vulnerability.
1724
1725 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1726 hardened-sources-2.4.22.ebuild:
1727 - Removed the src_install() portion for SELinux flask
1728 components. These are no longer handled in the kernel
1729 so this code was not necessary.
1730
1731 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1732 New 2.4.22 based hardened-sources thanks to
1733 Phil West <p.west@computer.org>.
1734
1735 These sources include:
1736 - New SELinux API
1737 - Updated CK-base
1738 - Updated GRSec
1739 - Systrace
1740 - SuperFreeS/WAN 1.99.8
1741 - Propolice kernel build support
1742 - EVMS
1743 - Other various security related patches
1744
1745 *hardened-sources-2.4.21 (14 Sep 2003)
1746
1747 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1748 Updated hardened-sources based on the 2.4.21 Linux kernel.
1749 This includes updates to most major components such as:
1750 - ck-base-0306300059
1751 - selinux-2.4-2003071106
1752 - grsecurity-2.0-rc1
1753 - Updated IPTables patch-o-matic
1754 - Updated SuperFreeS/WAN
1755
1756 Thanks to Phil West <pwest@computer.org> for his work in getting this
1757 updated patch set ready for the 2.4.21 based kernel.
1758
1759 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1760 Initial import of hardened-sources-2.4.20-r4. This revision
1761 includes only a few changes, but one of these is an important
1762 security fix. It is recommended all users of hardened-sources
1763 upgrade to this release.
1764
1765 - ioperm bug fix
1766 - fixed compilation failure when building without GRSec
1767
1768 SAL (Secure Auditing for Linux) is NOT included in this revision
1769 due to time constraints, but is planned for inclusion in the near
1770 future.
1771
1772 *hardened-sources-2.4.20-r2 (12 Jun 2003)
1773
1774 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1775 hardened-sources-2.4.20-r3.ebuild:
1776 Add Header...
1777
1778 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1779 hardened-sources-2.4.20-r3.ebuild:
1780 Removed warnings from ebuild. This kernel should be safe to
1781 use at this point.
1782
1783 *hardened-sources-2.4.20-r3 (08 Jun 2003)
1784
1785 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1786 hardened-sources-2.4.20-r3.ebuild:
1787 New revision. Includes the following changes over -r2:
1788
1789 - ck7-base (O(1), preempt, low latency)
1790 - Super FreeS/WAN 1.99.7rc2
1791 - PaX for the LSM/SELinux branch
1792 - GRSecurity 2.0-pre4 (role based access control)
1793 - Systrace 1.3
1794 - EXT3 fixes
1795 - EVMS 2.0.1
1796 - GCC 3.1+ compile optimizations
1797 - ProPolice kernel build support
1798 - Hashing table security fixes
1799
1800 *hardened-sources-2.4.20-r1 (09 Apr 2003)
1801
1802 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1803 Initial import of hardened-sources-r2. This new
1804 ebuild includes many new performance and security
1805 related patches. As in -r1, it will patch in
1806 LSM/SELinux if "selinux" is in USE, otherwise it
1807 will patch in GRSecurity. The following patches
1808 are included in this revision:
1809
1810 - O(1) Scheduler, Low Latency, and Preempt
1811 (pulled from the base CK patch)
1812 - ptrace exploit patch for the LSM kernel
1813 (the GRSec patch already fixes this)
1814 - LSM 2.4-2003040709
1815 - SELinux 2.4-2003040709
1816 - Systrace v1.2
1817 - IPTables patch-o-matic base patches - 20030107
1818 - CryptoAPI 2.4.20.1 w/ loop-jari patch
1819 - Super FreeS/WAN 1.99.6.1
1820 - GRSecurity 1.9.9g
1821 - MPPE
1822 - EXT3 data journal fix
1823 - CIPE 1.5.4
1824
1825 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1826 hardened-sources-2.4.20-r1.ebuild, manifest:
1827 Updated to install flask components correctly for selinux.
1828
1829 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1830 hardened-sources-2.4.20-r1.ebuild:
1831 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1832 is patched in instead. Ptrace patches for selinux have also been added. In
1833 either case, systrace support will be patched in as well.
1834
1835 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1836 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1837 Revision bump for new sources.
1838
1839 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1840 hardened-sources-2.4.20-r1.ebuild:
1841 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1842
1843 *hardened-sources-2.4.20 (30 Mar 2003)
1844
1845 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1846 hardened-sources-2.4.20.ebuild:
1847 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20