/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.367 - (show annotations) (download)
Thu Dec 9 04:27:27 2010 UTC (3 years, 7 months ago) by blueness
Branch: MAIN
Changes since 1.366: +8 -1 lines
Based on vanilla-2.6.36.1 + genpatches-2.6.36-6 + grsecurity-2.2.1-2.6.36.1-201012040057

(Portage version: 2.1.9.24/cvs/Linux x86_64)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.366 2010/12/09 04:24:39 blueness Exp $
4
5 *hardened-sources-2.6.36-r5 (09 Dec 2010)
6
7 09 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
8 +hardened-sources-2.6.36-r5.ebuild:
9 Based on vanilla-2.6.36.1 + genpatches-2.6.36-6 +
10 grsecurity-2.2.1-2.6.36.1-201012040057
11
12 *hardened-sources-2.6.32-r30 (09 Dec 2010)
13
14 09 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
15 +hardened-sources-2.6.32-r30.ebuild:
16 Based on vanilla-2.6.32.26 + genpatches-2.6.32-28 +
17 grsecurity-2.2.1-2.6.32.26-201012040057
18
19 *hardened-sources-2.6.36-r4 (02 Dec 2010)
20
21 02 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
22 +hardened-sources-2.6.36-r4.ebuild:
23 Based on vanilla-2.6.36.1 + genpatches-.2.6.36-5 +
24 grsecurity-2.2.1-2.6.36.1-201011280939
25
26 *hardened-sources-2.6.32-r29 (02 Dec 2010)
27
28 02 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
29 +hardened-sources-2.6.32-r29.ebuild:
30 Based on vanilla-2.6.32.26 + genpatches-2.6.32-27 +
31 grsecurity-2.2.1-2.6.32.26-201011280939
32
33 30 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
34 -hardened-sources-2.6.32-r28.ebuild, -hardened-sources-2.6.36-r3.ebuild:
35 Removed because of multiple breakage (pulseaudio, install, etc).
36
37 *hardened-sources-2.6.36-r3 (29 Nov 2010)
38
39 29 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
40 +hardened-sources-2.6.36-r3.ebuild:
41 hardened-sources-2.6.36-r3 based on 2.6.36.1 + genpatches +
42 grsecurity-2.2.1-2.6.36.1-201011261834
43
44 *hardened-sources-2.6.32-r28 (29 Nov 2010)
45
46 29 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
47 +hardened-sources-2.6.32-r28.ebuild:
48 hardened-sources-2.6.32-r28 based on 2.6.32.26 + genpatches +
49 grsecurity-2.2.1-2.6.32.26-201011261834
50
51 28 Nov 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
52 Update Manifest for deblob 2.6.36.
53
54 *hardened-sources-2.6.36-r2 (18 Nov 2010)
55
56 18 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
57 +hardened-sources-2.6.36-r2.ebuild:
58 hardened-sources-2.6.36-r2 based on 2.6.36 + genpatches +
59 grsecurity-2.2.0-2.6.36-201011151726
60
61 *hardened-sources-2.6.32-r27 (18 Nov 2010)
62
63 18 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
64 +hardened-sources-2.6.32-r27.ebuild:
65 hardened-sources-2.6.32-r27 based on 2.6.32.25 + genpatches +
66 grsecurity-2.2.0-2.6.32.25-201011151726
67
68 *hardened-sources-2.6.36-r1 (14 Nov 2010)
69
70 14 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
71 +hardened-sources-2.6.36-r1.ebuild:
72 hardened-sources-2.6.36-r1 based on 2.6.36 + genpatches +
73 grsecurity-2.2.0-2.6.36-201011131640
74
75 *hardened-sources-2.6.32-r26 (14 Nov 2010)
76
77 14 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
78 +hardened-sources-2.6.32-r26.ebuild:
79 hardened-sources-2.6.32-r26 based on 2.6.32.25 + genpatches +
80 grsecurity-2.2.0-2.6.32.25-201011131640
81
82 *hardened-sources-2.6.36 (07 Nov 2010)
83
84 07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
85 +hardened-sources-2.6.36.ebuild:
86 hardened-sources-2.6.36 based on 2.6.36 + genpatches +
87 grsecurity-2.2.0-2.6.36-201011062054
88
89 *hardened-sources-2.6.35-r7 (07 Nov 2010)
90
91 07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
92 +hardened-sources-2.6.35-r7.ebuild:
93 hardened-sources-2.6.35-r7 based on 2.6.35.8 + genpatches +
94 grsecurity-2.2.0-2.6.35.8-201011062054
95
96 *hardened-sources-2.6.32-r25 (07 Nov 2010)
97
98 07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
99 +hardened-sources-2.6.32-r25.ebuild:
100 hardened-sources-2.6.32-r25 based on 2.6.32.25 + genpatches +
101 grsecurity-2.2.0-2.6.32.25-201011062054
102
103 *hardened-sources-2.6.35-r6 (02 Nov 2010)
104 *hardened-sources-2.6.32-r24 (02 Nov 2010)
105
106 02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
107 +hardened-sources-2.6.32-r24.ebuild, +hardened-sources-2.6.35-r6.ebuild:
108 hardened-sources-2.6.32-r24 based on 2.6.32.25 + genpatches +
109 grsecurity-2.2.0-2.6.32.25-201010311944
110 hardened-sources-2.6.35-r6 based on 2.6.35.8 + genpatches +
111 grsecurity-2.2.0-2.6.35.8-201010311944
112
113 02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
114 hardened-sources-2.6.32-r23.ebuild:
115 ppc64 stable, bug #343535
116
117 *hardened-sources-2.6.35-r5 (24 Oct 2010)
118 *hardened-sources-2.6.32-r23 (24 Oct 2010)
119
120 24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
121 +hardened-sources-2.6.32-r23.ebuild, +hardened-sources-2.6.35-r5.ebuild:
122 hardened-sources-2.6.32-r23 based on 2.6.32.24 + genpatches +
123 grsec-2.2.0-2.6.32.24-201010232009
124 hardened-sources-2.6.35-r5 based on 2.6.35.7 + genpatches +
125 grsec-2.2.0-2.6.35.7-201010232009
126
127 24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
128 hardened-sources-2.6.32-r22.ebuild:
129 Broken on ppc/ppc64, bug #341915#c6
130
131 24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
132 -hardened-sources-2.6.32-r16.ebuild, -hardened-sources-2.6.32-r17.ebuild,
133 -hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.32-r19.ebuild,
134 -hardened-sources-2.6.32-r20.ebuild, -hardened-sources-2.6.32-r21.ebuild,
135 -hardened-sources-2.6.34-r4.ebuild, -hardened-sources-2.6.34-r5.ebuild,
136 -hardened-sources-2.6.35.ebuild, -hardened-sources-2.6.35-r1.ebuild,
137 -hardened-sources-2.6.35-r2.ebuild, -hardened-sources-2.6.35-r3.ebuild:
138 Removing vulnerable kernels where possible, bug #341801
139
140 21 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
141 hardened-sources-2.6.32-r22.ebuild:
142 x86 stable, bug #341915
143
144 20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
145 hardened-sources-2.6.32-r22.ebuild:
146 amd64 stable, bug #341915
147
148 *hardened-sources-2.6.35-r4 (20 Oct 2010)
149 *hardened-sources-2.6.32-r22 (20 Oct 2010)
150
151 20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
152 +hardened-sources-2.6.32-r22.ebuild, +hardened-sources-2.6.35-r4.ebuild:
153 hardened-sources-2.6.32-r22 based on 2.6.32.24 + genpatches +
154 grsec-2.2.0-2.6.32.24-201010191911
155 hardened-sources-2.6.35-r4 based on 2.6.35.7 + genpatches +
156 grsec-2.2.0-2.6.35.7-201010191911
157 Addresses security bug #341801
158
159 *hardened-sources-2.6.35-r3 (16 Oct 2010)
160 *hardened-sources-2.6.32-r21 (16 Oct 2010)
161
162 16 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
163 +hardened-sources-2.6.32-r21.ebuild, +hardened-sources-2.6.35-r3.ebuild:
164 hardened-sources-2.6.32-r21 based on 2.6.32.24 + genpatches +
165 grsec-2.2.0-2.6.32.24-201010121028
166 hardened-sources-2.6.35-r3 based on 2.6.35.7 + genpatches +
167 grsec-2.2.0-2.6.35.7-201010121028
168
169 *hardened-sources-2.6.35-r2 (07 Oct 2010)
170
171 07 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
172 +hardened-sources-2.6.35-r2.ebuild:
173 hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches +
174 grsec-2.2.0-2.6.35.7-201010021153
175
176 *hardened-sources-2.6.32-r20 (06 Oct 2010)
177
178 06 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
179 +hardened-sources-2.6.32-r20.ebuild:
180 hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches +
181 grsec-2.2.0-2.6.32.24-201010021153
182
183 *hardened-sources-2.6.35-r1 (30 Sep 2010)
184 *hardened-sources-2.6.32-r19 (30 Sep 2010)
185
186 30 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
187 +hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild:
188 hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches +
189 grsec-2.2.0-2.6.32.23-201009272133
190 hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches +
191 grsec-2.2.0-2.6.35.6-201009281623
192
193 *hardened-sources-2.6.35 (28 Sep 2010)
194
195 28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
196 +hardened-sources-2.6.35.ebuild:
197 hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
198
199 21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
200 -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
201 hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
202 -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
203 Fast track stabilization. See bug #338273. Removed older versions.
204
205 *hardened-sources-2.6.34-r6 (17 Sep 2010)
206 *hardened-sources-2.6.32-r18 (17 Sep 2010)
207
208 17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
209 +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
210 hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
211 grsec-2.2.0-2.6.32.21-201009162222
212 hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
213 grsec-2.2.0-2.6.34.7-201009162222
214 Addresses IA32 syscall exploit.
215
216 *hardened-sources-2.6.34-r5 (15 Sep 2010)
217 *hardened-sources-2.6.32-r17 (15 Sep 2010)
218
219 15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
220 +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
221 hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
222 grsec-2.2.0-2.6.32.21-201009130811
223 hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
224 grsec-2.2.0-2.6.34.6-201009130754
225
226 *hardened-sources-2.6.34-r4 (07 Sep 2010)
227 *hardened-sources-2.6.32-r16 (07 Sep 2010)
228
229 07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
230 +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
231 hardened-sources-2.6.32-r16 based on 2.6.32.21 +
232 grsec-2.2.0-2.6.32.21-201009032133
233 hardened-sources-2.6.34-r4 based on 2.6.34.6 +
234 grsec-2.2.0-2.6.34.6-201009041352
235
236 02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
237 hardened-sources-2.6.32-r15 based on 2.6.32.21 +
238 grsec-2.2.0-2.6.32.21-201008292122
239 hardened-sources-2.6.34-r3 based on 2.6.34.6 +
240 grsec-2.2.0-2.6.34.6-201008292122
241
242 *hardened-sources-2.6.34-r3 (02 Sep 2010)
243 *hardened-sources-2.6.32-r15 (02 Sep 2010)
244
245 02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
246 -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
247 -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
248 +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
249 +hardened-sources-2.6.34-r3.ebuild:
250 Bumps and remove deprecated versions
251
252 *hardened-sources-2.6.34-r2 (21 Aug 2010)
253
254 21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
255 +hardened-sources-2.6.34-r2.ebuild:
256 Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
257
258 *hardened-sources-2.6.32-r14 (21 Aug 2010)
259
260 21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
261 +hardened-sources-2.6.32-r14.ebuild:
262 Based on vanilla 2.6.32.19 + genpatches +
263 grsec-2.2.0-2.6.32.19-201008131840
264
265 *hardened-sources-2.6.32-r13 (14 Aug 2010)
266
267 14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
268 +hardened-sources-2.6.32-r13.ebuild:
269 Based on vanilla 2.6.32.18 + genpatches +
270 grsecurity-2.2.0-2.6.32.18-201008112233
271
272 03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
273 kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
274
275 01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
276 hardened-sources-2.6.32-r9.ebuild:
277 Stable ppc64. Bug #326885
278
279 *hardened-sources-2.6.32-r12 (24 Jul 2010)
280
281 24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
282 +hardened-sources-2.6.32-r12.ebuild:
283 Parallels fix incorporated into hardened-sources-2.6.34-r1
284
285 *hardened-sources-2.6.34-r1 (24 Jul 2010)
286
287 24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
288 -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
289 Fixes bug #328275
290
291 21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
292 Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
293 on gentoo-dev.
294
295 21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
296 Correct mail address.
297
298 18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
299 -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
300 -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
301 -hardened-sources-2.6.32-r8.ebuild:
302 Removing outdated releases
303
304 17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
305 hardened-sources-2.6.32-r9.ebuild:
306 stable x86, bug 326885
307
308 13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
309 -hardened-sources-2.6.32-r7.ebuild:
310 Removed for security. Bug #325573
311
312 *hardened-sources-2.6.34 (13 Jul 2010)
313
314 13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
315 +hardened-sources-2.6.34.ebuild:
316 Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
317
318 *hardened-sources-2.6.32-r11 (13 Jul 2010)
319
320 13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
321 +hardened-sources-2.6.32-r11.ebuild:
322 New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
323
324 06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
325 Marked stable on AMD64 as requested by Anthony G. Basile
326 <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
327 on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
328
329 *hardened-sources-2.6.32-r10 (30 Jun 2010)
330
331 30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
332 +hardened-sources-2.6.32-r10.ebuild:
333 New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
334
335 29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
336 Added myself to the metadata.xml
337
338 *hardened-sources-2.6.32-r9 (11 Jun 2010)
339
340 11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
341 New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
342
343 *hardened-sources-2.6.32-r8 (01 Jun 2010)
344
345 01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
346 New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
347
348 27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
349 Update SRC_URI to point to mirror network now that the distfile has
350 propagated.
351
352 *hardened-sources-2.6.32-r7 (26 May 2010)
353
354 26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
355 metadata.xml:
356 New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
357 Summers.
358
359 26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
360 Update Manifest for deblob support in kernel-2 eclass.
361
362 31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
363 ppc stable
364
365 29 May 2009; Gordon Malm <gengor@gentoo.org>
366 -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
367 Stable amd64/x86 and remove old.
368
369 *hardened-sources-2.6.29 (25 May 2009)
370
371 25 May 2009; Gordon Malm <gengor@gentoo.org>
372 +hardened-sources-2.6.29.ebuild:
373 Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
374 release candidates.
375
376 *hardened-sources-2.6.28-r9 (25 May 2009)
377
378 25 May 2009; Gordon Malm <gengor@gentoo.org>
379 -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
380 Fix x86-32 boot failure (regression vs. 2.6.28-r7).
381
382 *hardened-sources-2.6.28-r8 (18 May 2009)
383
384 18 May 2009; Gordon Malm <gengor@gentoo.org>
385 +hardened-sources-2.6.28-r8.ebuild:
386 Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
387 and #262862 among others.
388
389 01 May 2009; Gordon Malm <gengor@gentoo.org>
390 hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
391 hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
392 Remove unnecessary mirror://gentoo from SRC_URI.
393
394 05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
395 ppc stable
396
397 30 Mar 2009; Gordon Malm <gengor@gentoo.org>
398 -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
399 Stable amd64/x86 and remove old.
400
401 *hardened-sources-2.6.28-r7 (27 Mar 2009)
402
403 27 Mar 2009; Gordon Malm <gengor@gentoo.org>
404 +hardened-sources-2.6.28-r7.ebuild:
405 Add Linux 2.6.28.9. Fix bugs 263424, 263870.
406
407 22 Mar 2009; Gordon Malm <gengor@gentoo.org>
408 -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
409 -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
410 -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
411 Stable amd64/x86 and remove old versions.
412
413 22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
414 ppc stable
415
416 *hardened-sources-2.6.28-r6 (21 Mar 2009)
417
418 21 Mar 2009; Gordon Malm <gengor@gentoo.org>
419 -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
420 Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
421
422 *hardened-sources-2.6.28-r5 (20 Mar 2009)
423
424 20 Mar 2009; Gordon Malm <gengor@gentoo.org>
425 +hardened-sources-2.6.28-r5.ebuild:
426 Bump genpatches. Grsecurity patch bump, fixes bug #262752.
427
428 20 Mar 2009; Gordon Malm <gengor@gentoo.org>
429 hardened-sources-2.6.28-r4.ebuild:
430 Stable amd64/x86.
431
432 *hardened-sources-2.6.28-r4 (18 Mar 2009)
433
434 18 Mar 2009; Gordon Malm <gengor@gentoo.org>
435 +hardened-sources-2.6.28-r4.ebuild:
436 Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
437 compilation with CPA_DEBUG and more.
438
439 17 Mar 2009; Gordon Malm <gengor@gentoo.org>
440 hardened-sources-2.6.28-r3.ebuild:
441 Quick stable amd64/x86.
442
443 *hardened-sources-2.6.28-r3 (15 Mar 2009)
444
445 15 Mar 2009; Gordon Malm <gengor@gentoo.org>
446 +hardened-sources-2.6.28-r3.ebuild:
447 Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
448
449 14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
450 ppc stable
451
452 13 Mar 2009; Gordon Malm <gengor@gentoo.org>
453 hardened-sources-2.6.28-r2.ebuild:
454 Stable amd64/x86.
455
456 *hardened-sources-2.6.28-r2 (11 Mar 2009)
457
458 11 Mar 2009; Gordon Malm <gengor@gentoo.org>
459 +hardened-sources-2.6.28-r2.ebuild:
460 Version bump bringing in latest grsecurity patch.
461
462 *hardened-sources-2.6.28-r1 (09 Mar 2009)
463
464 09 Mar 2009; Gordon Malm <gengor@gentoo.org>
465 -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
466 Version bump and remove old.
467
468 07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
469 ppc stable
470
471 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
472 hardened-sources-2.6.27-r8.ebuild:
473 Remove amd64 testing keyword, bug 256226.
474
475 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
476 hardened-sources-2.6.27-r8.ebuild:
477 Revert amd64 stable, bug #256226.
478
479 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
480 hardened-sources-2.6.27-r8.ebuild:
481 Stable on amd64/x86.
482
483 24 Feb 2009; Gordon Malm <gengor@gentoo.org>
484 -hardened-sources-2.6.27-r6.ebuild:
485 Remove old 2.6.27 release.
486
487 *hardened-sources-2.6.27-r8 (24 Feb 2009)
488
489 24 Feb 2009; Gordon Malm <gengor@gentoo.org>
490 +hardened-sources-2.6.27-r8.ebuild:
491 Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
492 and probably more.
493
494 04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
495 ppc stable
496
497 *hardened-sources-2.6.28 (25 Jan 2009)
498
499 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
500 +hardened-sources-2.6.28.ebuild:
501 Initial 2.6.28 release.
502
503 *hardened-sources-2.6.27-r7 (25 Jan 2009)
504
505 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
506 +hardened-sources-2.6.27-r7.ebuild:
507 Bump to Linux 2.6.27.13.
508
509 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
510 hardened-sources-2.6.26-r9.ebuild:
511 Stable amd64/x86.
512
513 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
514 -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
515 -hardened-sources-2.6.27-r5.ebuild:
516 Remove problem versions.
517
518 *hardened-sources-2.6.27-r6 (24 Jan 2009)
519
520 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
521 +hardened-sources-2.6.27-r6.ebuild:
522 Revert PaX test29 to test30 changes. Fixes bug 256226.
523
524 *hardened-sources-2.6.27-r5 (24 Jan 2009)
525
526 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
527 +hardened-sources-2.6.27-r5.ebuild:
528 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
529 254843.
530
531 23 Jan 2009; Gordon Malm <gengor@gentoo.org>
532 -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
533 -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
534 Remove problem versions.
535
536 23 Jan 2009; nixnut <nixnut@gentoo.org>
537 hardened-sources-2.6.25-r13.ebuild:
538 ppc stable
539
540 21 Jan 2009; Gordon Malm <gengor@gentoo.org>
541 hardened-sources-2.6.25-r13.ebuild:
542 Fasttrack stable amd64/x86.
543
544 *hardened-sources-2.6.26-r9 (21 Jan 2009)
545
546 21 Jan 2009; Gordon Malm <gengor@gentoo.org>
547 +hardened-sources-2.6.26-r9.ebuild:
548 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
549
550 *hardened-sources-2.6.25-r13 (20 Jan 2009)
551
552 20 Jan 2009; Gordon Malm <gengor@gentoo.org>
553 +hardened-sources-2.6.25-r13.ebuild:
554 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
555
556 20 Jan 2009; nixnut <nixnut@gentoo.org>
557 hardened-sources-2.6.25-r12.ebuild:
558 ppc stable
559
560 17 Jan 2009; Gordon Malm <gengor@gentoo.org>
561 hardened-sources-2.6.25-r12.ebuild:
562 Stable amd64/x86.
563
564 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
565 -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
566 -hardened-sources-2.6.27-r2.ebuild:
567 Clean out old versions.
568
569 *hardened-sources-2.6.27-r4 (14 Jan 2009)
570 *hardened-sources-2.6.26-r8 (14 Jan 2009)
571 *hardened-sources-2.6.25-r12 (14 Jan 2009)
572
573 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
574 +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
575 +hardened-sources-2.6.27-r4.ebuild:
576 2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
577 2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
578 2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
579 grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
580
581 15 Dec 2008; nixnut <nixnut@gentoo.org>
582 hardened-sources-2.6.25-r11.ebuild:
583 Stable on ppc
584
585 09 Dec 2008; Gordon Malm <gengor@gentoo.org>
586 hardened-sources-2.6.25-r11.ebuild:
587 Stable amd64/x86.
588
589 *hardened-sources-2.6.27-r3 (07 Dec 2008)
590
591 07 Dec 2008; Gordon Malm <gengor@gentoo.org>
592 +hardened-sources-2.6.27-r3.ebuild:
593 Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
594 Fixes bug #248754, #249729 and #246607.
595
596 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
597 -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
598 Remove old versions.
599
600 *hardened-sources-2.6.26-r7 (03 Dec 2008)
601 *hardened-sources-2.6.25-r11 (03 Dec 2008)
602
603 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
604 +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
605 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
606 2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
607 Both include many backports from 2.6.27.{6,7} -stable releases.
608
609 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
610 -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
611 Remove versions broken on ARCHes != x86/amd64.
612
613 *hardened-sources-2.6.27-r2 (24 Nov 2008)
614
615 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
616 +hardened-sources-2.6.27-r2.ebuild:
617 Bump to Linux 2.6.27.7 and latest grsecurity patch.
618
619 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
620 -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
621 Remove old versions.
622
623 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
624 hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
625 Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
626
627 16 Nov 2008; nixnut <nixnut@gentoo.org>
628 hardened-sources-2.6.25-r10.ebuild:
629 Stable on ppc
630
631 15 Nov 2008; Gordon Malm <gengor@gentoo.org>
632 hardened-sources-2.6.25-r10.ebuild:
633 Stable amd64/x86.
634
635 *hardened-sources-2.6.26-r6 (12 Nov 2008)
636
637 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
638 +hardened-sources-2.6.26-r6.ebuild:
639 Bump to Linux 2.6.26.8 and fix security bug #245650.
640
641 *hardened-sources-2.6.25-r10 (12 Nov 2008)
642
643 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
644 +hardened-sources-2.6.25-r10.ebuild:
645 Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
646
647 *hardened-sources-2.6.27-r1 (09 Nov 2008)
648
649 09 Nov 2008; Gordon Malm <gengor@gentoo.org>
650 +hardened-sources-2.6.27-r1.ebuild:
651 Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
652
653 *hardened-sources-2.6.27 (04 Nov 2008)
654
655 04 Nov 2008; Gordon Malm <gengor@gentoo.org>
656 +hardened-sources-2.6.27.ebuild:
657 Initial 2.6.27 release.
658
659 *hardened-sources-2.6.26-r5 (03 Nov 2008)
660
661 03 Nov 2008; Gordon Malm <gengor@gentoo.org>
662 -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
663 +hardened-sources-2.6.26-r5.ebuild:
664 2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
665 Clean out some old versions.
666
667 02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
668 Stable on ppc
669
670 30 Oct 2008; Gordon Malm <gengor@gentoo.org>
671 hardened-sources-2.6.25-r9.ebuild:
672 Stable on amd64/x86.
673
674 *hardened-sources-2.6.25-r9 (26 Oct 2008)
675
676 26 Oct 2008; Gordon Malm <gengor@gentoo.org>
677 +hardened-sources-2.6.25-r9.ebuild:
678 Update to Linux 2.6.25.19
679
680 15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
681 Stable on ppc
682
683 *hardened-sources-2.6.26-r4 (14 Oct 2008)
684
685 14 Oct 2008; Gordon Malm <gengor@gentoo.org>
686 -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
687 Update to latest grsecurity patch, fixing building of non-modular kernels.
688
689 *hardened-sources-2.6.26-r3 (12 Oct 2008)
690
691 12 Oct 2008; Gordon Malm <gengor@gentoo.org>
692 hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
693 +hardened-sources-2.6.26-r3.ebuild:
694 2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
695 2.6.26-r1: Removed.
696 2.6.25-r8: Stable amd64/x86.
697
698 *hardened-sources-2.6.25-r8 (09 Oct 2008)
699
700 09 Oct 2008; Gordon Malm <gengor@gentoo.org>
701 -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
702 -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
703 Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
704
705 20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
706 Stable on ppc
707
708 17 Sep 2008; Gordon Malm <gengor@gentoo.org>
709 hardened-sources-2.6.25-r7.ebuild:
710 Stable amd64/x86.
711
712 *hardened-sources-2.6.26-r2 (13 Sep 2008)
713
714 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
715 -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
716 2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
717 PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
718
719 *hardened-sources-2.6.25-r7 (13 Sep 2008)
720
721 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
722 +hardened-sources-2.6.25-r7.ebuild:
723 Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
724
725 10 Sep 2008; Gordon Malm <gengor@gentoo.org>
726 hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
727 hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
728 hardened-sources-2.6.26-r1.ebuild:
729 Update DESCRIPTION and HGPV_URI.
730
731 *hardened-sources-2.6.25-r6 (09 Sep 2008)
732
733 09 Sep 2008; Gordon Malm <gengor@gentoo.org>
734 -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
735 2.6.25-r6: Update to Linux 2.6.25.17.
736 2.6.24-r3: Removed.
737
738 08 Sep 2008; Gordon Malm <gengor@gentoo.org>
739 hardened-sources-2.6.25-r5.ebuild:
740 Stable on amd64/x86
741
742 07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
743 Update my email address.
744
745 31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
746 stable on ppc
747
748 *hardened-sources-2.6.26-r1 (23 Aug 2008)
749 *hardened-sources-2.6.25-r5 (23 Aug 2008)
750
751 23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
752 -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
753 hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
754 +hardened-sources-2.6.26-r1.ebuild:
755 Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
756 security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
757 fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
758 Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
759 (gengor).
760
761 *hardened-sources-2.6.26 (18 Aug 2008)
762 *hardened-sources-2.6.25-r4 (18 Aug 2008)
763
764 18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
765 +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
766 - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
767 to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
768 2.6.25-r2: Removed.
769
770 16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
771 Remove phreak from metadata.xml (#96398)
772
773 *hardened-sources-2.6.25-r3 (31 Jul 2008)
774
775 31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
776 -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
777 +hardened-sources-2.6.25-r3.ebuild:
778 - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
779 fixes, including security bug #231750.
780
781 28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
782 Stable on ppc
783
784 *hardened-sources-2.6.25-r2 (05 Jul 2008)
785
786 05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
787 -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
788 +hardened-sources-2.6.25-r2.ebuild:
789 2.6.23-r4: Stable x86/amd64
790 2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
791 2.6.23-r{11,12}: Removed due to multiple vulns.
792 (gengor & kerframil)
793
794 04 Jul 2008; nixnut <nixnut@gentoo.org>
795 hardened-sources-2.6.23-r13.ebuild:
796 Stable on ppc
797
798 *hardened-sources-2.6.25-r1 (30 Jun 2008)
799
800 30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
801 +hardened-sources-2.6.25-r1.ebuild:
802 2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
803 grsecurity release. 2.6.23-r13: x86/amd64 stable
804
805 *hardened-sources-2.6.25 (17 Jun 2008)
806 *hardened-sources-2.6.24-r3 (17 Jun 2008)
807 *hardened-sources-2.6.23-r13 (17 Jun 2008)
808
809 17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
810 +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
811 * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
812 #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
813 #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
814 2.6.25: Initial 2.6.25 release.
815
816 15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
817 - fasttrack to stable x86/amd64
818
819 11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
820 Fix broken digest for linux-2.6.24.tar.bz2.
821
822 *hardened-sources-2.6.24-r2 (11 May 2008)
823 *hardened-sources-2.6.23-r12 (11 May 2008)
824
825 11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
826 -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
827 +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
828 -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
829 proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
830 220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
831 security bugs 219901, 220691, 220975, 220979, 221123. New
832 genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
833 should be removed as far as I'm concerned, everything else remove due to
834 vulnerable to numerous security bugs or brokeness.
835
836 10 May 2008; nixnut <nixnut@gentoo.org>
837 hardened-sources-2.6.23-r11.ebuild:
838 Stable on ppc
839
840 05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
841 - -r11 stable on x86/amd64
842
843 *hardened-sources-2.6.23-r11 (01 May 2008)
844
845 01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
846 - version bump to fix ulgy linux bugs
847
848 *hardened-sources-2.6.24-r1 (30 Apr 2008)
849
850 30 Apr 2008; Christian Heim <phreak@gentoo.org>
851 +hardened-sources-2.6.24-r1.ebuild:
852 Revision bump (thanks to Kerin and Gordon, again), pulling
853 genpatches-2.6.24-7, solving #219089. Additionally contains further security
854 fixes plus some minor updates.
855
856 *hardened-sources-2.6.23-r10 (30 Apr 2008)
857
858 30 Apr 2008; Christian Heim <phreak@gentoo.org>
859 +hardened-sources-2.6.23-r10.ebuild:
860 Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
861 Additional contains "various other fixes".
862
863 09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
864 Update the longdescription in metadata, thanks to Gordon Malm.
865
866 08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
867 Stable on ppc wrt bug #213255
868
869 07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
870 -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
871 - stable on x86/amd64 per request. Removed obsolete ebuilds
872
873 *hardened-sources-2.6.24 (07 Apr 2008)
874
875 07 Apr 2008; Christian Heim <phreak@gentoo.org>
876 +hardened-sources-2.6.24.ebuild:
877 Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
878 <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
879 for the many contributions and their continued effort in #216612) based on
880 2.6.24 and genpatches-2.6.24-5.
881
882 The current ebuild/patchset contains these things:
883 * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
884 * Introduces bespoke server and workstation oriented security levels
885 * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
886
887 30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
888 Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
889 maintaining it).
890
891 24 Mar 2008; Christian Heim <phreak@gentoo.org>
892 hardened-sources-2.4.35-r2.ebuild:
893 Fixing SRC_URI for 2.4.35-r2.
894
895 *hardened-sources-2.6.23-r9 (22 Mar 2008)
896
897 22 Mar 2008; Christian Heim <phreak@gentoo.org>
898 +hardened-sources-2.6.23-r9.ebuild:
899 * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
900 * Change the default GIDs for some grsecurity options
901 * Revamp the Hardened [Gentoo] security level and make it the default level
902 * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
903 * Fix a recursive lock -- call to capable() within ptrace_attach()
904 * Fix bug that allows audit and iscsi operations to be controlled via netlink
905
906 *hardened-sources-2.6.23-r8 (27 Feb 2008)
907
908 27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
909 - version bump from Kerin Millar bug 210026
910
911 17 Feb 2008; <solar@gentoo.org> metadata.xml,
912 -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
913 -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
914 -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
915 - stable on x86 and remove old ebuilds
916
917 15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
918 - stable on amd64 per request of amd64 lead
919
920 *hardened-sources-2.6.23-r7 (11 Feb 2008)
921
922 11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
923 - version bump from kerin.millar
924 Changes:
925
926 * Bump to genpatches-base-2.6.23-9
927 * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
928 * Disables COMPAT_VDSO in x86/defconfig
929 * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
930
931 25 Jan 2008; Christian Heim <phreak@gentoo.org>
932 -hardened-sources-2.6.22-r8.ebuild:
933 Cleaning up old versions.
934
935 *hardened-sources-2.6.23-r6 (25 Jan 2008)
936
937 25 Jan 2008; Christian Heim <phreak@gentoo.org>
938 -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
939 Revision bump, pulling in the latest genpatches.
940
941 *hardened-sources-2.6.23-r5 (24 Dec 2007)
942
943 24 Dec 2007; Christian Heim <phreak@gentoo.org>
944 hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
945 hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
946 hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
947 Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
948
949 24 Dec 2007; Christian Heim <phreak@gentoo.org>
950 -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
951 -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
952 -hardened-sources-2.6.23-r3.ebuild:
953 Cleaning out some unused, old versions.
954
955 24 Dec 2007; Christian Heim <phreak@gentoo.org>
956 hardened-sources-2.6.23-r4.ebuild:
957 Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
958 in the tree for long, but there isn't much of a difference between this and
959 -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
960
961 *hardened-sources-2.6.23-r4 (23 Dec 2007)
962
963 23 Dec 2007; Christian Heim <phreak@gentoo.org>
964 +hardened-sources-2.6.23-r4.ebuild:
965 Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
966
967 *hardened-sources-2.6.23-r3 (04 Dec 2007)
968
969 04 Dec 2007; Christian Heim <phreak@gentoo.org>
970 +hardened-sources-2.6.23-r3.ebuild:
971 Revision bump, pulling in 2.6.23.9.
972
973 *hardened-sources-2.6.23-r2 (25 Nov 2007)
974
975 25 Nov 2007; Christian Heim <phreak@gentoo.org>
976 +hardened-sources-2.6.23-r2.ebuild:
977 Updated patchset, thanks to solar.
978
979 *hardened-sources-2.6.23-r1 (31 Oct 2007)
980
981 31 Oct 2007; Christian Heim <phreak@gentoo.org>
982 +hardened-sources-2.6.23-r1.ebuild:
983 Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
984
985 29 Oct 2007; <solar@gentoo.org> metadata.xml:
986 - update metadata.xml
987
988 25 Oct 2007; Christian Heim <phreak@gentoo.org>
989 hardened-sources-2.6.22-r8.ebuild:
990 Marking 2.6.22-r8 stable on amd64 and x86.
991
992 21 Oct 2007; Christian Heim <phreak@gentoo.org>
993 -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
994 -hardened-sources-2.6.21-r4.ebuild:
995 Removing old ebuilds.
996
997 *hardened-sources-2.4.35-r2 (21 Oct 2007)
998
999 21 Oct 2007; Christian Heim <phreak@gentoo.org>
1000 +hardened-sources-2.4.35-r2.ebuild:
1001 Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
1002 patches.
1003
1004 *hardened-sources-2.6.22-r8 (21 Oct 2007)
1005
1006 21 Oct 2007; Christian Heim <phreak@gentoo.org>
1007 +hardened-sources-2.6.22-r8.ebuild:
1008 Yet another new patch, hopefully fixing the remaining issues we had w/
1009 2.6.22. Candidate for stabling.
1010
1011 *hardened-sources-2.6.23 (13 Oct 2007)
1012
1013 13 Oct 2007; Christian Heim <phreak@gentoo.org>
1014 +hardened-sources-2.6.23.ebuild:
1015 Initial hardened-sources-2.6.23. If people still have problems w/ bug
1016 194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
1017
1018 11 Oct 2007; Christian Heim <phreak@gentoo.org>
1019 hardened-sources-2.6.20-r10.ebuild:
1020 Pulling in yet another new genpatches version, fixing the PWC bug for real.
1021
1022 04 Oct 2007; Christian Heim <phreak@gentoo.org>
1023 -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
1024 Removing old versions.
1025
1026 *hardened-sources-2.6.22-r7 (01 Oct 2007)
1027
1028 01 Oct 2007; Christian Heim <phreak@gentoo.org>
1029 +hardened-sources-2.6.22-r7.ebuild:
1030 Revision bump, pulling in a newer patch. Should fix #194276.
1031
1032 30 Sep 2007; Christian Heim <phreak@gentoo.org>
1033 hardened-sources-2.6.20-r10.ebuild:
1034 Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
1035 Mike Doty).
1036
1037 *hardened-sources-2.6.22-r6 (26 Sep 2007)
1038
1039 26 Sep 2007; Christian Heim <phreak@gentoo.org>
1040 +hardened-sources-2.6.22-r6.ebuild:
1041 Revision bump, grabbing up till Linux 2.6.22.9.
1042
1043 24 Sep 2007; Christian Heim <phreak@gentoo.org>
1044 -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
1045 Cleaning up further.
1046
1047 *hardened-sources-2.6.20-r10 (24 Sep 2007)
1048
1049 24 Sep 2007; Christian Heim <phreak@gentoo.org>
1050 -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
1051 +hardened-sources-2.6.20-r10.ebuild:
1052 Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
1053 revisions.
1054
1055 *hardened-sources-2.6.22-r5 (22 Sep 2007)
1056
1057 22 Sep 2007; Christian Heim <phreak@gentoo.org>
1058 +hardened-sources-2.6.22-r5.ebuild:
1059 Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
1060
1061 17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1062 Removing johnm from metadata.xml (see #186467 for reference).
1063
1064 *hardened-sources-2.6.22-r4 (17 Sep 2007)
1065
1066 17 Sep 2007; Christian Heim <phreak@gentoo.org>
1067 +hardened-sources-2.6.22-r4.ebuild:
1068 Revision bump, hopefully fixing all those weird PAX failures.
1069
1070 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1071 Updating the metadata.xml.
1072
1073 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1074 Removing tocharian from metadata due to his retirement (see #71718 for
1075 reference).
1076
1077 *hardened-sources-2.6.20-r9 (30 Aug 2007)
1078
1079 30 Aug 2007; Christian Heim <phreak@gentoo.org>
1080 +hardened-sources-2.6.20-r9.ebuild:
1081 Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
1082
1083 29 Aug 2007; Christian Heim <phreak@gentoo.org>
1084 -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
1085 -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
1086 -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
1087 -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
1088 -hardened-sources-2.6.22-r2.ebuild:
1089 Removing some redundant versions.
1090
1091 *hardened-sources-2.4.35-r1 (29 Aug 2007)
1092
1093 29 Aug 2007; Christian Heim <phreak@gentoo.org>
1094 +hardened-sources-2.4.35-r1.ebuild:
1095 Revision bump, new grsecurity patch.
1096
1097 *hardened-sources-2.6.20-r8 (26 Aug 2007)
1098
1099 26 Aug 2007; Christian Heim <phreak@gentoo.org>
1100 +hardened-sources-2.6.20-r8.ebuild:
1101 Revision bump for Linux 2.6.20.17.
1102
1103 *hardened-sources-2.6.22-r3 (22 Aug 2007)
1104
1105 22 Aug 2007; Christian Heim <phreak@gentoo.org>
1106 +hardened-sources-2.6.22-r3.ebuild:
1107 Revision bump for Linux 2.6.22.4.
1108
1109 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1110 hardened-sources-2.6.22-r2.ebuild:
1111 Updated patchset, to fix the alignment against 2.6.22.3.
1112
1113 *hardened-sources-2.6.22-r2 (16 Aug 2007)
1114
1115 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1116 +hardened-sources-2.6.22-r2.ebuild:
1117 Revision bump for Linux 2.6.22.3.
1118
1119 *hardened-sources-2.4.35 (16 Aug 2007)
1120
1121 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1122 +hardened-sources-2.4.35.ebuild:
1123 Version bump, initial version for Linux 2.4.35.
1124
1125 *hardened-sources-2.6.21-r4 (16 Aug 2007)
1126
1127 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1128 +hardened-sources-2.6.21-r4.ebuild:
1129 Revision bump for Linux 2.6.21.6.
1130
1131 *hardened-sources-2.6.20-r7 (16 Aug 2007)
1132
1133 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1134 +hardened-sources-2.6.20-r7.ebuild:
1135 Revision bump for Linux 2.6.20.16.
1136
1137 *hardened-sources-2.6.22-r1 (13 Aug 2007)
1138
1139 13 Aug 2007; Christian Heim <phreak@gentoo.org>
1140 +hardened-sources-2.6.22-r1.ebuild:
1141 Yet another revision bump.
1142
1143 *hardened-sources-2.6.22 (10 Aug 2007)
1144
1145 10 Aug 2007; Christian Heim <phreak@gentoo.org>
1146 +hardened-sources-2.6.22.ebuild:
1147 Initial release for 2.6.22. If you are using hardened-sources on a desktop
1148 machine (P4 or newer), be aware you might need to disable
1149 CONFIG_PAX_PAGEEXEC.
1150
1151 04 Aug 2007; Christian Heim <phreak@gentoo.org>
1152 hardened-sources-2.6.20-r6.ebuild:
1153 Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
1154 2.6.20.15.
1155
1156 10 Jul 2007; Christian Heim <phreak@gentoo.org>
1157 hardened-sources-2.6.20-r5.ebuild:
1158 Marking hardened-sources-2.6.20-r5 stable on ppc.
1159
1160 10 Jul 2007; Christian Heim <phreak@gentoo.org>
1161 -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
1162 Cleanup.
1163
1164 *hardened-sources-2.6.20-r6 (08 Jul 2007)
1165
1166 08 Jul 2007; Christian Heim <phreak@gentoo.org>
1167 +hardened-sources-2.6.20-r6.ebuild:
1168 Revision bump, grabbing yet another stable release.
1169
1170 17 Jun 2007; Christian Heim <phreak@gentoo.org>
1171 -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
1172 -hardened-sources-2.6.21-r2.ebuild:
1173 Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
1174 alpha stable KEYWORD by mistake.
1175
1176 17 Jun 2007; Christian Heim <phreak@gentoo.org>
1177 hardened-sources-2.6.20-r5.ebuild:
1178 Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
1179 genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
1180
1181 *hardened-sources-2.6.21-r3 (12 Jun 2007)
1182
1183 12 Jun 2007; Christian Heim <phreak@gentoo.org>
1184 +hardened-sources-2.6.21-r3.ebuild:
1185 Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
1186 of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
1187 love.
1188
1189 *hardened-sources-2.6.20-r5 (11 Jun 2007)
1190
1191 11 Jun 2007; Christian Heim <phreak@gentoo.org>
1192 +hardened-sources-2.6.20-r5.ebuild:
1193 Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1194 of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1195 love.
1196
1197 *hardened-sources-2.4.34.5 (11 Jun 2007)
1198
1199 11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1200 +hardened-sources-2.4.34.5.ebuild:
1201 added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1202
1203 30 May 2007; Christian Heim <phreak@gentoo.org>
1204 -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1205 Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1206 stale ebuild(s).
1207
1208 30 May 2007; Christian Heim <phreak@gentoo.org>
1209 -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1210 -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1211 -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1212 Doing some cleanups, remove stale ebuilds.
1213
1214 26 May 2007; Christian Heim <phreak@gentoo.org>
1215 hardened-sources-2.6.21-r2.ebuild:
1216 Fixing the grsecurity patch, had one '};' too much.
1217
1218 *hardened-sources-2.6.21-r2 (26 May 2007)
1219
1220 26 May 2007; Christian Heim <phreak@gentoo.org>
1221 -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1222 +hardened-sources-2.6.21-r2.ebuild:
1223 Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1224 grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1225
1226 *hardened-sources-2.6.20-r4 (26 May 2007)
1227
1228 26 May 2007; Christian Heim <phreak@gentoo.org>
1229 -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1230 Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1231 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1232
1233 15 May 2007; Christian Heim <phreak@gentoo.org>
1234 hardened-sources-2.6.20-r3.ebuild:
1235 Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1236 introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1237 grsecurity patch fail in that exact same hunk.
1238
1239 *hardened-sources-2.6.20-r3 (15 May 2007)
1240
1241 15 May 2007; Christian Heim <phreak@gentoo.org>
1242 +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1243 Revision bump, incorporating Linux 2.6.20.11.
1244
1245 *hardened-sources-2.6.21-r1 (11 May 2007)
1246
1247 11 May 2007; Christian Heim <phreak@gentoo.org>
1248 +hardened-sources-2.6.21-r1.ebuild:
1249 Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1250 mentioned in #177234.
1251
1252 07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1253 files/digest-hardened-sources-2.6.21, Manifest:
1254 Fix Manifest/digest for linux-2.6.21.tar.bz2
1255
1256 06 May 2007; Christian Heim <phreak@gentoo.org>
1257 hardened-sources-2.6.21.ebuild:
1258 Bumping the hardened-patches version, needed for the fix for #177234.
1259
1260 *hardened-sources-2.6.21 (02 May 2007)
1261
1262 02 May 2007; Christian Heim <phreak@gentoo.org>
1263 +hardened-sources-2.6.21.ebuild:
1264 Version bump, Linux 2.6.21-hardened.
1265
1266 29 Apr 2007; Christian Heim <phreak@gentoo.org>
1267 hardened-sources-2.6.20-r2.ebuild:
1268 Adding ~ia64 on Ned's request.
1269
1270 29 Apr 2007; Christian Heim <phreak@gentoo.org>
1271 hardened-sources-2.6.20-r2.ebuild:
1272 Fixing the included grsecurity patch, wasn't alligning due to the Index:
1273 header line(s).
1274
1275 29 Apr 2007; Christian Heim <phreak@gentoo.org>
1276 hardened-sources-2.6.20-r2.ebuild:
1277 Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1278
1279 *hardened-sources-2.6.20-r2 (10 Apr 2007)
1280
1281 10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1282 +hardened-sources-2.6.20-r2.ebuild:
1283 Version bump, on behalf of phreak
1284
1285 *hardened-sources-2.6.20-r1 (04 Apr 2007)
1286
1287 04 Apr 2007; Christian Heim <phreak@gentoo.org>
1288 +hardened-sources-2.6.20-r1.ebuild:
1289 Revision bump, grabbing a newer grsecurity snapshot.
1290
1291 *hardened-sources-2.6.20 (25 Mar 2007)
1292
1293 25 Mar 2007; Christian Heim <phreak@gentoo.org>
1294 +hardened-sources-2.6.20.ebuild:
1295 Finally a hardened-sources version for 2.6.20; many people have been waiting
1296 for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1297 testbox.
1298
1299 16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1300 hardened-sources-2.6.18-r6.ebuild:
1301 Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1302
1303 *hardened-sources-2.6.18-r6 (16 Mar 2007)
1304
1305 16 Mar 2007; Christian Heim <phreak@gentoo.org>
1306 -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1307 Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1308 yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1309 supposed to be.
1310
1311 06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1312 Fixing the Manifest, the previous one was broken (as in still had the
1313 deleted ebuild in it).
1314
1315 06 Mar 2007; Christian Heim <phreak@gentoo.org>
1316 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1317 +hardened-sources-2.6.18-r5.ebuild:
1318 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1319 Linux 2.6.18.8. Also cleaning up the older version.
1320
1321 *hardened-sources-2.6.18-r5 (06 Mar 2007)
1322
1323 06 Mar 2007; Christian Heim <phreak@gentoo.org>
1324 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1325 +hardened-sources-2.6.18-r5.ebuild:
1326 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1327 Linux 2.6.18.8. Also cleaning up the older version.
1328
1329 24 Feb 2007; Christian Heim <phreak@gentoo.org>
1330 -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1331 -hardened-sources-2.6.19-r5.ebuild:
1332 Removing some of the old version, that didn't work.
1333
1334 *hardened-sources-2.6.19-r6 (12 Feb 2007)
1335
1336 12 Feb 2007; Christian Heim <phreak@gentoo.org>
1337 +hardened-sources-2.6.19-r6.ebuild:
1338 Revision bump, including a new grsec version fixing #166235.
1339
1340 *hardened-sources-2.4.34 (24 Jan 2007)
1341
1342 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1343 Manifest:
1344 updating Manifest with checksums of new tarball and ebuild
1345
1346 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1347 +hardened-sources-2.4.34.ebuild:
1348 I added new hardened sources 2.4 update, this is a critical path
1349 security bugfix - all users of h-s are strongly advised
1350 to update their existing hardened sources to this version.
1351 It contains a fix for a kernel vulnerability that is pertaining
1352 to the PaX changes to virtual memory management, possibly leading
1353 to a local kernel exploit ... see grsecurity.net forums and homepage
1354
1355 23 Jan 2007; Christian Heim <phreak@gentoo.org>
1356 files/digest-hardened-sources-2.6.19-r5, Manifest:
1357 Fixing the patch-tarball digest.
1358
1359 *hardened-sources-2.6.19-r5 (23 Jan 2007)
1360
1361 23 Jan 2007; Christian Heim <phreak@gentoo.org>
1362 +hardened-sources-2.6.19-r5.ebuild:
1363 Revision bump, closing the recently discovered PaX expand_stack()
1364 vulnerability.
1365
1366 *hardened-sources-2.6.19-r4 (14 Jan 2007)
1367
1368 14 Jan 2007; Christian Heim <phreak@gentoo.org>
1369 +hardened-sources-2.6.19-r4.ebuild:
1370 Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1371 dropping the randomized PID feature.
1372
1373 11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1374 hardened-sources-2.4.33.4.ebuild:
1375 stable x86, bug #161171
1376
1377 *hardened-sources-2.6.19-r3 (27 Dec 2006)
1378
1379 27 Dec 2006; Christian Heim <phreak@gentoo.org>
1380 -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1381 Revision bump for bug #157186 and #158786.
1382
1383 *hardened-sources-2.6.18-r4 (27 Dec 2006)
1384
1385 27 Dec 2006; Christian Heim <phreak@gentoo.org>
1386 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1387 Revision bump for bug #157186.
1388
1389 *hardened-sources-2.6.19-r2 (23 Dec 2006)
1390
1391 23 Dec 2006; Christian Heim <phreak@gentoo.org>
1392 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1393 Revision bump to pull in genpatches-2.6.19-3 for #157186.
1394
1395 17 Dec 2006; Christian Heim <phreak@gentoo.org>
1396 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1397 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1398 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1399 hardened-sources-2.6.19-r1.ebuild:
1400 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1401 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1402
1403 *hardened-sources-2.4.33.4 (17 Dec 2006)
1404
1405 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1406 +hardened-sources-2.4.33.4.ebuild:
1407 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1408 and quilting
1409
1410 *hardened-sources-2.6.19-r1 (14 Dec 2006)
1411
1412 14 Dec 2006; Christian Heim <phreak@gentoo.org>
1413 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1414 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1415 for reporting).
1416
1417 *hardened-sources-2.6.19 (13 Dec 2006)
1418
1419 13 Dec 2006; Christian Heim <phreak@gentoo.org>
1420 +hardened-sources-2.6.19.ebuild:
1421 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1422 Brad for providing that prompt update.
1423
1424 *hardened-sources-2.6.18-r3 (13 Dec 2006)
1425
1426 13 Dec 2006; Christian Heim <phreak@gentoo.org>
1427 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1428 +hardened-sources-2.6.18-r3.ebuild:
1429 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1430 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1431
1432 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1433 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1434
1435 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1436 Stable on ppc wrt bug 157356
1437
1438 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1439 hardened-sources-2.6.18.ebuild:
1440 stable x86, bug #157356
1441
1442 *hardened-sources-2.6.18-r2 (06 Dec 2006)
1443
1444 06 Dec 2006; Christian Heim <phreak@gentoo.org>
1445 +hardened-sources-2.6.18-r2.ebuild:
1446 Revision bump, including 2.6.18.5 (via genpatches) and
1447 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1448 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1449 redesign.
1450
1451 06 Dec 2006; Christian Heim <phreak@gentoo.org>
1452 hardened-sources-2.6.18.ebuild:
1453 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1454 of Mike Doty).
1455
1456 *hardened-sources-2.6.18-r1 (23 Nov 2006)
1457
1458 23 Nov 2006; Christian Heim <phreak@gentoo.org>
1459 +hardened-sources-2.6.18-r1.ebuild:
1460 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1461
1462 *hardened-sources-2.6.18 (11 Nov 2006)
1463
1464 11 Nov 2006; Christian Heim <phreak@gentoo.org>
1465 +hardened-sources-2.6.18.ebuild:
1466 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1467
1468 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1469 - mark amd64 stable also. bug #151877
1470
1471 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1472 - mark 2.6.17-r1 stable
1473
1474 27 Aug 2006; Christian Heim <phreak@gentoo.org>
1475 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1476 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1477
1478 *hardened-sources-2.6.17-r1 (26 Aug 2006)
1479
1480 26 Aug 2006; Christian Heim <phreak@gentoo.org>
1481 +hardened-sources-2.6.17-r1.ebuild:
1482 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1483 grsecurity patch.
1484
1485 *hardened-sources-2.6.17 (17 Aug 2006)
1486
1487 17 Aug 2006; Christian Heim <phreak@gentoo.org>
1488 +hardened-sources-2.6.17.ebuild:
1489 Bumping the hardened-sources-2.6 series to 2.6.17, using
1490 genpatches-2.6.17-6.base.
1491
1492 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1493 - stable on x86 and amd64
1494
1495 *hardened-sources-2.6.16-r11 (15 Jul 2006)
1496
1497 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1498 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1499 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1500 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1501 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1502 crusty ebuilds
1503
1504 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1505 hardened-sources-2.6.16-r10.ebuild:
1506 marking stable on x86 and amd64
1507
1508 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1509 - 2.4.32-r6 stable on x86. RSBAC state unknown
1510
1511 *hardened-sources-2.4.32-r7 (10 Jul 2006)
1512
1513 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1514 +hardened-sources-2.4.32-r7.ebuild:
1515 Bump PaX for RSBAC to test-17
1516
1517 *hardened-sources-2.6.16-r9 (03 Jul 2006)
1518
1519 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1520 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1521 hardened-sources-2.6.16 bump to latest -base.
1522
1523 *hardened-sources-2.4.32-r6 (30 Jun 2006)
1524
1525 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1526 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1527 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1528 sysctl controlable resource logging
1529
1530 *hardened-sources-2.6.16-r7 (05 Jun 2006)
1531
1532 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1533 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1534 push new 2.6.16 release in preparation for stable
1535
1536 22 May 2006; <solar@gentoo.org> :
1537 - redigest bug 134002
1538
1539 *hardened-sources-2.4.32-r5 (16 May 2006)
1540
1541 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1542 +hardened-sources-2.4.32-r5.ebuild:
1543 Fixes rsbac common patching (new patch in new -r5 patchset)
1544
1545 *hardened-sources-2.4.32-r4 (13 May 2006)
1546
1547 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1548 +hardened-sources-2.4.32-r4.ebuild:
1549 - security bumps
1550
1551 *hardened-sources-2.6.16-r6 (03 May 2006)
1552
1553 03 May 2006; John Mylchreest <johnm@gentoo.org>
1554 +hardened-sources-2.6.16-r6.ebuild:
1555 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1556
1557 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1558 hardened-sources-2.6.14-r8.ebuild:
1559 fix x86_64 build problem, this will delay the digest issue again for a short
1560 while but it will sort itself out
1561
1562 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1563 hardened-sources-2.6.14-r8.ebuild:
1564 bump hardened patchset
1565
1566 27 Apr 2006; Alec Warner <antarus@gentoo.org>
1567 files/digest-hardened-sources-2.4.32-r2,
1568 files/digest-hardened-sources-2.4.32-r3,
1569 files/digest-hardened-sources-2.6.14-r8, Manifest:
1570 Fixing duff SHA256 digests: Bug # 131293
1571
1572 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1573
1574 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1575 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1576 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1577 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1578 cleanup of old uneccessary sources
1579
1580 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1581 fix digest
1582
1583 *hardened-sources-2.6.14-r8 (20 Apr 2006)
1584
1585 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1586 +hardened-sources-2.6.14-r8.ebuild:
1587 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1588
1589 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1590 Turning on gpg-signing again, and recomitting
1591
1592 *hardened-sources-2.6.16-r4 (20 Apr 2006)
1593
1594 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1595 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1596 +hardened-sources-2.6.16-r4.ebuild:
1597 Fix numerous security vulns
1598
1599 *hardened-sources-2.4.32-r3 (16 Apr 2006)
1600
1601 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1602 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1603 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1604 - security bump for bug #112791. Removed old ebuilds
1605
1606 *hardened-sources-2.6.16-r3 (15 Apr 2006)
1607
1608 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1609 +hardened-sources-2.6.16-r3.ebuild:
1610 Removing silly localversion which I missed
1611
1612 *hardened-sources-2.6.14-r7 (14 Apr 2006)
1613
1614 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1615 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1616 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1617
1618 *hardened-sources-2.6.16-r2 (13 Apr 2006)
1619
1620 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1621 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1622 +hardened-sources-2.6.16-r2.ebuild:
1623 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1624 labels, dropping USERGROUP define fixes, since these were merged mainstream.
1625
1626 *hardened-sources-2.6.16-r1 (11 Apr 2006)
1627
1628 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1629 +hardened-sources-2.6.16-r1.ebuild:
1630 Bumping to include ppc build fix and 2.6.16.3
1631
1632 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1633 hardened-sources-2.6.14-r6.ebuild:
1634 Stable on x86; bug #127718
1635
1636 *hardened-sources-2.6.16 (31 Mar 2006)
1637
1638 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1639 +hardened-sources-2.6.16.ebuild:
1640 Bumping to new version of grsec, and kernel base. New squashfs. Based on
1641 2.6.16.1
1642
1643 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1644 hardened-sources-2.6.14-r6.ebuild:
1645 Stable on amd64, bug 127718.
1646
1647 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1648 Stable on ppc. Bug #127718
1649
1650 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1651 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1652 -hardened-sources-2.6.14-r4.ebuild:
1653 Cleanup.
1654
1655 *hardened-sources-2.6.14-r6 (15 Mar 2006)
1656
1657 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1658 +hardened-sources-2.6.14-r6.ebuild:
1659 Fixes grsec policy recreation bug and adds a
1660 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1661
1662 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1663 - stable on x86
1664
1665 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1666 hardened-sources-2.6.14-r5.ebuild:
1667 Stable on ppc.
1668
1669 *hardened-sources-2.6.14-r5 (01 Feb 2006)
1670
1671 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1672 +hardened-sources-2.6.14-r5.ebuild:
1673 fixing every known exploit
1674
1675 *hardened-sources-2.4.32-r2 (26 Jan 2006)
1676
1677 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1678 +hardened-sources-2.4.32-r2.ebuild:
1679 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1680
1681 *hardened-sources-2.6.14-r4 (12 Jan 2006)
1682
1683 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1684 - version bump for new genpatches which fix up a few sec holes
1685
1686 *hardened-sources-2.4.32-r1 (05 Jan 2006)
1687
1688 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1689 - revision bump to add misc vital linux kernel security patches.
1690
1691 *hardened-sources-2.6.14-r3 (30 Dec 2005)
1692
1693 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1694 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1695 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1696
1697 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1698 hardened-sources-2.6.14-r2.ebuild:
1699 making x86 & amd64 stable following testing.
1700
1701 *hardened-sources-2.6.14-r2 (27 Dec 2005)
1702
1703 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1704 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1705 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1706 network hooks.
1707
1708 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1709 hardened-sources-2.6.14-r1.ebuild:
1710 bumping to stable early for sec fix on x86 & amd64
1711
1712 *hardened-sources-2.6.14-r1 (05 Dec 2005)
1713
1714 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1715 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1716 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1717
1718 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1719 - stable on x86 security bug #114227 CAN-2005-3257
1720
1721 *hardened-sources-2.4.32 (19 Nov 2005)
1722
1723 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1724 +hardened-sources-2.4.32.ebuild:
1725 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1726 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1727 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1728 rsbac >> /etc/portage/package.use)
1729
1730 *hardened-sources-2.6.14 (14 Nov 2005)
1731
1732 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1733 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1734 Bumping 2.6 series to 2.6.14.2
1735
1736 *hardened-sources-2.6.13-r2 (20 Oct 2005)
1737
1738 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1739 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1740 +hardened-sources-2.6.13-r2.ebuild:
1741 Fixes minor build error in ppc.
1742
1743 *hardened-sources-2.6.13-r1 (17 Oct 2005)
1744
1745 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1746 +hardened-sources-2.6.13-r1.ebuild:
1747 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1748 2.6.13.4, fixes some major amd64 stability problems.
1749
1750 *hardened-sources-2.6.13 (16 Sep 2005)
1751
1752 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1753 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1754 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1755 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1756 users should test this thoroughly.
1757
1758 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1759 - stable on x86
1760
1761 *hardened-sources-2.6.11-r15 (27 Jun 2005)
1762
1763 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1764 +hardened-sources-2.6.11-r15.ebuild:
1765 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1766 grsec redefining curr_ip struct.
1767
1768 *hardened-sources-2.4.31 (20 Jun 2005)
1769
1770 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1771 initial import of 2.4.31 tree
1772
1773 *hardened-sources-2.6.11-r14 (14 Jun 2005)
1774
1775 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1776 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1777 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1778 naming scheme to abide by genpatches
1779
1780 *hardened-sources-2.6.11-r13 (18 May 2005)
1781
1782 18 May 2005; John Mylchreest <johnm@gentoo.org>
1783 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1784 Managed to mangle the Makefile patch from grsec, to miss out the grsec
1785 target. sorry about that. Fixes bug #93022
1786
1787 *hardened-sources-2.6.11-r12 (17 May 2005)
1788
1789 17 May 2005; John Mylchreest <johnm@gentoo.org>
1790 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1791 +hardened-sources-2.6.11-r12.ebuild:
1792 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1793 merges in genpatches-base
1794
1795 *hardened-sources-2.6.11-r12 (17 May 2005)
1796
1797 17 May 2005; John Mylchreest <johnm@gentoo.org>
1798 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1799 +hardened-sources-2.6.11-r12.ebuild:
1800 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1801 merges in genpatches-base
1802
1803 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1804 -files/2.4.27-cmdline-race.patch,
1805 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1806 -files/2.4.28-grsec-binfmt_a.out.patch,
1807 -files/2.4.28-grsec-cmdline-race.patch,
1808 -files/2.4.28-selinux-binfmt_a.out.patch,
1809 -files/2.4.28-selinux-cmdline-race.patch,
1810 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1811 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1812 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1813 cleanup..
1814
1815 *hardened-sources-2.4.30-r1 (21 Apr 2005)
1816
1817 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1818 - disable aout by default
1819
1820 *hardened-sources-2.4.30 (18 Apr 2005)
1821
1822 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1823 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1824 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1825 use
1826
1827 *hardened-sources-2.4.29 (30 Mar 2005)
1828
1829 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1830 +hardened-sources-2.4.29.ebuild:
1831 New hardened-patches-2.4-29.0 patchball.
1832 Removed SELinux support, upgraded GRSecurity to 2.1.4.
1833
1834 *hardened-sources-2.4.28-r5 (06 Mar 2005)
1835
1836 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1837 +hardened-sources-2.4.28-r5.ebuild:
1838 Added a fix for a PaX vulnerability.
1839
1840 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1841 hardened-sources-2.4.28-r4.ebuild:
1842 Stable on x86
1843
1844 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1845 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1846 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1847 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1848 - fixed/added RDEPEND= in all kernel-2 ebuilds
1849
1850 *hardened-sources-2.4.28-r4 (21 Jan 2005)
1851
1852 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1853 +hardened-sources-2.4.28-r4.ebuild:
1854 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1855 backport of neighbour hash updates.
1856
1857 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1858 hardened-sources-2.4.28-r3.ebuild:
1859 Stable on x86
1860
1861 *hardened-sources-2.6.10-r3 (20 Jan 2005)
1862
1863 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1864 +hardened-sources-2.6.10-r3.ebuild:
1865 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1866 in 2005.0
1867
1868 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1869 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1870 hardened-sources-2.4.28-r2.ebuild:
1871 Mark stable on x86
1872
1873 *hardened-sources-2.4.28-r3 (17 Jan 2005)
1874
1875 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1876 +hardened-sources-2.4.28-r3.ebuild:
1877 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1878
1879 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1880 hardened-sources-2.4.28.ebuild:
1881 Mark stable on x86.
1882
1883 *hardened-sources-2.4.28-r2 (13 Jan 2005)
1884
1885 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1886 +hardened-sources-2.4.28-r2.ebuild:
1887 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1888 Mazinger for grsecurity patches as well.
1889
1890 *hardened-sources-2.4.28-r1 (23 Dec 2004)
1891
1892 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1893 Security bump. Thank tocharian for rolling a new patchset...
1894
1895 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1896 +files/2.4.28-grsec-cmdline-race.patch,
1897 +files/2.4.28-selinux-binfmt_a.out.patch,
1898 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1899 - Round up remaining security patches that appear to be missing in 2.4.28. -
1900 PaX standalone updated to current. hgpv=28.1
1901
1902 *hardened-sources-2.4.28 (28 Nov 2004)
1903
1904 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1905 security bump. Thank tocharian for rolling a new patchset
1906
1907 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1908
1909 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1910 +hardened-sources-2.4.27-r3.ebuild:
1911 Applies the new 2.4-27.2 patchball which updates
1912 GRSecurity to the 2.0.1 version.
1913
1914 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1915
1916 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1917 +hardened-sources-2.4.27-r2.ebuild:
1918 Version bump.
1919 This version uses the new 2.4-27.1 patchball which updates
1920 both the SELinux PaX hooks patch and the SELinux headers.
1921
1922 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1923
1924 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1925 +hardened-sources-2.4.27-r1.ebuild,
1926 -hardened-sources-2.4.27.ebuild,
1927 +files/2.4.27-cmdline-race.patch:
1928 Version bump, fix for cmdline race. See bug #59905.
1929
1930 *hardened-sources-2.4.26-r6 (09 Aug 2004)
1931
1932 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1933 +hardened-sources-2.4.26-r6.ebuild,
1934 -hardened-sources-2.4.26-r5.ebuild,
1935 -hardened-sources-2.4.26-r4.ebuild,
1936 +files/2.4.26-cmdline-race.patch:
1937 Version bump, fix for cmdline race. See bug #59905.
1938
1939 *hardened-sources-2.4.27 (08 Aug 2004)
1940
1941 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1942 +hardened-sources-2.4.27.ebuild,
1943 +files/2.4.27-CAN-2004-0394.patch:
1944 Ported the patchball to the 2.4.27 kernel version.
1945
1946 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1947
1948 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1949 +hardened-sources-2.4.26-r5.ebuild:
1950 Updated to use the new hardened-patches-2.4-26.1 patchball.
1951 It adds the following features:
1952 - Squashfs
1953 - Ebtables
1954 - Netdev random (core+drivers)
1955 - Watchdog Timer (WDT) fix.
1956
1957 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1958
1959 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1960 +hardened-sources-2.4.26-r4.ebuild,
1961 +files/2.4.26-CAN-2004-0415.patch,
1962 -hardened-sources-2.4.26-3:
1963 Version bump, fix for CAN 0415, see bug #59378.
1964
1965 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1966
1967 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1968 +hardened-sources-2.4.26-r3.ebuild,
1969 +files/2.4.26-CAN-2004-0497.patch,
1970 -hardened-sources-2.4.26-r2.ebuild:
1971 Version bump, fixed CAN 0497, see bug #56171.
1972
1973 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1974
1975 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1976 +hardened-sources-2.4.26-r2.ebuild,
1977 +files/2.4.26-CAN-2004-0495.patch,
1978 +files/2.4.26-CAN-2004-0535.patch,
1979 -hardened-sources-2.4.26-r1.ebuild:
1980 Fixes for both CAN 0495 and 0535, see bug #54976
1981
1982 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1983 hardened-sources-2.4.26-r1.ebuild:
1984 QA - fix use invocation
1985
1986 *hardened-sources-2.4.26-r1 (22 June 2004)
1987
1988 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1989 +hardened-sources-2.4.26-r1.ebuild,
1990 +files/2.4.26-CAN-2004-0394.patch,
1991 +files/2.4.26-signal-race.patch,
1992 -hardened-sources-2.4.26.ebuild,
1993 -hardened-sources-2.4.24-r3.ebuild:
1994 Version bump for the CAN-2004-0394 issue and bug #53804
1995 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1996
1997
1998 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1999 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
2000 Masked hardened-sources-2.4.26.ebuild broken for ppc
2001
2002 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
2003 hardened-sources-2.4.24-r3.ebuild:
2004 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
2005
2006 *hardened-sources-2.4.26 (29 May 2004)
2007
2008 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
2009 +hardened-sources-2.4.26.ebuild:
2010 Updated hardened-sources for the 2.4.26 kernel
2011 Removed broken components, updated almost everything.
2012
2013 *hardened-sources-2.4.24-r3 (17 Apr 2004)
2014
2015 17 Apr 2004; <plasmaroo@gentoo.org>
2016 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
2017 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
2018 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
2019 +hardened-sources-2.4.24-r3.ebuild:
2020 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
2021 vulnerabilities. Old revisions removed.
2022
2023 *hardened-sources-2.4.24-r2 (15 Apr 2004)
2024
2025 15 Apr 2004; <plasmaroo@gentoo.org>
2026 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
2027 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
2028 Version bump for the CAN-2004-0109 issue; bug #47881.
2029
2030 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
2031 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
2032 Add eutils to inherit.
2033
2034 *hardened-sources-2.4.24-r1 (19 Feb 2004)
2035
2036 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
2037 files/hardened-sources-2.4.24.munmap.patch:
2038 Added the patch for the mremap/munmap vulnerability. Bug #42024.
2039
2040 *hardened-sources-2.4.24 (06 Feb 2004)
2041
2042 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
2043 hardened-sources-2.4.24.ebuild:
2044 Version bump, updated most of the components.
2045 This release includes the following:
2046
2047 - Hardened security
2048 - Netfilter patch-o-matic 20031219
2049 - FreeSWAN 2.04 & x509 1.4.8
2050 - EVMS 2.2.2
2051 - XFS 1.3.1
2052 - cryptoloop jari
2053 - grsecurity 2.0-rc4
2054 - SELinux
2055 - PaX 200402060000
2056 - PaX Obscurity 200308302223
2057 - Others...
2058
2059 Neither -ck nor systrace are included anymore.
2060
2061 *hardened-sources-2.4.22-r2 (05 Jan 2004)
2062
2063 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
2064 hardened-sources-2.4.22-r2.ebuild:
2065 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
2066
2067 *hardened-sources-2.4.22-r1 (02 Dec 2003)
2068
2069 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
2070 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
2071
2072 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
2073 hardened-sources-2.4.22-r1.ebuild:
2074 Version bump for the 'do_brk' vulnerability.
2075
2076 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
2077 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
2078 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
2079 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
2080 Fix the 'do_brk' vulnerability.
2081
2082 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
2083 hardened-sources-2.4.22.ebuild:
2084 - Removed the src_install() portion for SELinux flask
2085 components. These are no longer handled in the kernel
2086 so this code was not necessary.
2087
2088 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
2089 New 2.4.22 based hardened-sources thanks to
2090 Phil West <p.west@computer.org>.
2091
2092 These sources include:
2093 - New SELinux API
2094 - Updated CK-base
2095 - Updated GRSec
2096 - Systrace
2097 - SuperFreeS/WAN 1.99.8
2098 - Propolice kernel build support
2099 - EVMS
2100 - Other various security related patches
2101
2102 *hardened-sources-2.4.21 (14 Sep 2003)
2103
2104 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
2105 Updated hardened-sources based on the 2.4.21 Linux kernel.
2106 This includes updates to most major components such as:
2107 - ck-base-0306300059
2108 - selinux-2.4-2003071106
2109 - grsecurity-2.0-rc1
2110 - Updated IPTables patch-o-matic
2111 - Updated SuperFreeS/WAN
2112
2113 Thanks to Phil West <pwest@computer.org> for his work in getting this
2114 updated patch set ready for the 2.4.21 based kernel.
2115
2116 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
2117 Initial import of hardened-sources-2.4.20-r4. This revision
2118 includes only a few changes, but one of these is an important
2119 security fix. It is recommended all users of hardened-sources
2120 upgrade to this release.
2121
2122 - ioperm bug fix
2123 - fixed compilation failure when building without GRSec
2124
2125 SAL (Secure Auditing for Linux) is NOT included in this revision
2126 due to time constraints, but is planned for inclusion in the near
2127 future.
2128
2129 *hardened-sources-2.4.20-r2 (12 Jun 2003)
2130
2131 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
2132 hardened-sources-2.4.20-r3.ebuild:
2133 Add Header...
2134
2135 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2136 hardened-sources-2.4.20-r3.ebuild:
2137 Removed warnings from ebuild. This kernel should be safe to
2138 use at this point.
2139
2140 *hardened-sources-2.4.20-r3 (08 Jun 2003)
2141
2142 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2143 hardened-sources-2.4.20-r3.ebuild:
2144 New revision. Includes the following changes over -r2:
2145
2146 - ck7-base (O(1), preempt, low latency)
2147 - Super FreeS/WAN 1.99.7rc2
2148 - PaX for the LSM/SELinux branch
2149 - GRSecurity 2.0-pre4 (role based access control)
2150 - Systrace 1.3
2151 - EXT3 fixes
2152 - EVMS 2.0.1
2153 - GCC 3.1+ compile optimizations
2154 - ProPolice kernel build support
2155 - Hashing table security fixes
2156
2157 *hardened-sources-2.4.20-r1 (09 Apr 2003)
2158
2159 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
2160 Initial import of hardened-sources-r2. This new
2161 ebuild includes many new performance and security
2162 related patches. As in -r1, it will patch in
2163 LSM/SELinux if "selinux" is in USE, otherwise it
2164 will patch in GRSecurity. The following patches
2165 are included in this revision:
2166
2167 - O(1) Scheduler, Low Latency, and Preempt
2168 (pulled from the base CK patch)
2169 - ptrace exploit patch for the LSM kernel
2170 (the GRSec patch already fixes this)
2171 - LSM 2.4-2003040709
2172 - SELinux 2.4-2003040709
2173 - Systrace v1.2
2174 - IPTables patch-o-matic base patches - 20030107
2175 - CryptoAPI 2.4.20.1 w/ loop-jari patch
2176 - Super FreeS/WAN 1.99.6.1
2177 - GRSecurity 1.9.9g
2178 - MPPE
2179 - EXT3 data journal fix
2180 - CIPE 1.5.4
2181
2182 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2183 hardened-sources-2.4.20-r1.ebuild, manifest:
2184 Updated to install flask components correctly for selinux.
2185
2186 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2187 hardened-sources-2.4.20-r1.ebuild:
2188 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2189 is patched in instead. Ptrace patches for selinux have also been added. In
2190 either case, systrace support will be patched in as well.
2191
2192 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2193 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2194 Revision bump for new sources.
2195
2196 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2197 hardened-sources-2.4.20-r1.ebuild:
2198 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2199
2200 *hardened-sources-2.4.20 (30 Mar 2003)
2201
2202 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2203 hardened-sources-2.4.20.ebuild:
2204 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20