/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.369 - (show annotations) (download)
Tue Dec 14 21:14:14 2010 UTC (3 years, 9 months ago) by blueness
Branch: MAIN
Changes since 1.368: +8 -1 lines
Based on vanilla 2.6.32.27 + genpatches-2.6.32-29 + grsecurity-2.2.1-2.6.32.27-201012130740

(Portage version: 2.1.9.24/cvs/Linux x86_64)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.368 2010/12/09 11:11:38 blueness Exp $
4
5 *hardened-sources-2.6.32-r31 (14 Dec 2010)
6
7 14 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
8 +hardened-sources-2.6.32-r31.ebuild:
9 Based on vanilla 2.6.32.27 + genpatches-2.6.32-29 +
10 grsecurity-2.2.1-2.6.32.27-201012130740
11
12 09 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
13 hardened-sources-2.6.32-r30.ebuild, hardened-sources-2.6.36-r5.ebuild:
14 Fixed bug #348238
15
16 *hardened-sources-2.6.36-r5 (09 Dec 2010)
17
18 09 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
19 +hardened-sources-2.6.36-r5.ebuild:
20 Based on vanilla-2.6.36.1 + genpatches-2.6.36-6 +
21 grsecurity-2.2.1-2.6.36.1-201012040057
22
23 *hardened-sources-2.6.32-r30 (09 Dec 2010)
24
25 09 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
26 +hardened-sources-2.6.32-r30.ebuild:
27 Based on vanilla-2.6.32.26 + genpatches-2.6.32-28 +
28 grsecurity-2.2.1-2.6.32.26-201012040057
29
30 *hardened-sources-2.6.36-r4 (02 Dec 2010)
31
32 02 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
33 +hardened-sources-2.6.36-r4.ebuild:
34 Based on vanilla-2.6.36.1 + genpatches-.2.6.36-5 +
35 grsecurity-2.2.1-2.6.36.1-201011280939
36
37 *hardened-sources-2.6.32-r29 (02 Dec 2010)
38
39 02 Dec 2010; Anthony G. Basile <blueness@gentoo.org>
40 +hardened-sources-2.6.32-r29.ebuild:
41 Based on vanilla-2.6.32.26 + genpatches-2.6.32-27 +
42 grsecurity-2.2.1-2.6.32.26-201011280939
43
44 30 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
45 -hardened-sources-2.6.32-r28.ebuild, -hardened-sources-2.6.36-r3.ebuild:
46 Removed because of multiple breakage (pulseaudio, install, etc).
47
48 *hardened-sources-2.6.36-r3 (29 Nov 2010)
49
50 29 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
51 +hardened-sources-2.6.36-r3.ebuild:
52 hardened-sources-2.6.36-r3 based on 2.6.36.1 + genpatches +
53 grsecurity-2.2.1-2.6.36.1-201011261834
54
55 *hardened-sources-2.6.32-r28 (29 Nov 2010)
56
57 29 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
58 +hardened-sources-2.6.32-r28.ebuild:
59 hardened-sources-2.6.32-r28 based on 2.6.32.26 + genpatches +
60 grsecurity-2.2.1-2.6.32.26-201011261834
61
62 28 Nov 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
63 Update Manifest for deblob 2.6.36.
64
65 *hardened-sources-2.6.36-r2 (18 Nov 2010)
66
67 18 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
68 +hardened-sources-2.6.36-r2.ebuild:
69 hardened-sources-2.6.36-r2 based on 2.6.36 + genpatches +
70 grsecurity-2.2.0-2.6.36-201011151726
71
72 *hardened-sources-2.6.32-r27 (18 Nov 2010)
73
74 18 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
75 +hardened-sources-2.6.32-r27.ebuild:
76 hardened-sources-2.6.32-r27 based on 2.6.32.25 + genpatches +
77 grsecurity-2.2.0-2.6.32.25-201011151726
78
79 *hardened-sources-2.6.36-r1 (14 Nov 2010)
80
81 14 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
82 +hardened-sources-2.6.36-r1.ebuild:
83 hardened-sources-2.6.36-r1 based on 2.6.36 + genpatches +
84 grsecurity-2.2.0-2.6.36-201011131640
85
86 *hardened-sources-2.6.32-r26 (14 Nov 2010)
87
88 14 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
89 +hardened-sources-2.6.32-r26.ebuild:
90 hardened-sources-2.6.32-r26 based on 2.6.32.25 + genpatches +
91 grsecurity-2.2.0-2.6.32.25-201011131640
92
93 *hardened-sources-2.6.36 (07 Nov 2010)
94
95 07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
96 +hardened-sources-2.6.36.ebuild:
97 hardened-sources-2.6.36 based on 2.6.36 + genpatches +
98 grsecurity-2.2.0-2.6.36-201011062054
99
100 *hardened-sources-2.6.35-r7 (07 Nov 2010)
101
102 07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
103 +hardened-sources-2.6.35-r7.ebuild:
104 hardened-sources-2.6.35-r7 based on 2.6.35.8 + genpatches +
105 grsecurity-2.2.0-2.6.35.8-201011062054
106
107 *hardened-sources-2.6.32-r25 (07 Nov 2010)
108
109 07 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
110 +hardened-sources-2.6.32-r25.ebuild:
111 hardened-sources-2.6.32-r25 based on 2.6.32.25 + genpatches +
112 grsecurity-2.2.0-2.6.32.25-201011062054
113
114 *hardened-sources-2.6.35-r6 (02 Nov 2010)
115 *hardened-sources-2.6.32-r24 (02 Nov 2010)
116
117 02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
118 +hardened-sources-2.6.32-r24.ebuild, +hardened-sources-2.6.35-r6.ebuild:
119 hardened-sources-2.6.32-r24 based on 2.6.32.25 + genpatches +
120 grsecurity-2.2.0-2.6.32.25-201010311944
121 hardened-sources-2.6.35-r6 based on 2.6.35.8 + genpatches +
122 grsecurity-2.2.0-2.6.35.8-201010311944
123
124 02 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
125 hardened-sources-2.6.32-r23.ebuild:
126 ppc64 stable, bug #343535
127
128 *hardened-sources-2.6.35-r5 (24 Oct 2010)
129 *hardened-sources-2.6.32-r23 (24 Oct 2010)
130
131 24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
132 +hardened-sources-2.6.32-r23.ebuild, +hardened-sources-2.6.35-r5.ebuild:
133 hardened-sources-2.6.32-r23 based on 2.6.32.24 + genpatches +
134 grsec-2.2.0-2.6.32.24-201010232009
135 hardened-sources-2.6.35-r5 based on 2.6.35.7 + genpatches +
136 grsec-2.2.0-2.6.35.7-201010232009
137
138 24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
139 hardened-sources-2.6.32-r22.ebuild:
140 Broken on ppc/ppc64, bug #341915#c6
141
142 24 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
143 -hardened-sources-2.6.32-r16.ebuild, -hardened-sources-2.6.32-r17.ebuild,
144 -hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.32-r19.ebuild,
145 -hardened-sources-2.6.32-r20.ebuild, -hardened-sources-2.6.32-r21.ebuild,
146 -hardened-sources-2.6.34-r4.ebuild, -hardened-sources-2.6.34-r5.ebuild,
147 -hardened-sources-2.6.35.ebuild, -hardened-sources-2.6.35-r1.ebuild,
148 -hardened-sources-2.6.35-r2.ebuild, -hardened-sources-2.6.35-r3.ebuild:
149 Removing vulnerable kernels where possible, bug #341801
150
151 21 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
152 hardened-sources-2.6.32-r22.ebuild:
153 x86 stable, bug #341915
154
155 20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
156 hardened-sources-2.6.32-r22.ebuild:
157 amd64 stable, bug #341915
158
159 *hardened-sources-2.6.35-r4 (20 Oct 2010)
160 *hardened-sources-2.6.32-r22 (20 Oct 2010)
161
162 20 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
163 +hardened-sources-2.6.32-r22.ebuild, +hardened-sources-2.6.35-r4.ebuild:
164 hardened-sources-2.6.32-r22 based on 2.6.32.24 + genpatches +
165 grsec-2.2.0-2.6.32.24-201010191911
166 hardened-sources-2.6.35-r4 based on 2.6.35.7 + genpatches +
167 grsec-2.2.0-2.6.35.7-201010191911
168 Addresses security bug #341801
169
170 *hardened-sources-2.6.35-r3 (16 Oct 2010)
171 *hardened-sources-2.6.32-r21 (16 Oct 2010)
172
173 16 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
174 +hardened-sources-2.6.32-r21.ebuild, +hardened-sources-2.6.35-r3.ebuild:
175 hardened-sources-2.6.32-r21 based on 2.6.32.24 + genpatches +
176 grsec-2.2.0-2.6.32.24-201010121028
177 hardened-sources-2.6.35-r3 based on 2.6.35.7 + genpatches +
178 grsec-2.2.0-2.6.35.7-201010121028
179
180 *hardened-sources-2.6.35-r2 (07 Oct 2010)
181
182 07 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
183 +hardened-sources-2.6.35-r2.ebuild:
184 hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches +
185 grsec-2.2.0-2.6.35.7-201010021153
186
187 *hardened-sources-2.6.32-r20 (06 Oct 2010)
188
189 06 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
190 +hardened-sources-2.6.32-r20.ebuild:
191 hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches +
192 grsec-2.2.0-2.6.32.24-201010021153
193
194 *hardened-sources-2.6.35-r1 (30 Sep 2010)
195 *hardened-sources-2.6.32-r19 (30 Sep 2010)
196
197 30 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
198 +hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild:
199 hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches +
200 grsec-2.2.0-2.6.32.23-201009272133
201 hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches +
202 grsec-2.2.0-2.6.35.6-201009281623
203
204 *hardened-sources-2.6.35 (28 Sep 2010)
205
206 28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
207 +hardened-sources-2.6.35.ebuild:
208 hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
209
210 21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
211 -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
212 hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
213 -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
214 Fast track stabilization. See bug #338273. Removed older versions.
215
216 *hardened-sources-2.6.34-r6 (17 Sep 2010)
217 *hardened-sources-2.6.32-r18 (17 Sep 2010)
218
219 17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
220 +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
221 hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
222 grsec-2.2.0-2.6.32.21-201009162222
223 hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
224 grsec-2.2.0-2.6.34.7-201009162222
225 Addresses IA32 syscall exploit.
226
227 *hardened-sources-2.6.34-r5 (15 Sep 2010)
228 *hardened-sources-2.6.32-r17 (15 Sep 2010)
229
230 15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
231 +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
232 hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
233 grsec-2.2.0-2.6.32.21-201009130811
234 hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
235 grsec-2.2.0-2.6.34.6-201009130754
236
237 *hardened-sources-2.6.34-r4 (07 Sep 2010)
238 *hardened-sources-2.6.32-r16 (07 Sep 2010)
239
240 07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
241 +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
242 hardened-sources-2.6.32-r16 based on 2.6.32.21 +
243 grsec-2.2.0-2.6.32.21-201009032133
244 hardened-sources-2.6.34-r4 based on 2.6.34.6 +
245 grsec-2.2.0-2.6.34.6-201009041352
246
247 02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
248 hardened-sources-2.6.32-r15 based on 2.6.32.21 +
249 grsec-2.2.0-2.6.32.21-201008292122
250 hardened-sources-2.6.34-r3 based on 2.6.34.6 +
251 grsec-2.2.0-2.6.34.6-201008292122
252
253 *hardened-sources-2.6.34-r3 (02 Sep 2010)
254 *hardened-sources-2.6.32-r15 (02 Sep 2010)
255
256 02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
257 -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
258 -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
259 +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
260 +hardened-sources-2.6.34-r3.ebuild:
261 Bumps and remove deprecated versions
262
263 *hardened-sources-2.6.34-r2 (21 Aug 2010)
264
265 21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
266 +hardened-sources-2.6.34-r2.ebuild:
267 Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
268
269 *hardened-sources-2.6.32-r14 (21 Aug 2010)
270
271 21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
272 +hardened-sources-2.6.32-r14.ebuild:
273 Based on vanilla 2.6.32.19 + genpatches +
274 grsec-2.2.0-2.6.32.19-201008131840
275
276 *hardened-sources-2.6.32-r13 (14 Aug 2010)
277
278 14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
279 +hardened-sources-2.6.32-r13.ebuild:
280 Based on vanilla 2.6.32.18 + genpatches +
281 grsecurity-2.2.0-2.6.32.18-201008112233
282
283 03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
284 kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
285
286 01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
287 hardened-sources-2.6.32-r9.ebuild:
288 Stable ppc64. Bug #326885
289
290 *hardened-sources-2.6.32-r12 (24 Jul 2010)
291
292 24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
293 +hardened-sources-2.6.32-r12.ebuild:
294 Parallels fix incorporated into hardened-sources-2.6.34-r1
295
296 *hardened-sources-2.6.34-r1 (24 Jul 2010)
297
298 24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
299 -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
300 Fixes bug #328275
301
302 21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
303 Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
304 on gentoo-dev.
305
306 21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
307 Correct mail address.
308
309 18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
310 -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
311 -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
312 -hardened-sources-2.6.32-r8.ebuild:
313 Removing outdated releases
314
315 17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
316 hardened-sources-2.6.32-r9.ebuild:
317 stable x86, bug 326885
318
319 13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
320 -hardened-sources-2.6.32-r7.ebuild:
321 Removed for security. Bug #325573
322
323 *hardened-sources-2.6.34 (13 Jul 2010)
324
325 13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
326 +hardened-sources-2.6.34.ebuild:
327 Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
328
329 *hardened-sources-2.6.32-r11 (13 Jul 2010)
330
331 13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
332 +hardened-sources-2.6.32-r11.ebuild:
333 New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
334
335 06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
336 Marked stable on AMD64 as requested by Anthony G. Basile
337 <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
338 on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
339
340 *hardened-sources-2.6.32-r10 (30 Jun 2010)
341
342 30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
343 +hardened-sources-2.6.32-r10.ebuild:
344 New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
345
346 29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
347 Added myself to the metadata.xml
348
349 *hardened-sources-2.6.32-r9 (11 Jun 2010)
350
351 11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
352 New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
353
354 *hardened-sources-2.6.32-r8 (01 Jun 2010)
355
356 01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
357 New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
358
359 27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
360 Update SRC_URI to point to mirror network now that the distfile has
361 propagated.
362
363 *hardened-sources-2.6.32-r7 (26 May 2010)
364
365 26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
366 metadata.xml:
367 New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
368 Summers.
369
370 26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
371 Update Manifest for deblob support in kernel-2 eclass.
372
373 31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
374 ppc stable
375
376 29 May 2009; Gordon Malm <gengor@gentoo.org>
377 -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
378 Stable amd64/x86 and remove old.
379
380 *hardened-sources-2.6.29 (25 May 2009)
381
382 25 May 2009; Gordon Malm <gengor@gentoo.org>
383 +hardened-sources-2.6.29.ebuild:
384 Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
385 release candidates.
386
387 *hardened-sources-2.6.28-r9 (25 May 2009)
388
389 25 May 2009; Gordon Malm <gengor@gentoo.org>
390 -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
391 Fix x86-32 boot failure (regression vs. 2.6.28-r7).
392
393 *hardened-sources-2.6.28-r8 (18 May 2009)
394
395 18 May 2009; Gordon Malm <gengor@gentoo.org>
396 +hardened-sources-2.6.28-r8.ebuild:
397 Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
398 and #262862 among others.
399
400 01 May 2009; Gordon Malm <gengor@gentoo.org>
401 hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
402 hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
403 Remove unnecessary mirror://gentoo from SRC_URI.
404
405 05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
406 ppc stable
407
408 30 Mar 2009; Gordon Malm <gengor@gentoo.org>
409 -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
410 Stable amd64/x86 and remove old.
411
412 *hardened-sources-2.6.28-r7 (27 Mar 2009)
413
414 27 Mar 2009; Gordon Malm <gengor@gentoo.org>
415 +hardened-sources-2.6.28-r7.ebuild:
416 Add Linux 2.6.28.9. Fix bugs 263424, 263870.
417
418 22 Mar 2009; Gordon Malm <gengor@gentoo.org>
419 -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
420 -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
421 -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
422 Stable amd64/x86 and remove old versions.
423
424 22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
425 ppc stable
426
427 *hardened-sources-2.6.28-r6 (21 Mar 2009)
428
429 21 Mar 2009; Gordon Malm <gengor@gentoo.org>
430 -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
431 Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
432
433 *hardened-sources-2.6.28-r5 (20 Mar 2009)
434
435 20 Mar 2009; Gordon Malm <gengor@gentoo.org>
436 +hardened-sources-2.6.28-r5.ebuild:
437 Bump genpatches. Grsecurity patch bump, fixes bug #262752.
438
439 20 Mar 2009; Gordon Malm <gengor@gentoo.org>
440 hardened-sources-2.6.28-r4.ebuild:
441 Stable amd64/x86.
442
443 *hardened-sources-2.6.28-r4 (18 Mar 2009)
444
445 18 Mar 2009; Gordon Malm <gengor@gentoo.org>
446 +hardened-sources-2.6.28-r4.ebuild:
447 Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
448 compilation with CPA_DEBUG and more.
449
450 17 Mar 2009; Gordon Malm <gengor@gentoo.org>
451 hardened-sources-2.6.28-r3.ebuild:
452 Quick stable amd64/x86.
453
454 *hardened-sources-2.6.28-r3 (15 Mar 2009)
455
456 15 Mar 2009; Gordon Malm <gengor@gentoo.org>
457 +hardened-sources-2.6.28-r3.ebuild:
458 Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
459
460 14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
461 ppc stable
462
463 13 Mar 2009; Gordon Malm <gengor@gentoo.org>
464 hardened-sources-2.6.28-r2.ebuild:
465 Stable amd64/x86.
466
467 *hardened-sources-2.6.28-r2 (11 Mar 2009)
468
469 11 Mar 2009; Gordon Malm <gengor@gentoo.org>
470 +hardened-sources-2.6.28-r2.ebuild:
471 Version bump bringing in latest grsecurity patch.
472
473 *hardened-sources-2.6.28-r1 (09 Mar 2009)
474
475 09 Mar 2009; Gordon Malm <gengor@gentoo.org>
476 -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
477 Version bump and remove old.
478
479 07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
480 ppc stable
481
482 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
483 hardened-sources-2.6.27-r8.ebuild:
484 Remove amd64 testing keyword, bug 256226.
485
486 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
487 hardened-sources-2.6.27-r8.ebuild:
488 Revert amd64 stable, bug #256226.
489
490 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
491 hardened-sources-2.6.27-r8.ebuild:
492 Stable on amd64/x86.
493
494 24 Feb 2009; Gordon Malm <gengor@gentoo.org>
495 -hardened-sources-2.6.27-r6.ebuild:
496 Remove old 2.6.27 release.
497
498 *hardened-sources-2.6.27-r8 (24 Feb 2009)
499
500 24 Feb 2009; Gordon Malm <gengor@gentoo.org>
501 +hardened-sources-2.6.27-r8.ebuild:
502 Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
503 and probably more.
504
505 04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
506 ppc stable
507
508 *hardened-sources-2.6.28 (25 Jan 2009)
509
510 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
511 +hardened-sources-2.6.28.ebuild:
512 Initial 2.6.28 release.
513
514 *hardened-sources-2.6.27-r7 (25 Jan 2009)
515
516 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
517 +hardened-sources-2.6.27-r7.ebuild:
518 Bump to Linux 2.6.27.13.
519
520 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
521 hardened-sources-2.6.26-r9.ebuild:
522 Stable amd64/x86.
523
524 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
525 -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
526 -hardened-sources-2.6.27-r5.ebuild:
527 Remove problem versions.
528
529 *hardened-sources-2.6.27-r6 (24 Jan 2009)
530
531 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
532 +hardened-sources-2.6.27-r6.ebuild:
533 Revert PaX test29 to test30 changes. Fixes bug 256226.
534
535 *hardened-sources-2.6.27-r5 (24 Jan 2009)
536
537 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
538 +hardened-sources-2.6.27-r5.ebuild:
539 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
540 254843.
541
542 23 Jan 2009; Gordon Malm <gengor@gentoo.org>
543 -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
544 -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
545 Remove problem versions.
546
547 23 Jan 2009; nixnut <nixnut@gentoo.org>
548 hardened-sources-2.6.25-r13.ebuild:
549 ppc stable
550
551 21 Jan 2009; Gordon Malm <gengor@gentoo.org>
552 hardened-sources-2.6.25-r13.ebuild:
553 Fasttrack stable amd64/x86.
554
555 *hardened-sources-2.6.26-r9 (21 Jan 2009)
556
557 21 Jan 2009; Gordon Malm <gengor@gentoo.org>
558 +hardened-sources-2.6.26-r9.ebuild:
559 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
560
561 *hardened-sources-2.6.25-r13 (20 Jan 2009)
562
563 20 Jan 2009; Gordon Malm <gengor@gentoo.org>
564 +hardened-sources-2.6.25-r13.ebuild:
565 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
566
567 20 Jan 2009; nixnut <nixnut@gentoo.org>
568 hardened-sources-2.6.25-r12.ebuild:
569 ppc stable
570
571 17 Jan 2009; Gordon Malm <gengor@gentoo.org>
572 hardened-sources-2.6.25-r12.ebuild:
573 Stable amd64/x86.
574
575 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
576 -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
577 -hardened-sources-2.6.27-r2.ebuild:
578 Clean out old versions.
579
580 *hardened-sources-2.6.27-r4 (14 Jan 2009)
581 *hardened-sources-2.6.26-r8 (14 Jan 2009)
582 *hardened-sources-2.6.25-r12 (14 Jan 2009)
583
584 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
585 +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
586 +hardened-sources-2.6.27-r4.ebuild:
587 2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
588 2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
589 2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
590 grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
591
592 15 Dec 2008; nixnut <nixnut@gentoo.org>
593 hardened-sources-2.6.25-r11.ebuild:
594 Stable on ppc
595
596 09 Dec 2008; Gordon Malm <gengor@gentoo.org>
597 hardened-sources-2.6.25-r11.ebuild:
598 Stable amd64/x86.
599
600 *hardened-sources-2.6.27-r3 (07 Dec 2008)
601
602 07 Dec 2008; Gordon Malm <gengor@gentoo.org>
603 +hardened-sources-2.6.27-r3.ebuild:
604 Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
605 Fixes bug #248754, #249729 and #246607.
606
607 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
608 -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
609 Remove old versions.
610
611 *hardened-sources-2.6.26-r7 (03 Dec 2008)
612 *hardened-sources-2.6.25-r11 (03 Dec 2008)
613
614 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
615 +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
616 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
617 2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
618 Both include many backports from 2.6.27.{6,7} -stable releases.
619
620 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
621 -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
622 Remove versions broken on ARCHes != x86/amd64.
623
624 *hardened-sources-2.6.27-r2 (24 Nov 2008)
625
626 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
627 +hardened-sources-2.6.27-r2.ebuild:
628 Bump to Linux 2.6.27.7 and latest grsecurity patch.
629
630 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
631 -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
632 Remove old versions.
633
634 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
635 hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
636 Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
637
638 16 Nov 2008; nixnut <nixnut@gentoo.org>
639 hardened-sources-2.6.25-r10.ebuild:
640 Stable on ppc
641
642 15 Nov 2008; Gordon Malm <gengor@gentoo.org>
643 hardened-sources-2.6.25-r10.ebuild:
644 Stable amd64/x86.
645
646 *hardened-sources-2.6.26-r6 (12 Nov 2008)
647
648 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
649 +hardened-sources-2.6.26-r6.ebuild:
650 Bump to Linux 2.6.26.8 and fix security bug #245650.
651
652 *hardened-sources-2.6.25-r10 (12 Nov 2008)
653
654 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
655 +hardened-sources-2.6.25-r10.ebuild:
656 Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
657
658 *hardened-sources-2.6.27-r1 (09 Nov 2008)
659
660 09 Nov 2008; Gordon Malm <gengor@gentoo.org>
661 +hardened-sources-2.6.27-r1.ebuild:
662 Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
663
664 *hardened-sources-2.6.27 (04 Nov 2008)
665
666 04 Nov 2008; Gordon Malm <gengor@gentoo.org>
667 +hardened-sources-2.6.27.ebuild:
668 Initial 2.6.27 release.
669
670 *hardened-sources-2.6.26-r5 (03 Nov 2008)
671
672 03 Nov 2008; Gordon Malm <gengor@gentoo.org>
673 -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
674 +hardened-sources-2.6.26-r5.ebuild:
675 2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
676 Clean out some old versions.
677
678 02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
679 Stable on ppc
680
681 30 Oct 2008; Gordon Malm <gengor@gentoo.org>
682 hardened-sources-2.6.25-r9.ebuild:
683 Stable on amd64/x86.
684
685 *hardened-sources-2.6.25-r9 (26 Oct 2008)
686
687 26 Oct 2008; Gordon Malm <gengor@gentoo.org>
688 +hardened-sources-2.6.25-r9.ebuild:
689 Update to Linux 2.6.25.19
690
691 15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
692 Stable on ppc
693
694 *hardened-sources-2.6.26-r4 (14 Oct 2008)
695
696 14 Oct 2008; Gordon Malm <gengor@gentoo.org>
697 -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
698 Update to latest grsecurity patch, fixing building of non-modular kernels.
699
700 *hardened-sources-2.6.26-r3 (12 Oct 2008)
701
702 12 Oct 2008; Gordon Malm <gengor@gentoo.org>
703 hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
704 +hardened-sources-2.6.26-r3.ebuild:
705 2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
706 2.6.26-r1: Removed.
707 2.6.25-r8: Stable amd64/x86.
708
709 *hardened-sources-2.6.25-r8 (09 Oct 2008)
710
711 09 Oct 2008; Gordon Malm <gengor@gentoo.org>
712 -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
713 -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
714 Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
715
716 20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
717 Stable on ppc
718
719 17 Sep 2008; Gordon Malm <gengor@gentoo.org>
720 hardened-sources-2.6.25-r7.ebuild:
721 Stable amd64/x86.
722
723 *hardened-sources-2.6.26-r2 (13 Sep 2008)
724
725 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
726 -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
727 2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
728 PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
729
730 *hardened-sources-2.6.25-r7 (13 Sep 2008)
731
732 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
733 +hardened-sources-2.6.25-r7.ebuild:
734 Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
735
736 10 Sep 2008; Gordon Malm <gengor@gentoo.org>
737 hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
738 hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
739 hardened-sources-2.6.26-r1.ebuild:
740 Update DESCRIPTION and HGPV_URI.
741
742 *hardened-sources-2.6.25-r6 (09 Sep 2008)
743
744 09 Sep 2008; Gordon Malm <gengor@gentoo.org>
745 -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
746 2.6.25-r6: Update to Linux 2.6.25.17.
747 2.6.24-r3: Removed.
748
749 08 Sep 2008; Gordon Malm <gengor@gentoo.org>
750 hardened-sources-2.6.25-r5.ebuild:
751 Stable on amd64/x86
752
753 07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
754 Update my email address.
755
756 31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
757 stable on ppc
758
759 *hardened-sources-2.6.26-r1 (23 Aug 2008)
760 *hardened-sources-2.6.25-r5 (23 Aug 2008)
761
762 23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
763 -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
764 hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
765 +hardened-sources-2.6.26-r1.ebuild:
766 Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
767 security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
768 fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
769 Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
770 (gengor).
771
772 *hardened-sources-2.6.26 (18 Aug 2008)
773 *hardened-sources-2.6.25-r4 (18 Aug 2008)
774
775 18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
776 +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
777 - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
778 to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
779 2.6.25-r2: Removed.
780
781 16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
782 Remove phreak from metadata.xml (#96398)
783
784 *hardened-sources-2.6.25-r3 (31 Jul 2008)
785
786 31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
787 -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
788 +hardened-sources-2.6.25-r3.ebuild:
789 - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
790 fixes, including security bug #231750.
791
792 28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
793 Stable on ppc
794
795 *hardened-sources-2.6.25-r2 (05 Jul 2008)
796
797 05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
798 -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
799 +hardened-sources-2.6.25-r2.ebuild:
800 2.6.23-r4: Stable x86/amd64
801 2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
802 2.6.23-r{11,12}: Removed due to multiple vulns.
803 (gengor & kerframil)
804
805 04 Jul 2008; nixnut <nixnut@gentoo.org>
806 hardened-sources-2.6.23-r13.ebuild:
807 Stable on ppc
808
809 *hardened-sources-2.6.25-r1 (30 Jun 2008)
810
811 30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
812 +hardened-sources-2.6.25-r1.ebuild:
813 2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
814 grsecurity release. 2.6.23-r13: x86/amd64 stable
815
816 *hardened-sources-2.6.25 (17 Jun 2008)
817 *hardened-sources-2.6.24-r3 (17 Jun 2008)
818 *hardened-sources-2.6.23-r13 (17 Jun 2008)
819
820 17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
821 +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
822 * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
823 #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
824 #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
825 2.6.25: Initial 2.6.25 release.
826
827 15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
828 - fasttrack to stable x86/amd64
829
830 11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
831 Fix broken digest for linux-2.6.24.tar.bz2.
832
833 *hardened-sources-2.6.24-r2 (11 May 2008)
834 *hardened-sources-2.6.23-r12 (11 May 2008)
835
836 11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
837 -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
838 +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
839 -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
840 proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
841 220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
842 security bugs 219901, 220691, 220975, 220979, 221123. New
843 genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
844 should be removed as far as I'm concerned, everything else remove due to
845 vulnerable to numerous security bugs or brokeness.
846
847 10 May 2008; nixnut <nixnut@gentoo.org>
848 hardened-sources-2.6.23-r11.ebuild:
849 Stable on ppc
850
851 05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
852 - -r11 stable on x86/amd64
853
854 *hardened-sources-2.6.23-r11 (01 May 2008)
855
856 01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
857 - version bump to fix ulgy linux bugs
858
859 *hardened-sources-2.6.24-r1 (30 Apr 2008)
860
861 30 Apr 2008; Christian Heim <phreak@gentoo.org>
862 +hardened-sources-2.6.24-r1.ebuild:
863 Revision bump (thanks to Kerin and Gordon, again), pulling
864 genpatches-2.6.24-7, solving #219089. Additionally contains further security
865 fixes plus some minor updates.
866
867 *hardened-sources-2.6.23-r10 (30 Apr 2008)
868
869 30 Apr 2008; Christian Heim <phreak@gentoo.org>
870 +hardened-sources-2.6.23-r10.ebuild:
871 Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
872 Additional contains "various other fixes".
873
874 09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
875 Update the longdescription in metadata, thanks to Gordon Malm.
876
877 08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
878 Stable on ppc wrt bug #213255
879
880 07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
881 -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
882 - stable on x86/amd64 per request. Removed obsolete ebuilds
883
884 *hardened-sources-2.6.24 (07 Apr 2008)
885
886 07 Apr 2008; Christian Heim <phreak@gentoo.org>
887 +hardened-sources-2.6.24.ebuild:
888 Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
889 <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
890 for the many contributions and their continued effort in #216612) based on
891 2.6.24 and genpatches-2.6.24-5.
892
893 The current ebuild/patchset contains these things:
894 * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
895 * Introduces bespoke server and workstation oriented security levels
896 * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
897
898 30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
899 Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
900 maintaining it).
901
902 24 Mar 2008; Christian Heim <phreak@gentoo.org>
903 hardened-sources-2.4.35-r2.ebuild:
904 Fixing SRC_URI for 2.4.35-r2.
905
906 *hardened-sources-2.6.23-r9 (22 Mar 2008)
907
908 22 Mar 2008; Christian Heim <phreak@gentoo.org>
909 +hardened-sources-2.6.23-r9.ebuild:
910 * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
911 * Change the default GIDs for some grsecurity options
912 * Revamp the Hardened [Gentoo] security level and make it the default level
913 * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
914 * Fix a recursive lock -- call to capable() within ptrace_attach()
915 * Fix bug that allows audit and iscsi operations to be controlled via netlink
916
917 *hardened-sources-2.6.23-r8 (27 Feb 2008)
918
919 27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
920 - version bump from Kerin Millar bug 210026
921
922 17 Feb 2008; <solar@gentoo.org> metadata.xml,
923 -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
924 -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
925 -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
926 - stable on x86 and remove old ebuilds
927
928 15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
929 - stable on amd64 per request of amd64 lead
930
931 *hardened-sources-2.6.23-r7 (11 Feb 2008)
932
933 11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
934 - version bump from kerin.millar
935 Changes:
936
937 * Bump to genpatches-base-2.6.23-9
938 * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
939 * Disables COMPAT_VDSO in x86/defconfig
940 * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
941
942 25 Jan 2008; Christian Heim <phreak@gentoo.org>
943 -hardened-sources-2.6.22-r8.ebuild:
944 Cleaning up old versions.
945
946 *hardened-sources-2.6.23-r6 (25 Jan 2008)
947
948 25 Jan 2008; Christian Heim <phreak@gentoo.org>
949 -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
950 Revision bump, pulling in the latest genpatches.
951
952 *hardened-sources-2.6.23-r5 (24 Dec 2007)
953
954 24 Dec 2007; Christian Heim <phreak@gentoo.org>
955 hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
956 hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
957 hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
958 Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
959
960 24 Dec 2007; Christian Heim <phreak@gentoo.org>
961 -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
962 -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
963 -hardened-sources-2.6.23-r3.ebuild:
964 Cleaning out some unused, old versions.
965
966 24 Dec 2007; Christian Heim <phreak@gentoo.org>
967 hardened-sources-2.6.23-r4.ebuild:
968 Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
969 in the tree for long, but there isn't much of a difference between this and
970 -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
971
972 *hardened-sources-2.6.23-r4 (23 Dec 2007)
973
974 23 Dec 2007; Christian Heim <phreak@gentoo.org>
975 +hardened-sources-2.6.23-r4.ebuild:
976 Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
977
978 *hardened-sources-2.6.23-r3 (04 Dec 2007)
979
980 04 Dec 2007; Christian Heim <phreak@gentoo.org>
981 +hardened-sources-2.6.23-r3.ebuild:
982 Revision bump, pulling in 2.6.23.9.
983
984 *hardened-sources-2.6.23-r2 (25 Nov 2007)
985
986 25 Nov 2007; Christian Heim <phreak@gentoo.org>
987 +hardened-sources-2.6.23-r2.ebuild:
988 Updated patchset, thanks to solar.
989
990 *hardened-sources-2.6.23-r1 (31 Oct 2007)
991
992 31 Oct 2007; Christian Heim <phreak@gentoo.org>
993 +hardened-sources-2.6.23-r1.ebuild:
994 Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
995
996 29 Oct 2007; <solar@gentoo.org> metadata.xml:
997 - update metadata.xml
998
999 25 Oct 2007; Christian Heim <phreak@gentoo.org>
1000 hardened-sources-2.6.22-r8.ebuild:
1001 Marking 2.6.22-r8 stable on amd64 and x86.
1002
1003 21 Oct 2007; Christian Heim <phreak@gentoo.org>
1004 -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
1005 -hardened-sources-2.6.21-r4.ebuild:
1006 Removing old ebuilds.
1007
1008 *hardened-sources-2.4.35-r2 (21 Oct 2007)
1009
1010 21 Oct 2007; Christian Heim <phreak@gentoo.org>
1011 +hardened-sources-2.4.35-r2.ebuild:
1012 Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
1013 patches.
1014
1015 *hardened-sources-2.6.22-r8 (21 Oct 2007)
1016
1017 21 Oct 2007; Christian Heim <phreak@gentoo.org>
1018 +hardened-sources-2.6.22-r8.ebuild:
1019 Yet another new patch, hopefully fixing the remaining issues we had w/
1020 2.6.22. Candidate for stabling.
1021
1022 *hardened-sources-2.6.23 (13 Oct 2007)
1023
1024 13 Oct 2007; Christian Heim <phreak@gentoo.org>
1025 +hardened-sources-2.6.23.ebuild:
1026 Initial hardened-sources-2.6.23. If people still have problems w/ bug
1027 194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
1028
1029 11 Oct 2007; Christian Heim <phreak@gentoo.org>
1030 hardened-sources-2.6.20-r10.ebuild:
1031 Pulling in yet another new genpatches version, fixing the PWC bug for real.
1032
1033 04 Oct 2007; Christian Heim <phreak@gentoo.org>
1034 -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
1035 Removing old versions.
1036
1037 *hardened-sources-2.6.22-r7 (01 Oct 2007)
1038
1039 01 Oct 2007; Christian Heim <phreak@gentoo.org>
1040 +hardened-sources-2.6.22-r7.ebuild:
1041 Revision bump, pulling in a newer patch. Should fix #194276.
1042
1043 30 Sep 2007; Christian Heim <phreak@gentoo.org>
1044 hardened-sources-2.6.20-r10.ebuild:
1045 Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
1046 Mike Doty).
1047
1048 *hardened-sources-2.6.22-r6 (26 Sep 2007)
1049
1050 26 Sep 2007; Christian Heim <phreak@gentoo.org>
1051 +hardened-sources-2.6.22-r6.ebuild:
1052 Revision bump, grabbing up till Linux 2.6.22.9.
1053
1054 24 Sep 2007; Christian Heim <phreak@gentoo.org>
1055 -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
1056 Cleaning up further.
1057
1058 *hardened-sources-2.6.20-r10 (24 Sep 2007)
1059
1060 24 Sep 2007; Christian Heim <phreak@gentoo.org>
1061 -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
1062 +hardened-sources-2.6.20-r10.ebuild:
1063 Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
1064 revisions.
1065
1066 *hardened-sources-2.6.22-r5 (22 Sep 2007)
1067
1068 22 Sep 2007; Christian Heim <phreak@gentoo.org>
1069 +hardened-sources-2.6.22-r5.ebuild:
1070 Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
1071
1072 17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1073 Removing johnm from metadata.xml (see #186467 for reference).
1074
1075 *hardened-sources-2.6.22-r4 (17 Sep 2007)
1076
1077 17 Sep 2007; Christian Heim <phreak@gentoo.org>
1078 +hardened-sources-2.6.22-r4.ebuild:
1079 Revision bump, hopefully fixing all those weird PAX failures.
1080
1081 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1082 Updating the metadata.xml.
1083
1084 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
1085 Removing tocharian from metadata due to his retirement (see #71718 for
1086 reference).
1087
1088 *hardened-sources-2.6.20-r9 (30 Aug 2007)
1089
1090 30 Aug 2007; Christian Heim <phreak@gentoo.org>
1091 +hardened-sources-2.6.20-r9.ebuild:
1092 Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
1093
1094 29 Aug 2007; Christian Heim <phreak@gentoo.org>
1095 -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
1096 -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
1097 -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
1098 -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
1099 -hardened-sources-2.6.22-r2.ebuild:
1100 Removing some redundant versions.
1101
1102 *hardened-sources-2.4.35-r1 (29 Aug 2007)
1103
1104 29 Aug 2007; Christian Heim <phreak@gentoo.org>
1105 +hardened-sources-2.4.35-r1.ebuild:
1106 Revision bump, new grsecurity patch.
1107
1108 *hardened-sources-2.6.20-r8 (26 Aug 2007)
1109
1110 26 Aug 2007; Christian Heim <phreak@gentoo.org>
1111 +hardened-sources-2.6.20-r8.ebuild:
1112 Revision bump for Linux 2.6.20.17.
1113
1114 *hardened-sources-2.6.22-r3 (22 Aug 2007)
1115
1116 22 Aug 2007; Christian Heim <phreak@gentoo.org>
1117 +hardened-sources-2.6.22-r3.ebuild:
1118 Revision bump for Linux 2.6.22.4.
1119
1120 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1121 hardened-sources-2.6.22-r2.ebuild:
1122 Updated patchset, to fix the alignment against 2.6.22.3.
1123
1124 *hardened-sources-2.6.22-r2 (16 Aug 2007)
1125
1126 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1127 +hardened-sources-2.6.22-r2.ebuild:
1128 Revision bump for Linux 2.6.22.3.
1129
1130 *hardened-sources-2.4.35 (16 Aug 2007)
1131
1132 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1133 +hardened-sources-2.4.35.ebuild:
1134 Version bump, initial version for Linux 2.4.35.
1135
1136 *hardened-sources-2.6.21-r4 (16 Aug 2007)
1137
1138 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1139 +hardened-sources-2.6.21-r4.ebuild:
1140 Revision bump for Linux 2.6.21.6.
1141
1142 *hardened-sources-2.6.20-r7 (16 Aug 2007)
1143
1144 16 Aug 2007; Christian Heim <phreak@gentoo.org>
1145 +hardened-sources-2.6.20-r7.ebuild:
1146 Revision bump for Linux 2.6.20.16.
1147
1148 *hardened-sources-2.6.22-r1 (13 Aug 2007)
1149
1150 13 Aug 2007; Christian Heim <phreak@gentoo.org>
1151 +hardened-sources-2.6.22-r1.ebuild:
1152 Yet another revision bump.
1153
1154 *hardened-sources-2.6.22 (10 Aug 2007)
1155
1156 10 Aug 2007; Christian Heim <phreak@gentoo.org>
1157 +hardened-sources-2.6.22.ebuild:
1158 Initial release for 2.6.22. If you are using hardened-sources on a desktop
1159 machine (P4 or newer), be aware you might need to disable
1160 CONFIG_PAX_PAGEEXEC.
1161
1162 04 Aug 2007; Christian Heim <phreak@gentoo.org>
1163 hardened-sources-2.6.20-r6.ebuild:
1164 Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
1165 2.6.20.15.
1166
1167 10 Jul 2007; Christian Heim <phreak@gentoo.org>
1168 hardened-sources-2.6.20-r5.ebuild:
1169 Marking hardened-sources-2.6.20-r5 stable on ppc.
1170
1171 10 Jul 2007; Christian Heim <phreak@gentoo.org>
1172 -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
1173 Cleanup.
1174
1175 *hardened-sources-2.6.20-r6 (08 Jul 2007)
1176
1177 08 Jul 2007; Christian Heim <phreak@gentoo.org>
1178 +hardened-sources-2.6.20-r6.ebuild:
1179 Revision bump, grabbing yet another stable release.
1180
1181 17 Jun 2007; Christian Heim <phreak@gentoo.org>
1182 -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
1183 -hardened-sources-2.6.21-r2.ebuild:
1184 Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
1185 alpha stable KEYWORD by mistake.
1186
1187 17 Jun 2007; Christian Heim <phreak@gentoo.org>
1188 hardened-sources-2.6.20-r5.ebuild:
1189 Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
1190 genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
1191
1192 *hardened-sources-2.6.21-r3 (12 Jun 2007)
1193
1194 12 Jun 2007; Christian Heim <phreak@gentoo.org>
1195 +hardened-sources-2.6.21-r3.ebuild:
1196 Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
1197 of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
1198 love.
1199
1200 *hardened-sources-2.6.20-r5 (11 Jun 2007)
1201
1202 11 Jun 2007; Christian Heim <phreak@gentoo.org>
1203 +hardened-sources-2.6.20-r5.ebuild:
1204 Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1205 of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1206 love.
1207
1208 *hardened-sources-2.4.34.5 (11 Jun 2007)
1209
1210 11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1211 +hardened-sources-2.4.34.5.ebuild:
1212 added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1213
1214 30 May 2007; Christian Heim <phreak@gentoo.org>
1215 -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1216 Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1217 stale ebuild(s).
1218
1219 30 May 2007; Christian Heim <phreak@gentoo.org>
1220 -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1221 -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1222 -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1223 Doing some cleanups, remove stale ebuilds.
1224
1225 26 May 2007; Christian Heim <phreak@gentoo.org>
1226 hardened-sources-2.6.21-r2.ebuild:
1227 Fixing the grsecurity patch, had one '};' too much.
1228
1229 *hardened-sources-2.6.21-r2 (26 May 2007)
1230
1231 26 May 2007; Christian Heim <phreak@gentoo.org>
1232 -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1233 +hardened-sources-2.6.21-r2.ebuild:
1234 Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1235 grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1236
1237 *hardened-sources-2.6.20-r4 (26 May 2007)
1238
1239 26 May 2007; Christian Heim <phreak@gentoo.org>
1240 -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1241 Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1242 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1243
1244 15 May 2007; Christian Heim <phreak@gentoo.org>
1245 hardened-sources-2.6.20-r3.ebuild:
1246 Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1247 introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1248 grsecurity patch fail in that exact same hunk.
1249
1250 *hardened-sources-2.6.20-r3 (15 May 2007)
1251
1252 15 May 2007; Christian Heim <phreak@gentoo.org>
1253 +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1254 Revision bump, incorporating Linux 2.6.20.11.
1255
1256 *hardened-sources-2.6.21-r1 (11 May 2007)
1257
1258 11 May 2007; Christian Heim <phreak@gentoo.org>
1259 +hardened-sources-2.6.21-r1.ebuild:
1260 Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1261 mentioned in #177234.
1262
1263 07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1264 files/digest-hardened-sources-2.6.21, Manifest:
1265 Fix Manifest/digest for linux-2.6.21.tar.bz2
1266
1267 06 May 2007; Christian Heim <phreak@gentoo.org>
1268 hardened-sources-2.6.21.ebuild:
1269 Bumping the hardened-patches version, needed for the fix for #177234.
1270
1271 *hardened-sources-2.6.21 (02 May 2007)
1272
1273 02 May 2007; Christian Heim <phreak@gentoo.org>
1274 +hardened-sources-2.6.21.ebuild:
1275 Version bump, Linux 2.6.21-hardened.
1276
1277 29 Apr 2007; Christian Heim <phreak@gentoo.org>
1278 hardened-sources-2.6.20-r2.ebuild:
1279 Adding ~ia64 on Ned's request.
1280
1281 29 Apr 2007; Christian Heim <phreak@gentoo.org>
1282 hardened-sources-2.6.20-r2.ebuild:
1283 Fixing the included grsecurity patch, wasn't alligning due to the Index:
1284 header line(s).
1285
1286 29 Apr 2007; Christian Heim <phreak@gentoo.org>
1287 hardened-sources-2.6.20-r2.ebuild:
1288 Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1289
1290 *hardened-sources-2.6.20-r2 (10 Apr 2007)
1291
1292 10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1293 +hardened-sources-2.6.20-r2.ebuild:
1294 Version bump, on behalf of phreak
1295
1296 *hardened-sources-2.6.20-r1 (04 Apr 2007)
1297
1298 04 Apr 2007; Christian Heim <phreak@gentoo.org>
1299 +hardened-sources-2.6.20-r1.ebuild:
1300 Revision bump, grabbing a newer grsecurity snapshot.
1301
1302 *hardened-sources-2.6.20 (25 Mar 2007)
1303
1304 25 Mar 2007; Christian Heim <phreak@gentoo.org>
1305 +hardened-sources-2.6.20.ebuild:
1306 Finally a hardened-sources version for 2.6.20; many people have been waiting
1307 for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1308 testbox.
1309
1310 16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1311 hardened-sources-2.6.18-r6.ebuild:
1312 Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1313
1314 *hardened-sources-2.6.18-r6 (16 Mar 2007)
1315
1316 16 Mar 2007; Christian Heim <phreak@gentoo.org>
1317 -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1318 Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1319 yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1320 supposed to be.
1321
1322 06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1323 Fixing the Manifest, the previous one was broken (as in still had the
1324 deleted ebuild in it).
1325
1326 06 Mar 2007; Christian Heim <phreak@gentoo.org>
1327 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1328 +hardened-sources-2.6.18-r5.ebuild:
1329 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1330 Linux 2.6.18.8. Also cleaning up the older version.
1331
1332 *hardened-sources-2.6.18-r5 (06 Mar 2007)
1333
1334 06 Mar 2007; Christian Heim <phreak@gentoo.org>
1335 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1336 +hardened-sources-2.6.18-r5.ebuild:
1337 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1338 Linux 2.6.18.8. Also cleaning up the older version.
1339
1340 24 Feb 2007; Christian Heim <phreak@gentoo.org>
1341 -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1342 -hardened-sources-2.6.19-r5.ebuild:
1343 Removing some of the old version, that didn't work.
1344
1345 *hardened-sources-2.6.19-r6 (12 Feb 2007)
1346
1347 12 Feb 2007; Christian Heim <phreak@gentoo.org>
1348 +hardened-sources-2.6.19-r6.ebuild:
1349 Revision bump, including a new grsec version fixing #166235.
1350
1351 *hardened-sources-2.4.34 (24 Jan 2007)
1352
1353 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1354 Manifest:
1355 updating Manifest with checksums of new tarball and ebuild
1356
1357 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1358 +hardened-sources-2.4.34.ebuild:
1359 I added new hardened sources 2.4 update, this is a critical path
1360 security bugfix - all users of h-s are strongly advised
1361 to update their existing hardened sources to this version.
1362 It contains a fix for a kernel vulnerability that is pertaining
1363 to the PaX changes to virtual memory management, possibly leading
1364 to a local kernel exploit ... see grsecurity.net forums and homepage
1365
1366 23 Jan 2007; Christian Heim <phreak@gentoo.org>
1367 files/digest-hardened-sources-2.6.19-r5, Manifest:
1368 Fixing the patch-tarball digest.
1369
1370 *hardened-sources-2.6.19-r5 (23 Jan 2007)
1371
1372 23 Jan 2007; Christian Heim <phreak@gentoo.org>
1373 +hardened-sources-2.6.19-r5.ebuild:
1374 Revision bump, closing the recently discovered PaX expand_stack()
1375 vulnerability.
1376
1377 *hardened-sources-2.6.19-r4 (14 Jan 2007)
1378
1379 14 Jan 2007; Christian Heim <phreak@gentoo.org>
1380 +hardened-sources-2.6.19-r4.ebuild:
1381 Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1382 dropping the randomized PID feature.
1383
1384 11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1385 hardened-sources-2.4.33.4.ebuild:
1386 stable x86, bug #161171
1387
1388 *hardened-sources-2.6.19-r3 (27 Dec 2006)
1389
1390 27 Dec 2006; Christian Heim <phreak@gentoo.org>
1391 -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1392 Revision bump for bug #157186 and #158786.
1393
1394 *hardened-sources-2.6.18-r4 (27 Dec 2006)
1395
1396 27 Dec 2006; Christian Heim <phreak@gentoo.org>
1397 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1398 Revision bump for bug #157186.
1399
1400 *hardened-sources-2.6.19-r2 (23 Dec 2006)
1401
1402 23 Dec 2006; Christian Heim <phreak@gentoo.org>
1403 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1404 Revision bump to pull in genpatches-2.6.19-3 for #157186.
1405
1406 17 Dec 2006; Christian Heim <phreak@gentoo.org>
1407 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1408 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1409 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1410 hardened-sources-2.6.19-r1.ebuild:
1411 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1412 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1413
1414 *hardened-sources-2.4.33.4 (17 Dec 2006)
1415
1416 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1417 +hardened-sources-2.4.33.4.ebuild:
1418 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1419 and quilting
1420
1421 *hardened-sources-2.6.19-r1 (14 Dec 2006)
1422
1423 14 Dec 2006; Christian Heim <phreak@gentoo.org>
1424 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1425 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1426 for reporting).
1427
1428 *hardened-sources-2.6.19 (13 Dec 2006)
1429
1430 13 Dec 2006; Christian Heim <phreak@gentoo.org>
1431 +hardened-sources-2.6.19.ebuild:
1432 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1433 Brad for providing that prompt update.
1434
1435 *hardened-sources-2.6.18-r3 (13 Dec 2006)
1436
1437 13 Dec 2006; Christian Heim <phreak@gentoo.org>
1438 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1439 +hardened-sources-2.6.18-r3.ebuild:
1440 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1441 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1442
1443 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1444 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1445
1446 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1447 Stable on ppc wrt bug 157356
1448
1449 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1450 hardened-sources-2.6.18.ebuild:
1451 stable x86, bug #157356
1452
1453 *hardened-sources-2.6.18-r2 (06 Dec 2006)
1454
1455 06 Dec 2006; Christian Heim <phreak@gentoo.org>
1456 +hardened-sources-2.6.18-r2.ebuild:
1457 Revision bump, including 2.6.18.5 (via genpatches) and
1458 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1459 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1460 redesign.
1461
1462 06 Dec 2006; Christian Heim <phreak@gentoo.org>
1463 hardened-sources-2.6.18.ebuild:
1464 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1465 of Mike Doty).
1466
1467 *hardened-sources-2.6.18-r1 (23 Nov 2006)
1468
1469 23 Nov 2006; Christian Heim <phreak@gentoo.org>
1470 +hardened-sources-2.6.18-r1.ebuild:
1471 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1472
1473 *hardened-sources-2.6.18 (11 Nov 2006)
1474
1475 11 Nov 2006; Christian Heim <phreak@gentoo.org>
1476 +hardened-sources-2.6.18.ebuild:
1477 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1478
1479 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1480 - mark amd64 stable also. bug #151877
1481
1482 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1483 - mark 2.6.17-r1 stable
1484
1485 27 Aug 2006; Christian Heim <phreak@gentoo.org>
1486 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1487 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1488
1489 *hardened-sources-2.6.17-r1 (26 Aug 2006)
1490
1491 26 Aug 2006; Christian Heim <phreak@gentoo.org>
1492 +hardened-sources-2.6.17-r1.ebuild:
1493 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1494 grsecurity patch.
1495
1496 *hardened-sources-2.6.17 (17 Aug 2006)
1497
1498 17 Aug 2006; Christian Heim <phreak@gentoo.org>
1499 +hardened-sources-2.6.17.ebuild:
1500 Bumping the hardened-sources-2.6 series to 2.6.17, using
1501 genpatches-2.6.17-6.base.
1502
1503 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1504 - stable on x86 and amd64
1505
1506 *hardened-sources-2.6.16-r11 (15 Jul 2006)
1507
1508 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1509 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1510 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1511 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1512 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1513 crusty ebuilds
1514
1515 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1516 hardened-sources-2.6.16-r10.ebuild:
1517 marking stable on x86 and amd64
1518
1519 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1520 - 2.4.32-r6 stable on x86. RSBAC state unknown
1521
1522 *hardened-sources-2.4.32-r7 (10 Jul 2006)
1523
1524 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1525 +hardened-sources-2.4.32-r7.ebuild:
1526 Bump PaX for RSBAC to test-17
1527
1528 *hardened-sources-2.6.16-r9 (03 Jul 2006)
1529
1530 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1531 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1532 hardened-sources-2.6.16 bump to latest -base.
1533
1534 *hardened-sources-2.4.32-r6 (30 Jun 2006)
1535
1536 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1537 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1538 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1539 sysctl controlable resource logging
1540
1541 *hardened-sources-2.6.16-r7 (05 Jun 2006)
1542
1543 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1544 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1545 push new 2.6.16 release in preparation for stable
1546
1547 22 May 2006; <solar@gentoo.org> :
1548 - redigest bug 134002
1549
1550 *hardened-sources-2.4.32-r5 (16 May 2006)
1551
1552 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1553 +hardened-sources-2.4.32-r5.ebuild:
1554 Fixes rsbac common patching (new patch in new -r5 patchset)
1555
1556 *hardened-sources-2.4.32-r4 (13 May 2006)
1557
1558 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1559 +hardened-sources-2.4.32-r4.ebuild:
1560 - security bumps
1561
1562 *hardened-sources-2.6.16-r6 (03 May 2006)
1563
1564 03 May 2006; John Mylchreest <johnm@gentoo.org>
1565 +hardened-sources-2.6.16-r6.ebuild:
1566 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1567
1568 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1569 hardened-sources-2.6.14-r8.ebuild:
1570 fix x86_64 build problem, this will delay the digest issue again for a short
1571 while but it will sort itself out
1572
1573 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1574 hardened-sources-2.6.14-r8.ebuild:
1575 bump hardened patchset
1576
1577 27 Apr 2006; Alec Warner <antarus@gentoo.org>
1578 files/digest-hardened-sources-2.4.32-r2,
1579 files/digest-hardened-sources-2.4.32-r3,
1580 files/digest-hardened-sources-2.6.14-r8, Manifest:
1581 Fixing duff SHA256 digests: Bug # 131293
1582
1583 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1584
1585 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1586 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1587 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1588 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1589 cleanup of old uneccessary sources
1590
1591 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1592 fix digest
1593
1594 *hardened-sources-2.6.14-r8 (20 Apr 2006)
1595
1596 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1597 +hardened-sources-2.6.14-r8.ebuild:
1598 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1599
1600 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1601 Turning on gpg-signing again, and recomitting
1602
1603 *hardened-sources-2.6.16-r4 (20 Apr 2006)
1604
1605 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1606 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1607 +hardened-sources-2.6.16-r4.ebuild:
1608 Fix numerous security vulns
1609
1610 *hardened-sources-2.4.32-r3 (16 Apr 2006)
1611
1612 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1613 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1614 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1615 - security bump for bug #112791. Removed old ebuilds
1616
1617 *hardened-sources-2.6.16-r3 (15 Apr 2006)
1618
1619 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1620 +hardened-sources-2.6.16-r3.ebuild:
1621 Removing silly localversion which I missed
1622
1623 *hardened-sources-2.6.14-r7 (14 Apr 2006)
1624
1625 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1626 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1627 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1628
1629 *hardened-sources-2.6.16-r2 (13 Apr 2006)
1630
1631 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1632 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1633 +hardened-sources-2.6.16-r2.ebuild:
1634 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1635 labels, dropping USERGROUP define fixes, since these were merged mainstream.
1636
1637 *hardened-sources-2.6.16-r1 (11 Apr 2006)
1638
1639 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1640 +hardened-sources-2.6.16-r1.ebuild:
1641 Bumping to include ppc build fix and 2.6.16.3
1642
1643 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1644 hardened-sources-2.6.14-r6.ebuild:
1645 Stable on x86; bug #127718
1646
1647 *hardened-sources-2.6.16 (31 Mar 2006)
1648
1649 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1650 +hardened-sources-2.6.16.ebuild:
1651 Bumping to new version of grsec, and kernel base. New squashfs. Based on
1652 2.6.16.1
1653
1654 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1655 hardened-sources-2.6.14-r6.ebuild:
1656 Stable on amd64, bug 127718.
1657
1658 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1659 Stable on ppc. Bug #127718
1660
1661 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1662 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1663 -hardened-sources-2.6.14-r4.ebuild:
1664 Cleanup.
1665
1666 *hardened-sources-2.6.14-r6 (15 Mar 2006)
1667
1668 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1669 +hardened-sources-2.6.14-r6.ebuild:
1670 Fixes grsec policy recreation bug and adds a
1671 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1672
1673 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1674 - stable on x86
1675
1676 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1677 hardened-sources-2.6.14-r5.ebuild:
1678 Stable on ppc.
1679
1680 *hardened-sources-2.6.14-r5 (01 Feb 2006)
1681
1682 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1683 +hardened-sources-2.6.14-r5.ebuild:
1684 fixing every known exploit
1685
1686 *hardened-sources-2.4.32-r2 (26 Jan 2006)
1687
1688 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1689 +hardened-sources-2.4.32-r2.ebuild:
1690 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1691
1692 *hardened-sources-2.6.14-r4 (12 Jan 2006)
1693
1694 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1695 - version bump for new genpatches which fix up a few sec holes
1696
1697 *hardened-sources-2.4.32-r1 (05 Jan 2006)
1698
1699 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1700 - revision bump to add misc vital linux kernel security patches.
1701
1702 *hardened-sources-2.6.14-r3 (30 Dec 2005)
1703
1704 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1705 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1706 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1707
1708 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1709 hardened-sources-2.6.14-r2.ebuild:
1710 making x86 & amd64 stable following testing.
1711
1712 *hardened-sources-2.6.14-r2 (27 Dec 2005)
1713
1714 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1715 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1716 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1717 network hooks.
1718
1719 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1720 hardened-sources-2.6.14-r1.ebuild:
1721 bumping to stable early for sec fix on x86 & amd64
1722
1723 *hardened-sources-2.6.14-r1 (05 Dec 2005)
1724
1725 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1726 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1727 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1728
1729 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1730 - stable on x86 security bug #114227 CAN-2005-3257
1731
1732 *hardened-sources-2.4.32 (19 Nov 2005)
1733
1734 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1735 +hardened-sources-2.4.32.ebuild:
1736 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1737 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1738 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1739 rsbac >> /etc/portage/package.use)
1740
1741 *hardened-sources-2.6.14 (14 Nov 2005)
1742
1743 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1744 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1745 Bumping 2.6 series to 2.6.14.2
1746
1747 *hardened-sources-2.6.13-r2 (20 Oct 2005)
1748
1749 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1750 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1751 +hardened-sources-2.6.13-r2.ebuild:
1752 Fixes minor build error in ppc.
1753
1754 *hardened-sources-2.6.13-r1 (17 Oct 2005)
1755
1756 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1757 +hardened-sources-2.6.13-r1.ebuild:
1758 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1759 2.6.13.4, fixes some major amd64 stability problems.
1760
1761 *hardened-sources-2.6.13 (16 Sep 2005)
1762
1763 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1764 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1765 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1766 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1767 users should test this thoroughly.
1768
1769 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1770 - stable on x86
1771
1772 *hardened-sources-2.6.11-r15 (27 Jun 2005)
1773
1774 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1775 +hardened-sources-2.6.11-r15.ebuild:
1776 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1777 grsec redefining curr_ip struct.
1778
1779 *hardened-sources-2.4.31 (20 Jun 2005)
1780
1781 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1782 initial import of 2.4.31 tree
1783
1784 *hardened-sources-2.6.11-r14 (14 Jun 2005)
1785
1786 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1787 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1788 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1789 naming scheme to abide by genpatches
1790
1791 *hardened-sources-2.6.11-r13 (18 May 2005)
1792
1793 18 May 2005; John Mylchreest <johnm@gentoo.org>
1794 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1795 Managed to mangle the Makefile patch from grsec, to miss out the grsec
1796 target. sorry about that. Fixes bug #93022
1797
1798 *hardened-sources-2.6.11-r12 (17 May 2005)
1799
1800 17 May 2005; John Mylchreest <johnm@gentoo.org>
1801 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1802 +hardened-sources-2.6.11-r12.ebuild:
1803 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1804 merges in genpatches-base
1805
1806 *hardened-sources-2.6.11-r12 (17 May 2005)
1807
1808 17 May 2005; John Mylchreest <johnm@gentoo.org>
1809 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1810 +hardened-sources-2.6.11-r12.ebuild:
1811 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1812 merges in genpatches-base
1813
1814 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1815 -files/2.4.27-cmdline-race.patch,
1816 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1817 -files/2.4.28-grsec-binfmt_a.out.patch,
1818 -files/2.4.28-grsec-cmdline-race.patch,
1819 -files/2.4.28-selinux-binfmt_a.out.patch,
1820 -files/2.4.28-selinux-cmdline-race.patch,
1821 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1822 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1823 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1824 cleanup..
1825
1826 *hardened-sources-2.4.30-r1 (21 Apr 2005)
1827
1828 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1829 - disable aout by default
1830
1831 *hardened-sources-2.4.30 (18 Apr 2005)
1832
1833 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1834 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1835 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1836 use
1837
1838 *hardened-sources-2.4.29 (30 Mar 2005)
1839
1840 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1841 +hardened-sources-2.4.29.ebuild:
1842 New hardened-patches-2.4-29.0 patchball.
1843 Removed SELinux support, upgraded GRSecurity to 2.1.4.
1844
1845 *hardened-sources-2.4.28-r5 (06 Mar 2005)
1846
1847 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1848 +hardened-sources-2.4.28-r5.ebuild:
1849 Added a fix for a PaX vulnerability.
1850
1851 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1852 hardened-sources-2.4.28-r4.ebuild:
1853 Stable on x86
1854
1855 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1856 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1857 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1858 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1859 - fixed/added RDEPEND= in all kernel-2 ebuilds
1860
1861 *hardened-sources-2.4.28-r4 (21 Jan 2005)
1862
1863 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1864 +hardened-sources-2.4.28-r4.ebuild:
1865 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1866 backport of neighbour hash updates.
1867
1868 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1869 hardened-sources-2.4.28-r3.ebuild:
1870 Stable on x86
1871
1872 *hardened-sources-2.6.10-r3 (20 Jan 2005)
1873
1874 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1875 +hardened-sources-2.6.10-r3.ebuild:
1876 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1877 in 2005.0
1878
1879 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1880 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1881 hardened-sources-2.4.28-r2.ebuild:
1882 Mark stable on x86
1883
1884 *hardened-sources-2.4.28-r3 (17 Jan 2005)
1885
1886 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1887 +hardened-sources-2.4.28-r3.ebuild:
1888 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1889
1890 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1891 hardened-sources-2.4.28.ebuild:
1892 Mark stable on x86.
1893
1894 *hardened-sources-2.4.28-r2 (13 Jan 2005)
1895
1896 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1897 +hardened-sources-2.4.28-r2.ebuild:
1898 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1899 Mazinger for grsecurity patches as well.
1900
1901 *hardened-sources-2.4.28-r1 (23 Dec 2004)
1902
1903 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1904 Security bump. Thank tocharian for rolling a new patchset...
1905
1906 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1907 +files/2.4.28-grsec-cmdline-race.patch,
1908 +files/2.4.28-selinux-binfmt_a.out.patch,
1909 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1910 - Round up remaining security patches that appear to be missing in 2.4.28. -
1911 PaX standalone updated to current. hgpv=28.1
1912
1913 *hardened-sources-2.4.28 (28 Nov 2004)
1914
1915 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1916 security bump. Thank tocharian for rolling a new patchset
1917
1918 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1919
1920 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1921 +hardened-sources-2.4.27-r3.ebuild:
1922 Applies the new 2.4-27.2 patchball which updates
1923 GRSecurity to the 2.0.1 version.
1924
1925 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1926
1927 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1928 +hardened-sources-2.4.27-r2.ebuild:
1929 Version bump.
1930 This version uses the new 2.4-27.1 patchball which updates
1931 both the SELinux PaX hooks patch and the SELinux headers.
1932
1933 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1934
1935 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1936 +hardened-sources-2.4.27-r1.ebuild,
1937 -hardened-sources-2.4.27.ebuild,
1938 +files/2.4.27-cmdline-race.patch:
1939 Version bump, fix for cmdline race. See bug #59905.
1940
1941 *hardened-sources-2.4.26-r6 (09 Aug 2004)
1942
1943 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1944 +hardened-sources-2.4.26-r6.ebuild,
1945 -hardened-sources-2.4.26-r5.ebuild,
1946 -hardened-sources-2.4.26-r4.ebuild,
1947 +files/2.4.26-cmdline-race.patch:
1948 Version bump, fix for cmdline race. See bug #59905.
1949
1950 *hardened-sources-2.4.27 (08 Aug 2004)
1951
1952 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1953 +hardened-sources-2.4.27.ebuild,
1954 +files/2.4.27-CAN-2004-0394.patch:
1955 Ported the patchball to the 2.4.27 kernel version.
1956
1957 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1958
1959 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1960 +hardened-sources-2.4.26-r5.ebuild:
1961 Updated to use the new hardened-patches-2.4-26.1 patchball.
1962 It adds the following features:
1963 - Squashfs
1964 - Ebtables
1965 - Netdev random (core+drivers)
1966 - Watchdog Timer (WDT) fix.
1967
1968 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1969
1970 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1971 +hardened-sources-2.4.26-r4.ebuild,
1972 +files/2.4.26-CAN-2004-0415.patch,
1973 -hardened-sources-2.4.26-3:
1974 Version bump, fix for CAN 0415, see bug #59378.
1975
1976 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1977
1978 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1979 +hardened-sources-2.4.26-r3.ebuild,
1980 +files/2.4.26-CAN-2004-0497.patch,
1981 -hardened-sources-2.4.26-r2.ebuild:
1982 Version bump, fixed CAN 0497, see bug #56171.
1983
1984 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1985
1986 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1987 +hardened-sources-2.4.26-r2.ebuild,
1988 +files/2.4.26-CAN-2004-0495.patch,
1989 +files/2.4.26-CAN-2004-0535.patch,
1990 -hardened-sources-2.4.26-r1.ebuild:
1991 Fixes for both CAN 0495 and 0535, see bug #54976
1992
1993 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1994 hardened-sources-2.4.26-r1.ebuild:
1995 QA - fix use invocation
1996
1997 *hardened-sources-2.4.26-r1 (22 June 2004)
1998
1999 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
2000 +hardened-sources-2.4.26-r1.ebuild,
2001 +files/2.4.26-CAN-2004-0394.patch,
2002 +files/2.4.26-signal-race.patch,
2003 -hardened-sources-2.4.26.ebuild,
2004 -hardened-sources-2.4.24-r3.ebuild:
2005 Version bump for the CAN-2004-0394 issue and bug #53804
2006 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
2007
2008
2009 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
2010 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
2011 Masked hardened-sources-2.4.26.ebuild broken for ppc
2012
2013 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
2014 hardened-sources-2.4.24-r3.ebuild:
2015 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
2016
2017 *hardened-sources-2.4.26 (29 May 2004)
2018
2019 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
2020 +hardened-sources-2.4.26.ebuild:
2021 Updated hardened-sources for the 2.4.26 kernel
2022 Removed broken components, updated almost everything.
2023
2024 *hardened-sources-2.4.24-r3 (17 Apr 2004)
2025
2026 17 Apr 2004; <plasmaroo@gentoo.org>
2027 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
2028 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
2029 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
2030 +hardened-sources-2.4.24-r3.ebuild:
2031 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
2032 vulnerabilities. Old revisions removed.
2033
2034 *hardened-sources-2.4.24-r2 (15 Apr 2004)
2035
2036 15 Apr 2004; <plasmaroo@gentoo.org>
2037 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
2038 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
2039 Version bump for the CAN-2004-0109 issue; bug #47881.
2040
2041 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
2042 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
2043 Add eutils to inherit.
2044
2045 *hardened-sources-2.4.24-r1 (19 Feb 2004)
2046
2047 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
2048 files/hardened-sources-2.4.24.munmap.patch:
2049 Added the patch for the mremap/munmap vulnerability. Bug #42024.
2050
2051 *hardened-sources-2.4.24 (06 Feb 2004)
2052
2053 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
2054 hardened-sources-2.4.24.ebuild:
2055 Version bump, updated most of the components.
2056 This release includes the following:
2057
2058 - Hardened security
2059 - Netfilter patch-o-matic 20031219
2060 - FreeSWAN 2.04 & x509 1.4.8
2061 - EVMS 2.2.2
2062 - XFS 1.3.1
2063 - cryptoloop jari
2064 - grsecurity 2.0-rc4
2065 - SELinux
2066 - PaX 200402060000
2067 - PaX Obscurity 200308302223
2068 - Others...
2069
2070 Neither -ck nor systrace are included anymore.
2071
2072 *hardened-sources-2.4.22-r2 (05 Jan 2004)
2073
2074 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
2075 hardened-sources-2.4.22-r2.ebuild:
2076 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
2077
2078 *hardened-sources-2.4.22-r1 (02 Dec 2003)
2079
2080 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
2081 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
2082
2083 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
2084 hardened-sources-2.4.22-r1.ebuild:
2085 Version bump for the 'do_brk' vulnerability.
2086
2087 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
2088 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
2089 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
2090 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
2091 Fix the 'do_brk' vulnerability.
2092
2093 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
2094 hardened-sources-2.4.22.ebuild:
2095 - Removed the src_install() portion for SELinux flask
2096 components. These are no longer handled in the kernel
2097 so this code was not necessary.
2098
2099 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
2100 New 2.4.22 based hardened-sources thanks to
2101 Phil West <p.west@computer.org>.
2102
2103 These sources include:
2104 - New SELinux API
2105 - Updated CK-base
2106 - Updated GRSec
2107 - Systrace
2108 - SuperFreeS/WAN 1.99.8
2109 - Propolice kernel build support
2110 - EVMS
2111 - Other various security related patches
2112
2113 *hardened-sources-2.4.21 (14 Sep 2003)
2114
2115 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
2116 Updated hardened-sources based on the 2.4.21 Linux kernel.
2117 This includes updates to most major components such as:
2118 - ck-base-0306300059
2119 - selinux-2.4-2003071106
2120 - grsecurity-2.0-rc1
2121 - Updated IPTables patch-o-matic
2122 - Updated SuperFreeS/WAN
2123
2124 Thanks to Phil West <pwest@computer.org> for his work in getting this
2125 updated patch set ready for the 2.4.21 based kernel.
2126
2127 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
2128 Initial import of hardened-sources-2.4.20-r4. This revision
2129 includes only a few changes, but one of these is an important
2130 security fix. It is recommended all users of hardened-sources
2131 upgrade to this release.
2132
2133 - ioperm bug fix
2134 - fixed compilation failure when building without GRSec
2135
2136 SAL (Secure Auditing for Linux) is NOT included in this revision
2137 due to time constraints, but is planned for inclusion in the near
2138 future.
2139
2140 *hardened-sources-2.4.20-r2 (12 Jun 2003)
2141
2142 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
2143 hardened-sources-2.4.20-r3.ebuild:
2144 Add Header...
2145
2146 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2147 hardened-sources-2.4.20-r3.ebuild:
2148 Removed warnings from ebuild. This kernel should be safe to
2149 use at this point.
2150
2151 *hardened-sources-2.4.20-r3 (08 Jun 2003)
2152
2153 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
2154 hardened-sources-2.4.20-r3.ebuild:
2155 New revision. Includes the following changes over -r2:
2156
2157 - ck7-base (O(1), preempt, low latency)
2158 - Super FreeS/WAN 1.99.7rc2
2159 - PaX for the LSM/SELinux branch
2160 - GRSecurity 2.0-pre4 (role based access control)
2161 - Systrace 1.3
2162 - EXT3 fixes
2163 - EVMS 2.0.1
2164 - GCC 3.1+ compile optimizations
2165 - ProPolice kernel build support
2166 - Hashing table security fixes
2167
2168 *hardened-sources-2.4.20-r1 (09 Apr 2003)
2169
2170 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
2171 Initial import of hardened-sources-r2. This new
2172 ebuild includes many new performance and security
2173 related patches. As in -r1, it will patch in
2174 LSM/SELinux if "selinux" is in USE, otherwise it
2175 will patch in GRSecurity. The following patches
2176 are included in this revision:
2177
2178 - O(1) Scheduler, Low Latency, and Preempt
2179 (pulled from the base CK patch)
2180 - ptrace exploit patch for the LSM kernel
2181 (the GRSec patch already fixes this)
2182 - LSM 2.4-2003040709
2183 - SELinux 2.4-2003040709
2184 - Systrace v1.2
2185 - IPTables patch-o-matic base patches - 20030107
2186 - CryptoAPI 2.4.20.1 w/ loop-jari patch
2187 - Super FreeS/WAN 1.99.6.1
2188 - GRSecurity 1.9.9g
2189 - MPPE
2190 - EXT3 data journal fix
2191 - CIPE 1.5.4
2192
2193 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2194 hardened-sources-2.4.20-r1.ebuild, manifest:
2195 Updated to install flask components correctly for selinux.
2196
2197 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2198 hardened-sources-2.4.20-r1.ebuild:
2199 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2200 is patched in instead. Ptrace patches for selinux have also been added. In
2201 either case, systrace support will be patched in as well.
2202
2203 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2204 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2205 Revision bump for new sources.
2206
2207 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2208 hardened-sources-2.4.20-r1.ebuild:
2209 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2210
2211 *hardened-sources-2.4.20 (30 Mar 2003)
2212
2213 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2214 hardened-sources-2.4.20.ebuild:
2215 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20