/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.366 - (show annotations) (download)
Thu Dec 9 04:24:39 2010 UTC (4 years, 2 months ago) by blueness
Branch: MAIN
Changes since 1.365: +8 -1 lines
Based on vanilla-2.6.32.26 + genpatches-2.6.32-28 + grsecurity-2.2.1-2.6.32.26-201012040057

(Portage version: 2.1.9.24/cvs/Linux x86_64)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.365 2010/12/02 15:37:48 blueness Exp $
4
5 *hardened-sources-2.6.32-r30 (09 Dec 2010)
6
7 09 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
8 +hardened-sources-2.6.32-r30.ebuild:
9 Based on vanilla-2.6.32.26 + genpatches-2.6.32-28 +
10 grsecurity-2.2.1-2.6.32.26-201012040057
11
12 *hardened-sources-2.6.36-r4 (02 Dec 2010)
13
14 02 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
15 +hardened-sources-2.6.36-r4.ebuild:
16 Based on vanilla-2.6.36.1 + genpatches-.2.6.36-5 +
17 grsecurity-2.2.1-2.6.36.1-201011280939
18
19 *hardened-sources-2.6.32-r29 (02 Dec 2010)
20
21 02 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
22 +hardened-sources-2.6.32-r29.ebuild:
23 Based on vanilla-2.6.32.26 + genpatches-2.6.32-27 +
24 grsecurity-2.2.1-2.6.32.26-201011280939
25
26 30 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
27 -hardened-sources-2.6.32-r28.ebuild, -hardened-sources-2.6.36-r3.ebuild:
28 Removed because of multiple breakage (pulseaudio, install, etc).
29
30 *hardened-sources-2.6.36-r3 (29 Nov 2010)
31
32 29 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
33 +hardened-sources-2.6.36-r3.ebuild:
34 hardened-sources-2.6.36-r3 based on 2.6.36.1 + genpatches +
35 grsecurity-2.2.1-2.6.36.1-201011261834
36
37 *hardened-sources-2.6.32-r28 (29 Nov 2010)
38
39 29 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
40 +hardened-sources-2.6.32-r28.ebuild:
41 hardened-sources-2.6.32-r28 based on 2.6.32.26 + genpatches +
42 grsecurity-2.2.1-2.6.32.26-201011261834
43
44 28 Nov 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
45 Update Manifest for deblob 2.6.36.
46
47 *hardened-sources-2.6.36-r2 (18 Nov 2010)
48
49 18 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
50 +hardened-sources-2.6.36-r2.ebuild:
51 hardened-sources-2.6.36-r2 based on 2.6.36 + genpatches +
52 grsecurity-2.2.0-2.6.36-201011151726
53
54 *hardened-sources-2.6.32-r27 (18 Nov 2010)
55
56 18 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
57 +hardened-sources-2.6.32-r27.ebuild:
58 hardened-sources-2.6.32-r27 based on 2.6.32.25 + genpatches +
59 grsecurity-2.2.0-2.6.32.25-201011151726
60
61 *hardened-sources-2.6.36-r1 (14 Nov 2010)
62
63 14 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
64 +hardened-sources-2.6.36-r1.ebuild:
65 hardened-sources-2.6.36-r1 based on 2.6.36 + genpatches +
66 grsecurity-2.2.0-2.6.36-201011131640
67
68 *hardened-sources-2.6.32-r26 (14 Nov 2010)
69
70 14 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
71 +hardened-sources-2.6.32-r26.ebuild:
72 hardened-sources-2.6.32-r26 based on 2.6.32.25 + genpatches +
73 grsecurity-2.2.0-2.6.32.25-201011131640
74
75 *hardened-sources-2.6.36 (07 Nov 2010)
76
77 07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
78 +hardened-sources-2.6.36.ebuild:
79 hardened-sources-2.6.36 based on 2.6.36 + genpatches +
80 grsecurity-2.2.0-2.6.36-201011062054
81
82 *hardened-sources-2.6.35-r7 (07 Nov 2010)
83
84 07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
85 +hardened-sources-2.6.35-r7.ebuild:
86 hardened-sources-2.6.35-r7 based on 2.6.35.8 + genpatches +
87 grsecurity-2.2.0-2.6.35.8-201011062054
88
89 *hardened-sources-2.6.32-r25 (07 Nov 2010)
90
91 07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
92 +hardened-sources-2.6.32-r25.ebuild:
93 hardened-sources-2.6.32-r25 based on 2.6.32.25 + genpatches +
94 grsecurity-2.2.0-2.6.32.25-201011062054
95
96 *hardened-sources-2.6.35-r6 (02 Nov 2010)
97 *hardened-sources-2.6.32-r24 (02 Nov 2010)
98
99 02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
100 +hardened-sources-2.6.32-r24.ebuild, +hardened-sources-2.6.35-r6.ebuild:
101 hardened-sources-2.6.32-r24 based on 2.6.32.25 + genpatches +
102 grsecurity-2.2.0-2.6.32.25-201010311944
103 hardened-sources-2.6.35-r6 based on 2.6.35.8 + genpatches +
104 grsecurity-2.2.0-2.6.35.8-201010311944
105
106 02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
107 hardened-sources-2.6.32-r23.ebuild:
108 ppc64 stable, bug #343535
109
110 *hardened-sources-2.6.35-r5 (24 Oct 2010)
111 *hardened-sources-2.6.32-r23 (24 Oct 2010)
112
113 24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
114 +hardened-sources-2.6.32-r23.ebuild, +hardened-sources-2.6.35-r5.ebuild:
115 hardened-sources-2.6.32-r23 based on 2.6.32.24 + genpatches +
116 grsec-2.2.0-2.6.32.24-201010232009
117 hardened-sources-2.6.35-r5 based on 2.6.35.7 + genpatches +
118 grsec-2.2.0-2.6.35.7-201010232009
119
120 24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
121 hardened-sources-2.6.32-r22.ebuild:
122 Broken on ppc/ppc64, bug #341915#c6
123
124 24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
125 -hardened-sources-2.6.32-r16.ebuild, -hardened-sources-2.6.32-r17.ebuild,
126 -hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.32-r19.ebuild,
127 -hardened-sources-2.6.32-r20.ebuild, -hardened-sources-2.6.32-r21.ebuild,
128 -hardened-sources-2.6.34-r4.ebuild, -hardened-sources-2.6.34-r5.ebuild,
129 -hardened-sources-2.6.35.ebuild, -hardened-sources-2.6.35-r1.ebuild,
130 -hardened-sources-2.6.35-r2.ebuild, -hardened-sources-2.6.35-r3.ebuild:
131 Removing vulnerable kernels where possible, bug #341801
132
133 21 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
134 hardened-sources-2.6.32-r22.ebuild:
135 x86 stable, bug #341915
136
137 20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
138 hardened-sources-2.6.32-r22.ebuild:
139 amd64 stable, bug #341915
140
141 *hardened-sources-2.6.35-r4 (20 Oct 2010)
142 *hardened-sources-2.6.32-r22 (20 Oct 2010)
143
144 20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
145 +hardened-sources-2.6.32-r22.ebuild, +hardened-sources-2.6.35-r4.ebuild:
146 hardened-sources-2.6.32-r22 based on 2.6.32.24 + genpatches +
147 grsec-2.2.0-2.6.32.24-201010191911
148 hardened-sources-2.6.35-r4 based on 2.6.35.7 + genpatches +
149 grsec-2.2.0-2.6.35.7-201010191911
150 Addresses security bug #341801
151
152 *hardened-sources-2.6.35-r3 (16 Oct 2010)
153 *hardened-sources-2.6.32-r21 (16 Oct 2010)
154
155 16 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
156 +hardened-sources-2.6.32-r21.ebuild, +hardened-sources-2.6.35-r3.ebuild:
157 hardened-sources-2.6.32-r21 based on 2.6.32.24 + genpatches +
158 grsec-2.2.0-2.6.32.24-201010121028
159 hardened-sources-2.6.35-r3 based on 2.6.35.7 + genpatches +
160 grsec-2.2.0-2.6.35.7-201010121028
161
162 *hardened-sources-2.6.35-r2 (07 Oct 2010)
163
164 07 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
165 +hardened-sources-2.6.35-r2.ebuild:
166 hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches +
167 grsec-2.2.0-2.6.35.7-201010021153
168
169 *hardened-sources-2.6.32-r20 (06 Oct 2010)
170
171 06 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
172 +hardened-sources-2.6.32-r20.ebuild:
173 hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches +
174 grsec-2.2.0-2.6.32.24-201010021153
175
176 *hardened-sources-2.6.35-r1 (30 Sep 2010)
177 *hardened-sources-2.6.32-r19 (30 Sep 2010)
178
179 30 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
180 +hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild:
181 hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches +
182 grsec-2.2.0-2.6.32.23-201009272133
183 hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches +
184 grsec-2.2.0-2.6.35.6-201009281623
185
186 *hardened-sources-2.6.35 (28 Sep 2010)
187
188 28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
189 +hardened-sources-2.6.35.ebuild:
190 hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
191
192 21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
193 -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
194 hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
195 -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
196 Fast track stabilization. See bug #338273. Removed older versions.
197
198 *hardened-sources-2.6.34-r6 (17 Sep 2010)
199 *hardened-sources-2.6.32-r18 (17 Sep 2010)
200
201 17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
202 +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
203 hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
204 grsec-2.2.0-2.6.32.21-201009162222
205 hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
206 grsec-2.2.0-2.6.34.7-201009162222
207 Addresses IA32 syscall exploit.
208
209 *hardened-sources-2.6.34-r5 (15 Sep 2010)
210 *hardened-sources-2.6.32-r17 (15 Sep 2010)
211
212 15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
213 +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
214 hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
215 grsec-2.2.0-2.6.32.21-201009130811
216 hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
217 grsec-2.2.0-2.6.34.6-201009130754
218
219 *hardened-sources-2.6.34-r4 (07 Sep 2010)
220 *hardened-sources-2.6.32-r16 (07 Sep 2010)
221
222 07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
223 +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
224 hardened-sources-2.6.32-r16 based on 2.6.32.21 +
225 grsec-2.2.0-2.6.32.21-201009032133
226 hardened-sources-2.6.34-r4 based on 2.6.34.6 +
227 grsec-2.2.0-2.6.34.6-201009041352
228
229 02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
230 hardened-sources-2.6.32-r15 based on 2.6.32.21 +
231 grsec-2.2.0-2.6.32.21-201008292122
232 hardened-sources-2.6.34-r3 based on 2.6.34.6 +
233 grsec-2.2.0-2.6.34.6-201008292122
234
235 *hardened-sources-2.6.34-r3 (02 Sep 2010)
236 *hardened-sources-2.6.32-r15 (02 Sep 2010)
237
238 02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
239 -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
240 -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
241 +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
242 +hardened-sources-2.6.34-r3.ebuild:
243 Bumps and remove deprecated versions
244
245 *hardened-sources-2.6.34-r2 (21 Aug 2010)
246
247 21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
248 +hardened-sources-2.6.34-r2.ebuild:
249 Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
250
251 *hardened-sources-2.6.32-r14 (21 Aug 2010)
252
253 21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
254 +hardened-sources-2.6.32-r14.ebuild:
255 Based on vanilla 2.6.32.19 + genpatches +
256 grsec-2.2.0-2.6.32.19-201008131840
257
258 *hardened-sources-2.6.32-r13 (14 Aug 2010)
259
260 14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
261 +hardened-sources-2.6.32-r13.ebuild:
262 Based on vanilla 2.6.32.18 + genpatches +
263 grsecurity-2.2.0-2.6.32.18-201008112233
264
265 03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
266 kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
267
268 01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
269 hardened-sources-2.6.32-r9.ebuild:
270 Stable ppc64. Bug #326885
271
272 *hardened-sources-2.6.32-r12 (24 Jul 2010)
273
274 24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
275 +hardened-sources-2.6.32-r12.ebuild:
276 Parallels fix incorporated into hardened-sources-2.6.34-r1
277
278 *hardened-sources-2.6.34-r1 (24 Jul 2010)
279
280 24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
281 -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
282 Fixes bug #328275
283
284 21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
285 Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
286 on gentoo-dev.
287
288 21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
289 Correct mail address.
290
291 18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
292 -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
293 -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
294 -hardened-sources-2.6.32-r8.ebuild:
295 Removing outdated releases
296
297 17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
298 hardened-sources-2.6.32-r9.ebuild:
299 stable x86, bug 326885
300
301 13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
302 -hardened-sources-2.6.32-r7.ebuild:
303 Removed for security. Bug #325573
304
305 *hardened-sources-2.6.34 (13 Jul 2010)
306
307 13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
308 +hardened-sources-2.6.34.ebuild:
309 Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
310
311 *hardened-sources-2.6.32-r11 (13 Jul 2010)
312
313 13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
314 +hardened-sources-2.6.32-r11.ebuild:
315 New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
316
317 06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
318 Marked stable on AMD64 as requested by Anthony G. Basile
319 <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
320 on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
321
322 *hardened-sources-2.6.32-r10 (30 Jun 2010)
323
324 30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
325 +hardened-sources-2.6.32-r10.ebuild:
326 New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
327
328 29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
329 Added myself to the metadata.xml
330
331 *hardened-sources-2.6.32-r9 (11 Jun 2010)
332
333 11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
334 New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
335
336 *hardened-sources-2.6.32-r8 (01 Jun 2010)
337
338 01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
339 New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
340
341 27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
342 Update SRC_URI to point to mirror network now that the distfile has
343 propagated.
344
345 *hardened-sources-2.6.32-r7 (26 May 2010)
346
347 26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
348 metadata.xml:
349 New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
350 Summers.
351
352 26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
353 Update Manifest for deblob support in kernel-2 eclass.
354
355 31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
356 ppc stable
357
358 29 May 2009; Gordon Malm <gengor@gentoo.org>
359 -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
360 Stable amd64/x86 and remove old.
361
362 *hardened-sources-2.6.29 (25 May 2009)
363
364 25 May 2009; Gordon Malm <gengor@gentoo.org>
365 +hardened-sources-2.6.29.ebuild:
366 Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
367 release candidates.
368
369 *hardened-sources-2.6.28-r9 (25 May 2009)
370
371 25 May 2009; Gordon Malm <gengor@gentoo.org>
372 -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
373 Fix x86-32 boot failure (regression vs. 2.6.28-r7).
374
375 *hardened-sources-2.6.28-r8 (18 May 2009)
376
377 18 May 2009; Gordon Malm <gengor@gentoo.org>
378 +hardened-sources-2.6.28-r8.ebuild:
379 Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
380 and #262862 among others.
381
382 01 May 2009; Gordon Malm <gengor@gentoo.org>
383 hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
384 hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
385 Remove unnecessary mirror://gentoo from SRC_URI.
386
387 05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
388 ppc stable
389
390 30 Mar 2009; Gordon Malm <gengor@gentoo.org>
391 -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
392 Stable amd64/x86 and remove old.
393
394 *hardened-sources-2.6.28-r7 (27 Mar 2009)
395
396 27 Mar 2009; Gordon Malm <gengor@gentoo.org>
397 +hardened-sources-2.6.28-r7.ebuild:
398 Add Linux 2.6.28.9. Fix bugs 263424, 263870.
399
400 22 Mar 2009; Gordon Malm <gengor@gentoo.org>
401 -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
402 -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
403 -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
404 Stable amd64/x86 and remove old versions.
405
406 22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
407 ppc stable
408
409 *hardened-sources-2.6.28-r6 (21 Mar 2009)
410
411 21 Mar 2009; Gordon Malm <gengor@gentoo.org>
412 -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
413 Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
414
415 *hardened-sources-2.6.28-r5 (20 Mar 2009)
416
417 20 Mar 2009; Gordon Malm <gengor@gentoo.org>
418 +hardened-sources-2.6.28-r5.ebuild:
419 Bump genpatches. Grsecurity patch bump, fixes bug #262752.
420
421 20 Mar 2009; Gordon Malm <gengor@gentoo.org>
422 hardened-sources-2.6.28-r4.ebuild:
423 Stable amd64/x86.
424
425 *hardened-sources-2.6.28-r4 (18 Mar 2009)
426
427 18 Mar 2009; Gordon Malm <gengor@gentoo.org>
428 +hardened-sources-2.6.28-r4.ebuild:
429 Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
430 compilation with CPA_DEBUG and more.
431
432 17 Mar 2009; Gordon Malm <gengor@gentoo.org>
433 hardened-sources-2.6.28-r3.ebuild:
434 Quick stable amd64/x86.
435
436 *hardened-sources-2.6.28-r3 (15 Mar 2009)
437
438 15 Mar 2009; Gordon Malm <gengor@gentoo.org>
439 +hardened-sources-2.6.28-r3.ebuild:
440 Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
441
442 14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
443 ppc stable
444
445 13 Mar 2009; Gordon Malm <gengor@gentoo.org>
446 hardened-sources-2.6.28-r2.ebuild:
447 Stable amd64/x86.
448
449 *hardened-sources-2.6.28-r2 (11 Mar 2009)
450
451 11 Mar 2009; Gordon Malm <gengor@gentoo.org>
452 +hardened-sources-2.6.28-r2.ebuild:
453 Version bump bringing in latest grsecurity patch.
454
455 *hardened-sources-2.6.28-r1 (09 Mar 2009)
456
457 09 Mar 2009; Gordon Malm <gengor@gentoo.org>
458 -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
459 Version bump and remove old.
460
461 07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
462 ppc stable
463
464 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
465 hardened-sources-2.6.27-r8.ebuild:
466 Remove amd64 testing keyword, bug 256226.
467
468 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
469 hardened-sources-2.6.27-r8.ebuild:
470 Revert amd64 stable, bug #256226.
471
472 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
473 hardened-sources-2.6.27-r8.ebuild:
474 Stable on amd64/x86.
475
476 24 Feb 2009; Gordon Malm <gengor@gentoo.org>
477 -hardened-sources-2.6.27-r6.ebuild:
478 Remove old 2.6.27 release.
479
480 *hardened-sources-2.6.27-r8 (24 Feb 2009)
481
482 24 Feb 2009; Gordon Malm <gengor@gentoo.org>
483 +hardened-sources-2.6.27-r8.ebuild:
484 Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
485 and probably more.
486
487 04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
488 ppc stable
489
490 *hardened-sources-2.6.28 (25 Jan 2009)
491
492 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
493 +hardened-sources-2.6.28.ebuild:
494 Initial 2.6.28 release.
495
496 *hardened-sources-2.6.27-r7 (25 Jan 2009)
497
498 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
499 +hardened-sources-2.6.27-r7.ebuild:
500 Bump to Linux 2.6.27.13.
501
502 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
503 hardened-sources-2.6.26-r9.ebuild:
504 Stable amd64/x86.
505
506 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
507 -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
508 -hardened-sources-2.6.27-r5.ebuild:
509 Remove problem versions.
510
511 *hardened-sources-2.6.27-r6 (24 Jan 2009)
512
513 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
514 +hardened-sources-2.6.27-r6.ebuild:
515 Revert PaX test29 to test30 changes. Fixes bug 256226.
516
517 *hardened-sources-2.6.27-r5 (24 Jan 2009)
518
519 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
520 +hardened-sources-2.6.27-r5.ebuild:
521 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
522 254843.
523
524 23 Jan 2009; Gordon Malm <gengor@gentoo.org>
525 -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
526 -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
527 Remove problem versions.
528
529 23 Jan 2009; nixnut <nixnut@gentoo.org>
530 hardened-sources-2.6.25-r13.ebuild:
531 ppc stable
532
533 21 Jan 2009; Gordon Malm <gengor@gentoo.org>
534 hardened-sources-2.6.25-r13.ebuild:
535 Fasttrack stable amd64/x86.
536
537 *hardened-sources-2.6.26-r9 (21 Jan 2009)
538
539 21 Jan 2009; Gordon Malm <gengor@gentoo.org>
540 +hardened-sources-2.6.26-r9.ebuild:
541 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
542
543 *hardened-sources-2.6.25-r13 (20 Jan 2009)
544
545 20 Jan 2009; Gordon Malm <gengor@gentoo.org>
546 +hardened-sources-2.6.25-r13.ebuild:
547 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
548
549 20 Jan 2009; nixnut <nixnut@gentoo.org>
550 hardened-sources-2.6.25-r12.ebuild:
551 ppc stable
552
553 17 Jan 2009; Gordon Malm <gengor@gentoo.org>
554 hardened-sources-2.6.25-r12.ebuild:
555 Stable amd64/x86.
556
557 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
558 -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
559 -hardened-sources-2.6.27-r2.ebuild:
560 Clean out old versions.
561
562 *hardened-sources-2.6.27-r4 (14 Jan 2009)
563 *hardened-sources-2.6.26-r8 (14 Jan 2009)
564 *hardened-sources-2.6.25-r12 (14 Jan 2009)
565
566 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
567 +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
568 +hardened-sources-2.6.27-r4.ebuild:
569 2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
570 2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
571 2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
572 grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
573
574 15 Dec 2008; nixnut <nixnut@gentoo.org>
575 hardened-sources-2.6.25-r11.ebuild:
576 Stable on ppc
577
578 09 Dec 2008; Gordon Malm <gengor@gentoo.org>
579 hardened-sources-2.6.25-r11.ebuild:
580 Stable amd64/x86.
581
582 *hardened-sources-2.6.27-r3 (07 Dec 2008)
583
584 07 Dec 2008; Gordon Malm <gengor@gentoo.org>
585 +hardened-sources-2.6.27-r3.ebuild:
586 Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
587 Fixes bug #248754, #249729 and #246607.
588
589 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
590 -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
591 Remove old versions.
592
593 *hardened-sources-2.6.26-r7 (03 Dec 2008)
594 *hardened-sources-2.6.25-r11 (03 Dec 2008)
595
596 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
597 +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
598 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
599 2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
600 Both include many backports from 2.6.27.{6,7} -stable releases.
601
602 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
603 -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
604 Remove versions broken on ARCHes != x86/amd64.
605
606 *hardened-sources-2.6.27-r2 (24 Nov 2008)
607
608 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
609 +hardened-sources-2.6.27-r2.ebuild:
610 Bump to Linux 2.6.27.7 and latest grsecurity patch.
611
612 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
613 -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
614 Remove old versions.
615
616 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
617 hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
618 Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
619
620 16 Nov 2008; nixnut <nixnut@gentoo.org>
621 hardened-sources-2.6.25-r10.ebuild:
622 Stable on ppc
623
624 15 Nov 2008; Gordon Malm <gengor@gentoo.org>
625 hardened-sources-2.6.25-r10.ebuild:
626 Stable amd64/x86.
627
628 *hardened-sources-2.6.26-r6 (12 Nov 2008)
629
630 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
631 +hardened-sources-2.6.26-r6.ebuild:
632 Bump to Linux 2.6.26.8 and fix security bug #245650.
633
634 *hardened-sources-2.6.25-r10 (12 Nov 2008)
635
636 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
637 +hardened-sources-2.6.25-r10.ebuild:
638 Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
639
640 *hardened-sources-2.6.27-r1 (09 Nov 2008)
641
642 09 Nov 2008; Gordon Malm <gengor@gentoo.org>
643 +hardened-sources-2.6.27-r1.ebuild:
644 Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
645
646 *hardened-sources-2.6.27 (04 Nov 2008)
647
648 04 Nov 2008; Gordon Malm <gengor@gentoo.org>
649 +hardened-sources-2.6.27.ebuild:
650 Initial 2.6.27 release.
651
652 *hardened-sources-2.6.26-r5 (03 Nov 2008)
653
654 03 Nov 2008; Gordon Malm <gengor@gentoo.org>
655 -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
656 +hardened-sources-2.6.26-r5.ebuild:
657 2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
658 Clean out some old versions.
659
660 02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
661 Stable on ppc
662
663 30 Oct 2008; Gordon Malm <gengor@gentoo.org>
664 hardened-sources-2.6.25-r9.ebuild:
665 Stable on amd64/x86.
666
667 *hardened-sources-2.6.25-r9 (26 Oct 2008)
668
669 26 Oct 2008; Gordon Malm <gengor@gentoo.org>
670 +hardened-sources-2.6.25-r9.ebuild:
671 Update to Linux 2.6.25.19
672
673 15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
674 Stable on ppc
675
676 *hardened-sources-2.6.26-r4 (14 Oct 2008)
677
678 14 Oct 2008; Gordon Malm <gengor@gentoo.org>
679 -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
680 Update to latest grsecurity patch, fixing building of non-modular kernels.
681
682 *hardened-sources-2.6.26-r3 (12 Oct 2008)
683
684 12 Oct 2008; Gordon Malm <gengor@gentoo.org>
685 hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
686 +hardened-sources-2.6.26-r3.ebuild:
687 2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
688 2.6.26-r1: Removed.
689 2.6.25-r8: Stable amd64/x86.
690
691 *hardened-sources-2.6.25-r8 (09 Oct 2008)
692
693 09 Oct 2008; Gordon Malm <gengor@gentoo.org>
694 -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
695 -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
696 Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
697
698 20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
699 Stable on ppc
700
701 17 Sep 2008; Gordon Malm <gengor@gentoo.org>
702 hardened-sources-2.6.25-r7.ebuild:
703 Stable amd64/x86.
704
705 *hardened-sources-2.6.26-r2 (13 Sep 2008)
706
707 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
708 -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
709 2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
710 PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
711
712 *hardened-sources-2.6.25-r7 (13 Sep 2008)
713
714 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
715 +hardened-sources-2.6.25-r7.ebuild:
716 Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
717
718 10 Sep 2008; Gordon Malm <gengor@gentoo.org>
719 hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
720 hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
721 hardened-sources-2.6.26-r1.ebuild:
722 Update DESCRIPTION and HGPV_URI.
723
724 *hardened-sources-2.6.25-r6 (09 Sep 2008)
725
726 09 Sep 2008; Gordon Malm <gengor@gentoo.org>
727 -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
728 2.6.25-r6: Update to Linux 2.6.25.17.
729 2.6.24-r3: Removed.
730
731 08 Sep 2008; Gordon Malm <gengor@gentoo.org>
732 hardened-sources-2.6.25-r5.ebuild:
733 Stable on amd64/x86
734
735 07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
736 Update my email address.
737
738 31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
739 stable on ppc
740
741 *hardened-sources-2.6.26-r1 (23 Aug 2008)
742 *hardened-sources-2.6.25-r5 (23 Aug 2008)
743
744 23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
745 -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
746 hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
747 +hardened-sources-2.6.26-r1.ebuild:
748 Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
749 security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
750 fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
751 Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
752 (gengor).
753
754 *hardened-sources-2.6.26 (18 Aug 2008)
755 *hardened-sources-2.6.25-r4 (18 Aug 2008)
756
757 18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
758 +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
759 - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
760 to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
761 2.6.25-r2: Removed.
762
763 16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
764 Remove phreak from metadata.xml (#96398)
765
766 *hardened-sources-2.6.25-r3 (31 Jul 2008)
767
768 31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
769 -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
770 +hardened-sources-2.6.25-r3.ebuild:
771 - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
772 fixes, including security bug #231750.
773
774 28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
775 Stable on ppc
776
777 *hardened-sources-2.6.25-r2 (05 Jul 2008)
778
779 05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
780 -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
781 +hardened-sources-2.6.25-r2.ebuild:
782 2.6.23-r4: Stable x86/amd64
783 2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
784 2.6.23-r{11,12}: Removed due to multiple vulns.
785 (gengor & kerframil)
786
787 04 Jul 2008; nixnut <nixnut@gentoo.org>
788 hardened-sources-2.6.23-r13.ebuild:
789 Stable on ppc
790
791 *hardened-sources-2.6.25-r1 (30 Jun 2008)
792
793 30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
794 +hardened-sources-2.6.25-r1.ebuild:
795 2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
796 grsecurity release. 2.6.23-r13: x86/amd64 stable
797
798 *hardened-sources-2.6.25 (17 Jun 2008)
799 *hardened-sources-2.6.24-r3 (17 Jun 2008)
800 *hardened-sources-2.6.23-r13 (17 Jun 2008)
801
802 17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
803 +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
804 * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
805 #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
806 #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
807 2.6.25: Initial 2.6.25 release.
808
809 15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
810 - fasttrack to stable x86/amd64
811
812 11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
813 Fix broken digest for linux-2.6.24.tar.bz2.
814
815 *hardened-sources-2.6.24-r2 (11 May 2008)
816 *hardened-sources-2.6.23-r12 (11 May 2008)
817
818 11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
819 -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
820 +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
821 -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
822 proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
823 220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
824 security bugs 219901, 220691, 220975, 220979, 221123. New
825 genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
826 should be removed as far as I'm concerned, everything else remove due to
827 vulnerable to numerous security bugs or brokeness.
828
829 10 May 2008; nixnut <nixnut@gentoo.org>
830 hardened-sources-2.6.23-r11.ebuild:
831 Stable on ppc
832
833 05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
834 - -r11 stable on x86/amd64
835
836 *hardened-sources-2.6.23-r11 (01 May 2008)
837
838 01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
839 - version bump to fix ulgy linux bugs
840
841 *hardened-sources-2.6.24-r1 (30 Apr 2008)
842
843 30 Apr 2008; Christian Heim <phreak@gentoo.org>
844 +hardened-sources-2.6.24-r1.ebuild:
845 Revision bump (thanks to Kerin and Gordon, again), pulling
846 genpatches-2.6.24-7, solving #219089. Additionally contains further security
847 fixes plus some minor updates.
848
849 *hardened-sources-2.6.23-r10 (30 Apr 2008)
850
851 30 Apr 2008; Christian Heim <phreak@gentoo.org>
852 +hardened-sources-2.6.23-r10.ebuild:
853 Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
854 Additional contains "various other fixes".
855
856 09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
857 Update the longdescription in metadata, thanks to Gordon Malm.
858
859 08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
860 Stable on ppc wrt bug #213255
861
862 07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
863 -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
864 - stable on x86/amd64 per request. Removed obsolete ebuilds
865
866 *hardened-sources-2.6.24 (07 Apr 2008)
867
868 07 Apr 2008; Christian Heim <phreak@gentoo.org>
869 +hardened-sources-2.6.24.ebuild:
870 Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
871 <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
872 for the many contributions and their continued effort in #216612) based on
873 2.6.24 and genpatches-2.6.24-5.
874
875 The current ebuild/patchset contains these things:
876 * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
877 * Introduces bespoke server and workstation oriented security levels
878 * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
879
880 30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
881 Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
882 maintaining it).
883
884 24 Mar 2008; Christian Heim <phreak@gentoo.org>
885 hardened-sources-2.4.35-r2.ebuild:
886 Fixing SRC_URI for 2.4.35-r2.
887
888 *hardened-sources-2.6.23-r9 (22 Mar 2008)
889
890 22 Mar 2008; Christian Heim <phreak@gentoo.org>
891 +hardened-sources-2.6.23-r9.ebuild:
892 * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
893 * Change the default GIDs for some grsecurity options
894 * Revamp the Hardened [Gentoo] security level and make it the default level
895 * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
896 * Fix a recursive lock -- call to capable() within ptrace_attach()
897 * Fix bug that allows audit and iscsi operations to be controlled via netlink
898
899 *hardened-sources-2.6.23-r8 (27 Feb 2008)
900
901 27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
902 - version bump from Kerin Millar bug 210026
903
904 17 Feb 2008; <solar@gentoo.org> metadata.xml,
905 -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
906 -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
907 -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
908 - stable on x86 and remove old ebuilds
909
910 15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
911 - stable on amd64 per request of amd64 lead
912
913 *hardened-sources-2.6.23-r7 (11 Feb 2008)
914
915 11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
916 - version bump from kerin.millar
917 Changes:
918
919 * Bump to genpatches-base-2.6.23-9
920 * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
921 * Disables COMPAT_VDSO in x86/defconfig
922 * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
923
924 25 Jan 2008; Christian Heim <phreak@gentoo.org>
925 -hardened-sources-2.6.22-r8.ebuild:
926 Cleaning up old versions.
927
928 *hardened-sources-2.6.23-r6 (25 Jan 2008)
929
930 25 Jan 2008; Christian Heim <phreak@gentoo.org>
931 -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
932 Revision bump, pulling in the latest genpatches.
933
934 *hardened-sources-2.6.23-r5 (24 Dec 2007)
935
936 24 Dec 2007; Christian Heim <phreak@gentoo.org>
937 hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
938 hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
939 hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
940 Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
941
942 24 Dec 2007; Christian Heim <phreak@gentoo.org>
943 -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
944 -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
945 -hardened-sources-2.6.23-r3.ebuild:
946 Cleaning out some unused, old versions.
947
948 24 Dec 2007; Christian Heim <phreak@gentoo.org>
949 hardened-sources-2.6.23-r4.ebuild:
950 Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
951 in the tree for long, but there isn't much of a difference between this and
952 -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
953
954 *hardened-sources-2.6.23-r4 (23 Dec 2007)
955
956 23 Dec 2007; Christian Heim <phreak@gentoo.org>
957 +hardened-sources-2.6.23-r4.ebuild:
958 Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
959
960 *hardened-sources-2.6.23-r3 (04 Dec 2007)
961
962 04 Dec 2007; Christian Heim <phreak@gentoo.org>
963 +hardened-sources-2.6.23-r3.ebuild:
964 Revision bump, pulling in 2.6.23.9.
965
966 *hardened-sources-2.6.23-r2 (25 Nov 2007)
967
968 25 Nov 2007; Christian Heim <phreak@gentoo.org>
969 +hardened-sources-2.6.23-r2.ebuild:
970 Updated patchset, thanks to solar.
971
972 *hardened-sources-2.6.23-r1 (31 Oct 2007)
973
974 31 Oct 2007; Christian Heim <phreak@gentoo.org>
975 +hardened-sources-2.6.23-r1.ebuild:
976 Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
977
978 29 Oct 2007; <solar@gentoo.org> metadata.xml:
979 - update metadata.xml
980
981 25 Oct 2007; Christian Heim <phreak@gentoo.org>
982 hardened-sources-2.6.22-r8.ebuild:
983 Marking 2.6.22-r8 stable on amd64 and x86.
984
985 21 Oct 2007; Christian Heim <phreak@gentoo.org>
986 -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
987 -hardened-sources-2.6.21-r4.ebuild:
988 Removing old ebuilds.
989
990 *hardened-sources-2.4.35-r2 (21 Oct 2007)
991
992 21 Oct 2007; Christian Heim <phreak@gentoo.org>
993 +hardened-sources-2.4.35-r2.ebuild:
994 Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
995 patches.
996
997 *hardened-sources-2.6.22-r8 (21 Oct 2007)
998
999 21 Oct 2007; Christian Heim <phreak@gentoo.org>
1000 +hardened-sources-2.6.22-r8.ebuild:
1001 Yet another new patch, hopefully fixing the remaining issues we had w/
1002 2.6.22. Candidate for stabling.
1003
1004 *hardened-sources-2.6.23 (13 Oct 2007)
1005
1006 13 Oct 2007; Christian Heim <phreak@gentoo.org>
1007 +hardened-sources-2.6.23.ebuild:
1008 Initial hardened-sources-2.6.23. If people still have problems w/ bug
1009 194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
1010
1011 11 Oct 2007; Christian Heim <phreak@gentoo.org>
1012 hardened-sources-2.6.20-r10.ebuild:
1013 Pulling in yet another new genpatches version, fixing the PWC bug for real.
1014
1015 04 Oct 2007; Christian Heim <phreak@gentoo.org>
1016 -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
1017 Removing old versions.
1018
1019 *hardened-sources-2.6.22-r7 (01 Oct 2007)
1020
1021 01 Oct 2007; Christian Heim <phreak@gentoo.org>
1022 +hardened-sources-2.6.22-r7.ebuild:
1023 Revision bump, pulling in a newer patch. Should fix #194276.
1024
1025 30 Sep 2007; Christian Heim <phreak@gentoo.org>
1026 hardened-sources-2.6.20-r10.ebuild:
1027 Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
1028 Mike Doty).
1029
1030 *hardened-sources-2.6.22-r6 (26 Sep 2007)
1031
1032 26 Sep 2007; Christian Heim <phreak@gentoo.org>
1033 +hardened-sources-2.6.22-r6.ebuild:
1034 Revision bump, grabbing up till Linux 2.6.22.9.
1035
1036 24 Sep 2007; Christian Heim <phreak@gentoo.org>
1037 -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
1038 Cleaning up further.
1039
1040 *hardened-sources-2.6.20-r10 (24 Sep 2007)
1041
1042 24 Sep 2007; Christian Heim <phreak@gentoo.org>
1043 -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
1044 +hardened-sources-2.6.20-r10.ebuild:
1045 Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
1046 revisions.
1047
1048 *hardened-sources-2.6.22-r5 (22 Sep 2007)
1049
1050 22 Sep 2007; Christian Heim <phreak@gentoo.org>
1051 +hardened-sources-2.6.22-r5.ebuild:
1052 Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
1053
1054 17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1055 Removing johnm from metadata.xml (see #186467 for reference).
1056
1057 *hardened-sources-2.6.22-r4 (17 Sep 2007)
1058
1059 17 Sep 2007; Christian Heim <phreak@gentoo.org>
1060 +hardened-sources-2.6.22-r4.ebuild:
1061 Revision bump, hopefully fixing all those weird PAX failures.
1062
1063 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1064 Updating the metadata.xml.
1065
1066 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1067 Removing tocharian from metadata due to his retirement (see #71718 for
1068 reference).
1069
1070 *hardened-sources-2.6.20-r9 (30 Aug 2007)
1071
1072 30 Aug 2007; Christian Heim <phreak@gentoo.org>
1073 +hardened-sources-2.6.20-r9.ebuild:
1074 Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
1075
1076 29 Aug 2007; Christian Heim <phreak@gentoo.org>
1077 -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
1078 -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
1079 -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
1080 -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
1081 -hardened-sources-2.6.22-r2.ebuild:
1082 Removing some redundant versions.
1083
1084 *hardened-sources-2.4.35-r1 (29 Aug 2007)
1085
1086 29 Aug 2007; Christian Heim <phreak@gentoo.org>
1087 +hardened-sources-2.4.35-r1.ebuild:
1088 Revision bump, new grsecurity patch.
1089
1090 *hardened-sources-2.6.20-r8 (26 Aug 2007)
1091
1092 26 Aug 2007; Christian Heim <phreak@gentoo.org>
1093 +hardened-sources-2.6.20-r8.ebuild:
1094 Revision bump for Linux 2.6.20.17.
1095
1096 *hardened-sources-2.6.22-r3 (22 Aug 2007)
1097
1098 22 Aug 2007; Christian Heim <phreak@gentoo.org>
1099 +hardened-sources-2.6.22-r3.ebuild:
1100 Revision bump for Linux 2.6.22.4.
1101
1102 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1103 hardened-sources-2.6.22-r2.ebuild:
1104 Updated patchset, to fix the alignment against 2.6.22.3.
1105
1106 *hardened-sources-2.6.22-r2 (16 Aug 2007)
1107
1108 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1109 +hardened-sources-2.6.22-r2.ebuild:
1110 Revision bump for Linux 2.6.22.3.
1111
1112 *hardened-sources-2.4.35 (16 Aug 2007)
1113
1114 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1115 +hardened-sources-2.4.35.ebuild:
1116 Version bump, initial version for Linux 2.4.35.
1117
1118 *hardened-sources-2.6.21-r4 (16 Aug 2007)
1119
1120 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1121 +hardened-sources-2.6.21-r4.ebuild:
1122 Revision bump for Linux 2.6.21.6.
1123
1124 *hardened-sources-2.6.20-r7 (16 Aug 2007)
1125
1126 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1127 +hardened-sources-2.6.20-r7.ebuild:
1128 Revision bump for Linux 2.6.20.16.
1129
1130 *hardened-sources-2.6.22-r1 (13 Aug 2007)
1131
1132 13 Aug 2007; Christian Heim <phreak@gentoo.org>
1133 +hardened-sources-2.6.22-r1.ebuild:
1134 Yet another revision bump.
1135
1136 *hardened-sources-2.6.22 (10 Aug 2007)
1137
1138 10 Aug 2007; Christian Heim <phreak@gentoo.org>
1139 +hardened-sources-2.6.22.ebuild:
1140 Initial release for 2.6.22. If you are using hardened-sources on a desktop
1141 machine (P4 or newer), be aware you might need to disable
1142 CONFIG_PAX_PAGEEXEC.
1143
1144 04 Aug 2007; Christian Heim <phreak@gentoo.org>
1145 hardened-sources-2.6.20-r6.ebuild:
1146 Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
1147 2.6.20.15.
1148
1149 10 Jul 2007; Christian Heim <phreak@gentoo.org>
1150 hardened-sources-2.6.20-r5.ebuild:
1151 Marking hardened-sources-2.6.20-r5 stable on ppc.
1152
1153 10 Jul 2007; Christian Heim <phreak@gentoo.org>
1154 -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
1155 Cleanup.
1156
1157 *hardened-sources-2.6.20-r6 (08 Jul 2007)
1158
1159 08 Jul 2007; Christian Heim <phreak@gentoo.org>
1160 +hardened-sources-2.6.20-r6.ebuild:
1161 Revision bump, grabbing yet another stable release.
1162
1163 17 Jun 2007; Christian Heim <phreak@gentoo.org>
1164 -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
1165 -hardened-sources-2.6.21-r2.ebuild:
1166 Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
1167 alpha stable KEYWORD by mistake.
1168
1169 17 Jun 2007; Christian Heim <phreak@gentoo.org>
1170 hardened-sources-2.6.20-r5.ebuild:
1171 Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
1172 genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
1173
1174 *hardened-sources-2.6.21-r3 (12 Jun 2007)
1175
1176 12 Jun 2007; Christian Heim <phreak@gentoo.org>
1177 +hardened-sources-2.6.21-r3.ebuild:
1178 Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
1179 of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
1180 love.
1181
1182 *hardened-sources-2.6.20-r5 (11 Jun 2007)
1183
1184 11 Jun 2007; Christian Heim <phreak@gentoo.org>
1185 +hardened-sources-2.6.20-r5.ebuild:
1186 Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1187 of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1188 love.
1189
1190 *hardened-sources-2.4.34.5 (11 Jun 2007)
1191
1192 11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1193 +hardened-sources-2.4.34.5.ebuild:
1194 added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1195
1196 30 May 2007; Christian Heim <phreak@gentoo.org>
1197 -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1198 Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1199 stale ebuild(s).
1200
1201 30 May 2007; Christian Heim <phreak@gentoo.org>
1202 -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1203 -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1204 -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1205 Doing some cleanups, remove stale ebuilds.
1206
1207 26 May 2007; Christian Heim <phreak@gentoo.org>
1208 hardened-sources-2.6.21-r2.ebuild:
1209 Fixing the grsecurity patch, had one '};' too much.
1210
1211 *hardened-sources-2.6.21-r2 (26 May 2007)
1212
1213 26 May 2007; Christian Heim <phreak@gentoo.org>
1214 -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1215 +hardened-sources-2.6.21-r2.ebuild:
1216 Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1217 grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1218
1219 *hardened-sources-2.6.20-r4 (26 May 2007)
1220
1221 26 May 2007; Christian Heim <phreak@gentoo.org>
1222 -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1223 Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1224 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1225
1226 15 May 2007; Christian Heim <phreak@gentoo.org>
1227 hardened-sources-2.6.20-r3.ebuild:
1228 Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1229 introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1230 grsecurity patch fail in that exact same hunk.
1231
1232 *hardened-sources-2.6.20-r3 (15 May 2007)
1233
1234 15 May 2007; Christian Heim <phreak@gentoo.org>
1235 +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1236 Revision bump, incorporating Linux 2.6.20.11.
1237
1238 *hardened-sources-2.6.21-r1 (11 May 2007)
1239
1240 11 May 2007; Christian Heim <phreak@gentoo.org>
1241 +hardened-sources-2.6.21-r1.ebuild:
1242 Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1243 mentioned in #177234.
1244
1245 07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1246 files/digest-hardened-sources-2.6.21, Manifest:
1247 Fix Manifest/digest for linux-2.6.21.tar.bz2
1248
1249 06 May 2007; Christian Heim <phreak@gentoo.org>
1250 hardened-sources-2.6.21.ebuild:
1251 Bumping the hardened-patches version, needed for the fix for #177234.
1252
1253 *hardened-sources-2.6.21 (02 May 2007)
1254
1255 02 May 2007; Christian Heim <phreak@gentoo.org>
1256 +hardened-sources-2.6.21.ebuild:
1257 Version bump, Linux 2.6.21-hardened.
1258
1259 29 Apr 2007; Christian Heim <phreak@gentoo.org>
1260 hardened-sources-2.6.20-r2.ebuild:
1261 Adding ~ia64 on Ned's request.
1262
1263 29 Apr 2007; Christian Heim <phreak@gentoo.org>
1264 hardened-sources-2.6.20-r2.ebuild:
1265 Fixing the included grsecurity patch, wasn't alligning due to the Index:
1266 header line(s).
1267
1268 29 Apr 2007; Christian Heim <phreak@gentoo.org>
1269 hardened-sources-2.6.20-r2.ebuild:
1270 Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1271
1272 *hardened-sources-2.6.20-r2 (10 Apr 2007)
1273
1274 10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1275 +hardened-sources-2.6.20-r2.ebuild:
1276 Version bump, on behalf of phreak
1277
1278 *hardened-sources-2.6.20-r1 (04 Apr 2007)
1279
1280 04 Apr 2007; Christian Heim <phreak@gentoo.org>
1281 +hardened-sources-2.6.20-r1.ebuild:
1282 Revision bump, grabbing a newer grsecurity snapshot.
1283
1284 *hardened-sources-2.6.20 (25 Mar 2007)
1285
1286 25 Mar 2007; Christian Heim <phreak@gentoo.org>
1287 +hardened-sources-2.6.20.ebuild:
1288 Finally a hardened-sources version for 2.6.20; many people have been waiting
1289 for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1290 testbox.
1291
1292 16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1293 hardened-sources-2.6.18-r6.ebuild:
1294 Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1295
1296 *hardened-sources-2.6.18-r6 (16 Mar 2007)
1297
1298 16 Mar 2007; Christian Heim <phreak@gentoo.org>
1299 -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1300 Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1301 yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1302 supposed to be.
1303
1304 06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1305 Fixing the Manifest, the previous one was broken (as in still had the
1306 deleted ebuild in it).
1307
1308 06 Mar 2007; Christian Heim <phreak@gentoo.org>
1309 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1310 +hardened-sources-2.6.18-r5.ebuild:
1311 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1312 Linux 2.6.18.8. Also cleaning up the older version.
1313
1314 *hardened-sources-2.6.18-r5 (06 Mar 2007)
1315
1316 06 Mar 2007; Christian Heim <phreak@gentoo.org>
1317 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1318 +hardened-sources-2.6.18-r5.ebuild:
1319 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1320 Linux 2.6.18.8. Also cleaning up the older version.
1321
1322 24 Feb 2007; Christian Heim <phreak@gentoo.org>
1323 -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1324 -hardened-sources-2.6.19-r5.ebuild:
1325 Removing some of the old version, that didn't work.
1326
1327 *hardened-sources-2.6.19-r6 (12 Feb 2007)
1328
1329 12 Feb 2007; Christian Heim <phreak@gentoo.org>
1330 +hardened-sources-2.6.19-r6.ebuild:
1331 Revision bump, including a new grsec version fixing #166235.
1332
1333 *hardened-sources-2.4.34 (24 Jan 2007)
1334
1335 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1336 Manifest:
1337 updating Manifest with checksums of new tarball and ebuild
1338
1339 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1340 +hardened-sources-2.4.34.ebuild:
1341 I added new hardened sources 2.4 update, this is a critical path
1342 security bugfix - all users of h-s are strongly advised
1343 to update their existing hardened sources to this version.
1344 It contains a fix for a kernel vulnerability that is pertaining
1345 to the PaX changes to virtual memory management, possibly leading
1346 to a local kernel exploit ... see grsecurity.net forums and homepage
1347
1348 23 Jan 2007; Christian Heim <phreak@gentoo.org>
1349 files/digest-hardened-sources-2.6.19-r5, Manifest:
1350 Fixing the patch-tarball digest.
1351
1352 *hardened-sources-2.6.19-r5 (23 Jan 2007)
1353
1354 23 Jan 2007; Christian Heim <phreak@gentoo.org>
1355 +hardened-sources-2.6.19-r5.ebuild:
1356 Revision bump, closing the recently discovered PaX expand_stack()
1357 vulnerability.
1358
1359 *hardened-sources-2.6.19-r4 (14 Jan 2007)
1360
1361 14 Jan 2007; Christian Heim <phreak@gentoo.org>
1362 +hardened-sources-2.6.19-r4.ebuild:
1363 Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1364 dropping the randomized PID feature.
1365
1366 11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1367 hardened-sources-2.4.33.4.ebuild:
1368 stable x86, bug #161171
1369
1370 *hardened-sources-2.6.19-r3 (27 Dec 2006)
1371
1372 27 Dec 2006; Christian Heim <phreak@gentoo.org>
1373 -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1374 Revision bump for bug #157186 and #158786.
1375
1376 *hardened-sources-2.6.18-r4 (27 Dec 2006)
1377
1378 27 Dec 2006; Christian Heim <phreak@gentoo.org>
1379 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1380 Revision bump for bug #157186.
1381
1382 *hardened-sources-2.6.19-r2 (23 Dec 2006)
1383
1384 23 Dec 2006; Christian Heim <phreak@gentoo.org>
1385 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1386 Revision bump to pull in genpatches-2.6.19-3 for #157186.
1387
1388 17 Dec 2006; Christian Heim <phreak@gentoo.org>
1389 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1390 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1391 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1392 hardened-sources-2.6.19-r1.ebuild:
1393 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1394 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1395
1396 *hardened-sources-2.4.33.4 (17 Dec 2006)
1397
1398 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1399 +hardened-sources-2.4.33.4.ebuild:
1400 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1401 and quilting
1402
1403 *hardened-sources-2.6.19-r1 (14 Dec 2006)
1404
1405 14 Dec 2006; Christian Heim <phreak@gentoo.org>
1406 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1407 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1408 for reporting).
1409
1410 *hardened-sources-2.6.19 (13 Dec 2006)
1411
1412 13 Dec 2006; Christian Heim <phreak@gentoo.org>
1413 +hardened-sources-2.6.19.ebuild:
1414 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1415 Brad for providing that prompt update.
1416
1417 *hardened-sources-2.6.18-r3 (13 Dec 2006)
1418
1419 13 Dec 2006; Christian Heim <phreak@gentoo.org>
1420 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1421 +hardened-sources-2.6.18-r3.ebuild:
1422 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1423 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1424
1425 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1426 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1427
1428 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1429 Stable on ppc wrt bug 157356
1430
1431 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1432 hardened-sources-2.6.18.ebuild:
1433 stable x86, bug #157356
1434
1435 *hardened-sources-2.6.18-r2 (06 Dec 2006)
1436
1437 06 Dec 2006; Christian Heim <phreak@gentoo.org>
1438 +hardened-sources-2.6.18-r2.ebuild:
1439 Revision bump, including 2.6.18.5 (via genpatches) and
1440 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1441 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1442 redesign.
1443
1444 06 Dec 2006; Christian Heim <phreak@gentoo.org>
1445 hardened-sources-2.6.18.ebuild:
1446 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1447 of Mike Doty).
1448
1449 *hardened-sources-2.6.18-r1 (23 Nov 2006)
1450
1451 23 Nov 2006; Christian Heim <phreak@gentoo.org>
1452 +hardened-sources-2.6.18-r1.ebuild:
1453 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1454
1455 *hardened-sources-2.6.18 (11 Nov 2006)
1456
1457 11 Nov 2006; Christian Heim <phreak@gentoo.org>
1458 +hardened-sources-2.6.18.ebuild:
1459 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1460
1461 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1462 - mark amd64 stable also. bug #151877
1463
1464 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1465 - mark 2.6.17-r1 stable
1466
1467 27 Aug 2006; Christian Heim <phreak@gentoo.org>
1468 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1469 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1470
1471 *hardened-sources-2.6.17-r1 (26 Aug 2006)
1472
1473 26 Aug 2006; Christian Heim <phreak@gentoo.org>
1474 +hardened-sources-2.6.17-r1.ebuild:
1475 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1476 grsecurity patch.
1477
1478 *hardened-sources-2.6.17 (17 Aug 2006)
1479
1480 17 Aug 2006; Christian Heim <phreak@gentoo.org>
1481 +hardened-sources-2.6.17.ebuild:
1482 Bumping the hardened-sources-2.6 series to 2.6.17, using
1483 genpatches-2.6.17-6.base.
1484
1485 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1486 - stable on x86 and amd64
1487
1488 *hardened-sources-2.6.16-r11 (15 Jul 2006)
1489
1490 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1491 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1492 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1493 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1494 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1495 crusty ebuilds
1496
1497 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1498 hardened-sources-2.6.16-r10.ebuild:
1499 marking stable on x86 and amd64
1500
1501 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1502 - 2.4.32-r6 stable on x86. RSBAC state unknown
1503
1504 *hardened-sources-2.4.32-r7 (10 Jul 2006)
1505
1506 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1507 +hardened-sources-2.4.32-r7.ebuild:
1508 Bump PaX for RSBAC to test-17
1509
1510 *hardened-sources-2.6.16-r9 (03 Jul 2006)
1511
1512 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1513 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1514 hardened-sources-2.6.16 bump to latest -base.
1515
1516 *hardened-sources-2.4.32-r6 (30 Jun 2006)
1517
1518 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1519 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1520 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1521 sysctl controlable resource logging
1522
1523 *hardened-sources-2.6.16-r7 (05 Jun 2006)
1524
1525 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1526 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1527 push new 2.6.16 release in preparation for stable
1528
1529 22 May 2006; <solar@gentoo.org> :
1530 - redigest bug 134002
1531
1532 *hardened-sources-2.4.32-r5 (16 May 2006)
1533
1534 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1535 +hardened-sources-2.4.32-r5.ebuild:
1536 Fixes rsbac common patching (new patch in new -r5 patchset)
1537
1538 *hardened-sources-2.4.32-r4 (13 May 2006)
1539
1540 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1541 +hardened-sources-2.4.32-r4.ebuild:
1542 - security bumps
1543
1544 *hardened-sources-2.6.16-r6 (03 May 2006)
1545
1546 03 May 2006; John Mylchreest <johnm@gentoo.org>
1547 +hardened-sources-2.6.16-r6.ebuild:
1548 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1549
1550 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1551 hardened-sources-2.6.14-r8.ebuild:
1552 fix x86_64 build problem, this will delay the digest issue again for a short
1553 while but it will sort itself out
1554
1555 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1556 hardened-sources-2.6.14-r8.ebuild:
1557 bump hardened patchset
1558
1559 27 Apr 2006; Alec Warner <antarus@gentoo.org>
1560 files/digest-hardened-sources-2.4.32-r2,
1561 files/digest-hardened-sources-2.4.32-r3,
1562 files/digest-hardened-sources-2.6.14-r8, Manifest:
1563 Fixing duff SHA256 digests: Bug # 131293
1564
1565 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1566
1567 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1568 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1569 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1570 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1571 cleanup of old uneccessary sources
1572
1573 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1574 fix digest
1575
1576 *hardened-sources-2.6.14-r8 (20 Apr 2006)
1577
1578 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1579 +hardened-sources-2.6.14-r8.ebuild:
1580 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1581
1582 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1583 Turning on gpg-signing again, and recomitting
1584
1585 *hardened-sources-2.6.16-r4 (20 Apr 2006)
1586
1587 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1588 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1589 +hardened-sources-2.6.16-r4.ebuild:
1590 Fix numerous security vulns
1591
1592 *hardened-sources-2.4.32-r3 (16 Apr 2006)
1593
1594 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1595 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1596 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1597 - security bump for bug #112791. Removed old ebuilds
1598
1599 *hardened-sources-2.6.16-r3 (15 Apr 2006)
1600
1601 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1602 +hardened-sources-2.6.16-r3.ebuild:
1603 Removing silly localversion which I missed
1604
1605 *hardened-sources-2.6.14-r7 (14 Apr 2006)
1606
1607 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1608 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1609 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1610
1611 *hardened-sources-2.6.16-r2 (13 Apr 2006)
1612
1613 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1614 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1615 +hardened-sources-2.6.16-r2.ebuild:
1616 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1617 labels, dropping USERGROUP define fixes, since these were merged mainstream.
1618
1619 *hardened-sources-2.6.16-r1 (11 Apr 2006)
1620
1621 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1622 +hardened-sources-2.6.16-r1.ebuild:
1623 Bumping to include ppc build fix and 2.6.16.3
1624
1625 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1626 hardened-sources-2.6.14-r6.ebuild:
1627 Stable on x86; bug #127718
1628
1629 *hardened-sources-2.6.16 (31 Mar 2006)
1630
1631 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1632 +hardened-sources-2.6.16.ebuild:
1633 Bumping to new version of grsec, and kernel base. New squashfs. Based on
1634 2.6.16.1
1635
1636 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1637 hardened-sources-2.6.14-r6.ebuild:
1638 Stable on amd64, bug 127718.
1639
1640 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1641 Stable on ppc. Bug #127718
1642
1643 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1644 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1645 -hardened-sources-2.6.14-r4.ebuild:
1646 Cleanup.
1647
1648 *hardened-sources-2.6.14-r6 (15 Mar 2006)
1649
1650 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1651 +hardened-sources-2.6.14-r6.ebuild:
1652 Fixes grsec policy recreation bug and adds a
1653 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1654
1655 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1656 - stable on x86
1657
1658 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1659 hardened-sources-2.6.14-r5.ebuild:
1660 Stable on ppc.
1661
1662 *hardened-sources-2.6.14-r5 (01 Feb 2006)
1663
1664 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1665 +hardened-sources-2.6.14-r5.ebuild:
1666 fixing every known exploit
1667
1668 *hardened-sources-2.4.32-r2 (26 Jan 2006)
1669
1670 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1671 +hardened-sources-2.4.32-r2.ebuild:
1672 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1673
1674 *hardened-sources-2.6.14-r4 (12 Jan 2006)
1675
1676 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1677 - version bump for new genpatches which fix up a few sec holes
1678
1679 *hardened-sources-2.4.32-r1 (05 Jan 2006)
1680
1681 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1682 - revision bump to add misc vital linux kernel security patches.
1683
1684 *hardened-sources-2.6.14-r3 (30 Dec 2005)
1685
1686 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1687 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1688 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1689
1690 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1691 hardened-sources-2.6.14-r2.ebuild:
1692 making x86 & amd64 stable following testing.
1693
1694 *hardened-sources-2.6.14-r2 (27 Dec 2005)
1695
1696 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1697 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1698 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1699 network hooks.
1700
1701 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1702 hardened-sources-2.6.14-r1.ebuild:
1703 bumping to stable early for sec fix on x86 & amd64
1704
1705 *hardened-sources-2.6.14-r1 (05 Dec 2005)
1706
1707 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1708 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1709 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1710
1711 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1712 - stable on x86 security bug #114227 CAN-2005-3257
1713
1714 *hardened-sources-2.4.32 (19 Nov 2005)
1715
1716 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1717 +hardened-sources-2.4.32.ebuild:
1718 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1719 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1720 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1721 rsbac >> /etc/portage/package.use)
1722
1723 *hardened-sources-2.6.14 (14 Nov 2005)
1724
1725 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1726 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1727 Bumping 2.6 series to 2.6.14.2
1728
1729 *hardened-sources-2.6.13-r2 (20 Oct 2005)
1730
1731 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1732 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1733 +hardened-sources-2.6.13-r2.ebuild:
1734 Fixes minor build error in ppc.
1735
1736 *hardened-sources-2.6.13-r1 (17 Oct 2005)
1737
1738 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1739 +hardened-sources-2.6.13-r1.ebuild:
1740 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1741 2.6.13.4, fixes some major amd64 stability problems.
1742
1743 *hardened-sources-2.6.13 (16 Sep 2005)
1744
1745 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1746 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1747 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1748 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1749 users should test this thoroughly.
1750
1751 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1752 - stable on x86
1753
1754 *hardened-sources-2.6.11-r15 (27 Jun 2005)
1755
1756 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1757 +hardened-sources-2.6.11-r15.ebuild:
1758 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1759 grsec redefining curr_ip struct.
1760
1761 *hardened-sources-2.4.31 (20 Jun 2005)
1762
1763 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1764 initial import of 2.4.31 tree
1765
1766 *hardened-sources-2.6.11-r14 (14 Jun 2005)
1767
1768 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1769 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1770 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1771 naming scheme to abide by genpatches
1772
1773 *hardened-sources-2.6.11-r13 (18 May 2005)
1774
1775 18 May 2005; John Mylchreest <johnm@gentoo.org>
1776 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1777 Managed to mangle the Makefile patch from grsec, to miss out the grsec
1778 target. sorry about that. Fixes bug #93022
1779
1780 *hardened-sources-2.6.11-r12 (17 May 2005)
1781
1782 17 May 2005; John Mylchreest <johnm@gentoo.org>
1783 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1784 +hardened-sources-2.6.11-r12.ebuild:
1785 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1786 merges in genpatches-base
1787
1788 *hardened-sources-2.6.11-r12 (17 May 2005)
1789
1790 17 May 2005; John Mylchreest <johnm@gentoo.org>
1791 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1792 +hardened-sources-2.6.11-r12.ebuild:
1793 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1794 merges in genpatches-base
1795
1796 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1797 -files/2.4.27-cmdline-race.patch,
1798 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1799 -files/2.4.28-grsec-binfmt_a.out.patch,
1800 -files/2.4.28-grsec-cmdline-race.patch,
1801 -files/2.4.28-selinux-binfmt_a.out.patch,
1802 -files/2.4.28-selinux-cmdline-race.patch,
1803 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1804 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1805 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1806 cleanup..
1807
1808 *hardened-sources-2.4.30-r1 (21 Apr 2005)
1809
1810 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1811 - disable aout by default
1812
1813 *hardened-sources-2.4.30 (18 Apr 2005)
1814
1815 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1816 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1817 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1818 use
1819
1820 *hardened-sources-2.4.29 (30 Mar 2005)
1821
1822 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1823 +hardened-sources-2.4.29.ebuild:
1824 New hardened-patches-2.4-29.0 patchball.
1825 Removed SELinux support, upgraded GRSecurity to 2.1.4.
1826
1827 *hardened-sources-2.4.28-r5 (06 Mar 2005)
1828
1829 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1830 +hardened-sources-2.4.28-r5.ebuild:
1831 Added a fix for a PaX vulnerability.
1832
1833 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1834 hardened-sources-2.4.28-r4.ebuild:
1835 Stable on x86
1836
1837 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1838 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1839 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1840 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1841 - fixed/added RDEPEND= in all kernel-2 ebuilds
1842
1843 *hardened-sources-2.4.28-r4 (21 Jan 2005)
1844
1845 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1846 +hardened-sources-2.4.28-r4.ebuild:
1847 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1848 backport of neighbour hash updates.
1849
1850 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1851 hardened-sources-2.4.28-r3.ebuild:
1852 Stable on x86
1853
1854 *hardened-sources-2.6.10-r3 (20 Jan 2005)
1855
1856 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1857 +hardened-sources-2.6.10-r3.ebuild:
1858 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1859 in 2005.0
1860
1861 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1862 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1863 hardened-sources-2.4.28-r2.ebuild:
1864 Mark stable on x86
1865
1866 *hardened-sources-2.4.28-r3 (17 Jan 2005)
1867
1868 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1869 +hardened-sources-2.4.28-r3.ebuild:
1870 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1871
1872 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1873 hardened-sources-2.4.28.ebuild:
1874 Mark stable on x86.
1875
1876 *hardened-sources-2.4.28-r2 (13 Jan 2005)
1877
1878 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1879 +hardened-sources-2.4.28-r2.ebuild:
1880 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1881 Mazinger for grsecurity patches as well.
1882
1883 *hardened-sources-2.4.28-r1 (23 Dec 2004)
1884
1885 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1886 Security bump. Thank tocharian for rolling a new patchset...
1887
1888 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1889 +files/2.4.28-grsec-cmdline-race.patch,
1890 +files/2.4.28-selinux-binfmt_a.out.patch,
1891 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1892 - Round up remaining security patches that appear to be missing in 2.4.28. -
1893 PaX standalone updated to current. hgpv=28.1
1894
1895 *hardened-sources-2.4.28 (28 Nov 2004)
1896
1897 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1898 security bump. Thank tocharian for rolling a new patchset
1899
1900 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1901
1902 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1903 +hardened-sources-2.4.27-r3.ebuild:
1904 Applies the new 2.4-27.2 patchball which updates
1905 GRSecurity to the 2.0.1 version.
1906
1907 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1908
1909 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1910 +hardened-sources-2.4.27-r2.ebuild:
1911 Version bump.
1912 This version uses the new 2.4-27.1 patchball which updates
1913 both the SELinux PaX hooks patch and the SELinux headers.
1914
1915 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1916
1917 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1918 +hardened-sources-2.4.27-r1.ebuild,
1919 -hardened-sources-2.4.27.ebuild,
1920 +files/2.4.27-cmdline-race.patch:
1921 Version bump, fix for cmdline race. See bug #59905.
1922
1923 *hardened-sources-2.4.26-r6 (09 Aug 2004)
1924
1925 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1926 +hardened-sources-2.4.26-r6.ebuild,
1927 -hardened-sources-2.4.26-r5.ebuild,
1928 -hardened-sources-2.4.26-r4.ebuild,
1929 +files/2.4.26-cmdline-race.patch:
1930 Version bump, fix for cmdline race. See bug #59905.
1931
1932 *hardened-sources-2.4.27 (08 Aug 2004)
1933
1934 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1935 +hardened-sources-2.4.27.ebuild,
1936 +files/2.4.27-CAN-2004-0394.patch:
1937 Ported the patchball to the 2.4.27 kernel version.
1938
1939 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1940
1941 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1942 +hardened-sources-2.4.26-r5.ebuild:
1943 Updated to use the new hardened-patches-2.4-26.1 patchball.
1944 It adds the following features:
1945 - Squashfs
1946 - Ebtables
1947 - Netdev random (core+drivers)
1948 - Watchdog Timer (WDT) fix.
1949
1950 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1951
1952 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1953 +hardened-sources-2.4.26-r4.ebuild,
1954 +files/2.4.26-CAN-2004-0415.patch,
1955 -hardened-sources-2.4.26-3:
1956 Version bump, fix for CAN 0415, see bug #59378.
1957
1958 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1959
1960 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1961 +hardened-sources-2.4.26-r3.ebuild,
1962 +files/2.4.26-CAN-2004-0497.patch,
1963 -hardened-sources-2.4.26-r2.ebuild:
1964 Version bump, fixed CAN 0497, see bug #56171.
1965
1966 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1967
1968 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1969 +hardened-sources-2.4.26-r2.ebuild,
1970 +files/2.4.26-CAN-2004-0495.patch,
1971 +files/2.4.26-CAN-2004-0535.patch,
1972 -hardened-sources-2.4.26-r1.ebuild:
1973 Fixes for both CAN 0495 and 0535, see bug #54976
1974
1975 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1976 hardened-sources-2.4.26-r1.ebuild:
1977 QA - fix use invocation
1978
1979 *hardened-sources-2.4.26-r1 (22 June 2004)
1980
1981 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1982 +hardened-sources-2.4.26-r1.ebuild,
1983 +files/2.4.26-CAN-2004-0394.patch,
1984 +files/2.4.26-signal-race.patch,
1985 -hardened-sources-2.4.26.ebuild,
1986 -hardened-sources-2.4.24-r3.ebuild:
1987 Version bump for the CAN-2004-0394 issue and bug #53804
1988 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1989
1990
1991 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1992 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1993 Masked hardened-sources-2.4.26.ebuild broken for ppc
1994
1995 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1996 hardened-sources-2.4.24-r3.ebuild:
1997 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1998
1999 *hardened-sources-2.4.26 (29 May 2004)
2000
2001 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
2002 +hardened-sources-2.4.26.ebuild:
2003 Updated hardened-sources for the 2.4.26 kernel
2004 Removed broken components, updated almost everything.
2005
2006 *hardened-sources-2.4.24-r3 (17 Apr 2004)
2007
2008 17 Apr 2004; <plasmaroo@gentoo.org>
2009 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
2010 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
2011 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
2012 +hardened-sources-2.4.24-r3.ebuild:
2013 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
2014 vulnerabilities. Old revisions removed.
2015
2016 *hardened-sources-2.4.24-r2 (15 Apr 2004)
2017
2018 15 Apr 2004; <plasmaroo@gentoo.org>
2019 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
2020 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
2021 Version bump for the CAN-2004-0109 issue; bug #47881.
2022
2023 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
2024 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
2025 Add eutils to inherit.
2026
2027 *hardened-sources-2.4.24-r1 (19 Feb 2004)
2028
2029 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
2030 files/hardened-sources-2.4.24.munmap.patch:
2031 Added the patch for the mremap/munmap vulnerability. Bug #42024.
2032
2033 *hardened-sources-2.4.24 (06 Feb 2004)
2034
2035 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
2036 hardened-sources-2.4.24.ebuild:
2037 Version bump, updated most of the components.
2038 This release includes the following:
2039
2040 - Hardened security
2041 - Netfilter patch-o-matic 20031219
2042 - FreeSWAN 2.04 & x509 1.4.8
2043 - EVMS 2.2.2
2044 - XFS 1.3.1
2045 - cryptoloop jari
2046 - grsecurity 2.0-rc4
2047 - SELinux
2048 - PaX 200402060000
2049 - PaX Obscurity 200308302223
2050 - Others...
2051
2052 Neither -ck nor systrace are included anymore.
2053
2054 *hardened-sources-2.4.22-r2 (05 Jan 2004)
2055
2056 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
2057 hardened-sources-2.4.22-r2.ebuild:
2058 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
2059
2060 *hardened-sources-2.4.22-r1 (02 Dec 2003)
2061
2062 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
2063 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
2064
2065 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
2066 hardened-sources-2.4.22-r1.ebuild:
2067 Version bump for the 'do_brk' vulnerability.
2068
2069 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
2070 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
2071 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
2072 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
2073 Fix the 'do_brk' vulnerability.
2074
2075 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
2076 hardened-sources-2.4.22.ebuild:
2077 - Removed the src_install() portion for SELinux flask
2078 components. These are no longer handled in the kernel
2079 so this code was not necessary.
2080
2081 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
2082 New 2.4.22 based hardened-sources thanks to
2083 Phil West <p.west@computer.org>.
2084
2085 These sources include:
2086 - New SELinux API
2087 - Updated CK-base
2088 - Updated GRSec
2089 - Systrace
2090 - SuperFreeS/WAN 1.99.8
2091 - Propolice kernel build support
2092 - EVMS
2093 - Other various security related patches
2094
2095 *hardened-sources-2.4.21 (14 Sep 2003)
2096
2097 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
2098 Updated hardened-sources based on the 2.4.21 Linux kernel.
2099 This includes updates to most major components such as:
2100 - ck-base-0306300059
2101 - selinux-2.4-2003071106
2102 - grsecurity-2.0-rc1
2103 - Updated IPTables patch-o-matic
2104 - Updated SuperFreeS/WAN
2105
2106 Thanks to Phil West <pwest@computer.org> for his work in getting this
2107 updated patch set ready for the 2.4.21 based kernel.
2108
2109 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
2110 Initial import of hardened-sources-2.4.20-r4. This revision
2111 includes only a few changes, but one of these is an important
2112 security fix. It is recommended all users of hardened-sources
2113 upgrade to this release.
2114
2115 - ioperm bug fix
2116 - fixed compilation failure when building without GRSec
2117
2118 SAL (Secure Auditing for Linux) is NOT included in this revision
2119 due to time constraints, but is planned for inclusion in the near
2120 future.
2121
2122 *hardened-sources-2.4.20-r2 (12 Jun 2003)
2123
2124 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
2125 hardened-sources-2.4.20-r3.ebuild:
2126 Add Header...
2127
2128 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2129 hardened-sources-2.4.20-r3.ebuild:
2130 Removed warnings from ebuild. This kernel should be safe to
2131 use at this point.
2132
2133 *hardened-sources-2.4.20-r3 (08 Jun 2003)
2134
2135 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2136 hardened-sources-2.4.20-r3.ebuild:
2137 New revision. Includes the following changes over -r2:
2138
2139 - ck7-base (O(1), preempt, low latency)
2140 - Super FreeS/WAN 1.99.7rc2
2141 - PaX for the LSM/SELinux branch
2142 - GRSecurity 2.0-pre4 (role based access control)
2143 - Systrace 1.3
2144 - EXT3 fixes
2145 - EVMS 2.0.1
2146 - GCC 3.1+ compile optimizations
2147 - ProPolice kernel build support
2148 - Hashing table security fixes
2149
2150 *hardened-sources-2.4.20-r1 (09 Apr 2003)
2151
2152 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
2153 Initial import of hardened-sources-r2. This new
2154 ebuild includes many new performance and security
2155 related patches. As in -r1, it will patch in
2156 LSM/SELinux if "selinux" is in USE, otherwise it
2157 will patch in GRSecurity. The following patches
2158 are included in this revision:
2159
2160 - O(1) Scheduler, Low Latency, and Preempt
2161 (pulled from the base CK patch)
2162 - ptrace exploit patch for the LSM kernel
2163 (the GRSec patch already fixes this)
2164 - LSM 2.4-2003040709
2165 - SELinux 2.4-2003040709
2166 - Systrace v1.2
2167 - IPTables patch-o-matic base patches - 20030107
2168 - CryptoAPI 2.4.20.1 w/ loop-jari patch
2169 - Super FreeS/WAN 1.99.6.1
2170 - GRSecurity 1.9.9g
2171 - MPPE
2172 - EXT3 data journal fix
2173 - CIPE 1.5.4
2174
2175 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2176 hardened-sources-2.4.20-r1.ebuild, manifest:
2177 Updated to install flask components correctly for selinux.
2178
2179 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2180 hardened-sources-2.4.20-r1.ebuild:
2181 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2182 is patched in instead. Ptrace patches for selinux have also been added. In
2183 either case, systrace support will be patched in as well.
2184
2185 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2186 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2187 Revision bump for new sources.
2188
2189 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2190 hardened-sources-2.4.20-r1.ebuild:
2191 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2192
2193 *hardened-sources-2.4.20 (30 Mar 2003)
2194
2195 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2196 hardened-sources-2.4.20.ebuild:
2197 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20