/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.320 - (hide annotations) (download)
Tue Jul 13 10:13:26 2010 UTC (4 years, 11 months ago) by blueness
Branch: MAIN
Changes since 1.319: +7 -1 lines
New patchset based on mainline 2.6.32.16 and grsec-2.2.0.  Bug #327263
(Portage version: 2.1.8.3/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.320 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.319 2010/07/06 11:40:13 chainsaw Exp $
4    
5     *hardened-sources-2.6.32-r11 (13 Jul 2010)
6    
7     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
8     +hardened-sources-2.6.32-r11.ebuild:
9     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
10 chainsaw 1.319
11     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
12     Marked stable on AMD64 as requested by Anthony G. Basile
13     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
14     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
15 blueness 1.318
16     *hardened-sources-2.6.32-r10 (30 Jun 2010)
17    
18     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
19     +hardened-sources-2.6.32-r10.ebuild:
20     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
21 blueness 1.317
22     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
23     Added myself to the metadata.xml
24 chainsaw 1.316
25     *hardened-sources-2.6.32-r9 (11 Jun 2010)
26    
27     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
28     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
29 chainsaw 1.315
30     *hardened-sources-2.6.32-r8 (01 Jun 2010)
31    
32     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
33     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
34 chainsaw 1.314
35     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
36     Update SRC_URI to point to mirror network now that the distfile has
37     propagated.
38 chainsaw 1.313
39     *hardened-sources-2.6.32-r7 (26 May 2010)
40    
41     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
42     metadata.xml:
43     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
44     Summers.
45 robbat2 1.312
46     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
47     Update Manifest for deblob support in kernel-2 eclass.
48 nixnut 1.311
49     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
50     ppc stable
51 gengor 1.310
52     29 May 2009; Gordon Malm <gengor@gentoo.org>
53     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
54     Stable amd64/x86 and remove old.
55 gengor 1.309
56     *hardened-sources-2.6.29 (25 May 2009)
57    
58     25 May 2009; Gordon Malm <gengor@gentoo.org>
59     +hardened-sources-2.6.29.ebuild:
60     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
61     release candidates.
62 gengor 1.308
63     *hardened-sources-2.6.28-r9 (25 May 2009)
64    
65     25 May 2009; Gordon Malm <gengor@gentoo.org>
66     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
67     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
68 gengor 1.307
69     *hardened-sources-2.6.28-r8 (18 May 2009)
70    
71     18 May 2009; Gordon Malm <gengor@gentoo.org>
72     +hardened-sources-2.6.28-r8.ebuild:
73     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
74     and #262862 among others.
75 gengor 1.306
76     01 May 2009; Gordon Malm <gengor@gentoo.org>
77     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
78     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
79     Remove unnecessary mirror://gentoo from SRC_URI.
80 nixnut 1.305
81     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
82     ppc stable
83 gengor 1.304
84     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
85     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
86     Stable amd64/x86 and remove old.
87 gengor 1.303
88     *hardened-sources-2.6.28-r7 (27 Mar 2009)
89    
90     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
91     +hardened-sources-2.6.28-r7.ebuild:
92     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
93 gengor 1.302
94     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
95     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
96     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
97     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
98     Stable amd64/x86 and remove old versions.
99 nixnut 1.301
100     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
101     ppc stable
102 gengor 1.300
103     *hardened-sources-2.6.28-r6 (21 Mar 2009)
104    
105     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
106     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
107     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
108 gengor 1.299
109     *hardened-sources-2.6.28-r5 (20 Mar 2009)
110    
111     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
112     +hardened-sources-2.6.28-r5.ebuild:
113     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
114 gengor 1.298
115     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
116     hardened-sources-2.6.28-r4.ebuild:
117     Stable amd64/x86.
118 gengor 1.297
119     *hardened-sources-2.6.28-r4 (18 Mar 2009)
120    
121     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
122     +hardened-sources-2.6.28-r4.ebuild:
123     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
124     compilation with CPA_DEBUG and more.
125 gengor 1.296
126     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
127     hardened-sources-2.6.28-r3.ebuild:
128     Quick stable amd64/x86.
129 gengor 1.295
130     *hardened-sources-2.6.28-r3 (15 Mar 2009)
131    
132     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
133     +hardened-sources-2.6.28-r3.ebuild:
134     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
135 nixnut 1.294
136     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
137     ppc stable
138 gengor 1.293
139     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
140     hardened-sources-2.6.28-r2.ebuild:
141     Stable amd64/x86.
142 gengor 1.292
143     *hardened-sources-2.6.28-r2 (11 Mar 2009)
144    
145     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
146     +hardened-sources-2.6.28-r2.ebuild:
147     Version bump bringing in latest grsecurity patch.
148 gengor 1.291
149     *hardened-sources-2.6.28-r1 (09 Mar 2009)
150    
151     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
152     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
153     Version bump and remove old.
154 nixnut 1.290
155     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
156     ppc stable
157 gengor 1.289
158     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
159     hardened-sources-2.6.27-r8.ebuild:
160     Remove amd64 testing keyword, bug 256226.
161 gengor 1.288
162     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
163     hardened-sources-2.6.27-r8.ebuild:
164     Revert amd64 stable, bug #256226.
165 gengor 1.287
166     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
167     hardened-sources-2.6.27-r8.ebuild:
168     Stable on amd64/x86.
169 gengor 1.286
170     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
171     -hardened-sources-2.6.27-r6.ebuild:
172     Remove old 2.6.27 release.
173 gengor 1.285
174     *hardened-sources-2.6.27-r8 (24 Feb 2009)
175    
176     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
177     +hardened-sources-2.6.27-r8.ebuild:
178     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
179     and probably more.
180 nixnut 1.284
181     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
182     ppc stable
183 gengor 1.283
184     *hardened-sources-2.6.28 (25 Jan 2009)
185    
186     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
187     +hardened-sources-2.6.28.ebuild:
188     Initial 2.6.28 release.
189 gengor 1.282
190     *hardened-sources-2.6.27-r7 (25 Jan 2009)
191    
192     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
193     +hardened-sources-2.6.27-r7.ebuild:
194     Bump to Linux 2.6.27.13.
195 gengor 1.281
196     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
197     hardened-sources-2.6.26-r9.ebuild:
198     Stable amd64/x86.
199 gengor 1.280
200     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
201     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
202     -hardened-sources-2.6.27-r5.ebuild:
203     Remove problem versions.
204 gengor 1.279
205     *hardened-sources-2.6.27-r6 (24 Jan 2009)
206    
207     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
208     +hardened-sources-2.6.27-r6.ebuild:
209     Revert PaX test29 to test30 changes. Fixes bug 256226.
210 gengor 1.277
211     *hardened-sources-2.6.27-r5 (24 Jan 2009)
212    
213     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
214     +hardened-sources-2.6.27-r5.ebuild:
215 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
216 gengor 1.277 254843.
217 gengor 1.276
218     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
219     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
220     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
221     Remove problem versions.
222 nixnut 1.275
223     23 Jan 2009; nixnut <nixnut@gentoo.org>
224     hardened-sources-2.6.25-r13.ebuild:
225     ppc stable
226 gengor 1.274
227     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
228     hardened-sources-2.6.25-r13.ebuild:
229     Fasttrack stable amd64/x86.
230 gengor 1.273
231     *hardened-sources-2.6.26-r9 (21 Jan 2009)
232    
233     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
234     +hardened-sources-2.6.26-r9.ebuild:
235 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
236 gengor 1.272
237     *hardened-sources-2.6.25-r13 (20 Jan 2009)
238    
239     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
240     +hardened-sources-2.6.25-r13.ebuild:
241 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
242 nixnut 1.271
243     20 Jan 2009; nixnut <nixnut@gentoo.org>
244     hardened-sources-2.6.25-r12.ebuild:
245     ppc stable
246 gengor 1.270
247     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
248     hardened-sources-2.6.25-r12.ebuild:
249     Stable amd64/x86.
250 gengor 1.269
251     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
252     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
253     -hardened-sources-2.6.27-r2.ebuild:
254     Clean out old versions.
255 gengor 1.268
256     *hardened-sources-2.6.27-r4 (14 Jan 2009)
257     *hardened-sources-2.6.26-r8 (14 Jan 2009)
258     *hardened-sources-2.6.25-r12 (14 Jan 2009)
259    
260     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
261     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
262     +hardened-sources-2.6.27-r4.ebuild:
263     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
264     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
265     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
266     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
267 nixnut 1.267
268     15 Dec 2008; nixnut <nixnut@gentoo.org>
269     hardened-sources-2.6.25-r11.ebuild:
270     Stable on ppc
271 gengor 1.266
272     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
273     hardened-sources-2.6.25-r11.ebuild:
274     Stable amd64/x86.
275 gengor 1.265
276     *hardened-sources-2.6.27-r3 (07 Dec 2008)
277    
278     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
279     +hardened-sources-2.6.27-r3.ebuild:
280     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
281     Fixes bug #248754, #249729 and #246607.
282 gengor 1.264
283     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
284     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
285     Remove old versions.
286 gengor 1.262
287     *hardened-sources-2.6.26-r7 (03 Dec 2008)
288     *hardened-sources-2.6.25-r11 (03 Dec 2008)
289    
290 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
291     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
292 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
293     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
294     Both include many backports from 2.6.27.{6,7} -stable releases.
295 gengor 1.261
296     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
297     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
298     Remove versions broken on ARCHes != x86/amd64.
299 gengor 1.260
300     *hardened-sources-2.6.27-r2 (24 Nov 2008)
301    
302     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
303     +hardened-sources-2.6.27-r2.ebuild:
304     Bump to Linux 2.6.27.7 and latest grsecurity patch.
305 gengor 1.259
306     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
307     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
308     Remove old versions.
309 gengor 1.258
310     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
311     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
312     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
313 nixnut 1.257
314     16 Nov 2008; nixnut <nixnut@gentoo.org>
315     hardened-sources-2.6.25-r10.ebuild:
316     Stable on ppc
317 gengor 1.256
318     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
319     hardened-sources-2.6.25-r10.ebuild:
320     Stable amd64/x86.
321 gengor 1.255
322     *hardened-sources-2.6.26-r6 (12 Nov 2008)
323    
324     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
325     +hardened-sources-2.6.26-r6.ebuild:
326     Bump to Linux 2.6.26.8 and fix security bug #245650.
327 gengor 1.254
328     *hardened-sources-2.6.25-r10 (12 Nov 2008)
329    
330     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
331     +hardened-sources-2.6.25-r10.ebuild:
332     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
333 gengor 1.253
334     *hardened-sources-2.6.27-r1 (09 Nov 2008)
335    
336     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
337     +hardened-sources-2.6.27-r1.ebuild:
338     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
339 gengor 1.252
340     *hardened-sources-2.6.27 (04 Nov 2008)
341    
342     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
343     +hardened-sources-2.6.27.ebuild:
344     Initial 2.6.27 release.
345 gengor 1.251
346     *hardened-sources-2.6.26-r5 (03 Nov 2008)
347    
348     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
349     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
350     +hardened-sources-2.6.26-r5.ebuild:
351     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
352     Clean out some old versions.
353 nixnut 1.250
354     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
355     Stable on ppc
356 gengor 1.249
357     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
358     hardened-sources-2.6.25-r9.ebuild:
359     Stable on amd64/x86.
360 gengor 1.248
361     *hardened-sources-2.6.25-r9 (26 Oct 2008)
362    
363     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
364     +hardened-sources-2.6.25-r9.ebuild:
365     Update to Linux 2.6.25.19
366 nixnut 1.247
367     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
368     Stable on ppc
369 gengor 1.246
370     *hardened-sources-2.6.26-r4 (14 Oct 2008)
371    
372     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
373     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
374     Update to latest grsecurity patch, fixing building of non-modular kernels.
375 gengor 1.245
376     *hardened-sources-2.6.26-r3 (12 Oct 2008)
377    
378     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
379     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
380     +hardened-sources-2.6.26-r3.ebuild:
381     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
382     2.6.26-r1: Removed.
383     2.6.25-r8: Stable amd64/x86.
384 gengor 1.244
385     *hardened-sources-2.6.25-r8 (09 Oct 2008)
386    
387     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
388     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
389     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
390     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
391 nixnut 1.243
392     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
393     Stable on ppc
394 gengor 1.242
395     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
396     hardened-sources-2.6.25-r7.ebuild:
397     Stable amd64/x86.
398 gengor 1.241
399     *hardened-sources-2.6.26-r2 (13 Sep 2008)
400    
401     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
402     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
403     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
404     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
405 gengor 1.240
406     *hardened-sources-2.6.25-r7 (13 Sep 2008)
407    
408     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
409     +hardened-sources-2.6.25-r7.ebuild:
410     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
411 gengor 1.239
412     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
413     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
414     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
415     hardened-sources-2.6.26-r1.ebuild:
416     Update DESCRIPTION and HGPV_URI.
417 gengor 1.238
418     *hardened-sources-2.6.25-r6 (09 Sep 2008)
419    
420     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
421     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
422     2.6.25-r6: Update to Linux 2.6.25.17.
423     2.6.24-r3: Removed.
424 gengor 1.237
425     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
426     hardened-sources-2.6.25-r5.ebuild:
427     Stable on amd64/x86
428 gengor 1.236
429     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
430     Update my email address.
431 nixnut 1.235
432     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
433     stable on ppc
434 battousai 1.234
435     *hardened-sources-2.6.26-r1 (23 Aug 2008)
436     *hardened-sources-2.6.25-r5 (23 Aug 2008)
437    
438     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
439     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
440     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
441     +hardened-sources-2.6.26-r1.ebuild:
442     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
443     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
444     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
445     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
446     (gengor).
447 solar 1.233
448     *hardened-sources-2.6.26 (18 Aug 2008)
449     *hardened-sources-2.6.25-r4 (18 Aug 2008)
450    
451     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
452     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
453     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
454     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
455     2.6.25-r2: Removed.
456 tove 1.232
457     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
458     Remove phreak from metadata.xml (#96398)
459 solar 1.231
460     *hardened-sources-2.6.25-r3 (31 Jul 2008)
461    
462     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
463     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
464     +hardened-sources-2.6.25-r3.ebuild:
465     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
466     fixes, including security bug #231750.
467 nixnut 1.230
468     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
469     Stable on ppc
470 solar 1.229
471     *hardened-sources-2.6.25-r2 (05 Jul 2008)
472    
473     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
474     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
475     +hardened-sources-2.6.25-r2.ebuild:
476     2.6.23-r4: Stable x86/amd64
477     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
478     2.6.23-r{11,12}: Removed due to multiple vulns.
479     (gengor & kerframil)
480 nixnut 1.228
481     04 Jul 2008; nixnut <nixnut@gentoo.org>
482     hardened-sources-2.6.23-r13.ebuild:
483     Stable on ppc
484 solar 1.227
485     *hardened-sources-2.6.25-r1 (30 Jun 2008)
486    
487     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
488     +hardened-sources-2.6.25-r1.ebuild:
489     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
490     grsecurity release. 2.6.23-r13: x86/amd64 stable
491 solar 1.226
492     *hardened-sources-2.6.25 (17 Jun 2008)
493     *hardened-sources-2.6.24-r3 (17 Jun 2008)
494     *hardened-sources-2.6.23-r13 (17 Jun 2008)
495    
496     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
497     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
498     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
499     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
500     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
501     2.6.25: Initial 2.6.25 release.
502 solar 1.225
503     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
504     - fasttrack to stable x86/amd64
505 swegener 1.224
506     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
507     Fix broken digest for linux-2.6.24.tar.bz2.
508 solar 1.223
509     *hardened-sources-2.6.24-r2 (11 May 2008)
510     *hardened-sources-2.6.23-r12 (11 May 2008)
511    
512     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
513     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
514     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
515     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
516     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
517     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
518     security bugs 219901, 220691, 220975, 220979, 221123. New
519     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
520     should be removed as far as I'm concerned, everything else remove due to
521     vulnerable to numerous security bugs or brokeness.
522 nixnut 1.222
523     10 May 2008; nixnut <nixnut@gentoo.org>
524     hardened-sources-2.6.23-r11.ebuild:
525     Stable on ppc
526 solar 1.221
527     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
528     - -r11 stable on x86/amd64
529 solar 1.220
530     *hardened-sources-2.6.23-r11 (01 May 2008)
531    
532     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
533     - version bump to fix ulgy linux bugs
534 phreak 1.219
535     *hardened-sources-2.6.24-r1 (30 Apr 2008)
536    
537     30 Apr 2008; Christian Heim <phreak@gentoo.org>
538     +hardened-sources-2.6.24-r1.ebuild:
539     Revision bump (thanks to Kerin and Gordon, again), pulling
540     genpatches-2.6.24-7, solving #219089. Additionally contains further security
541     fixes plus some minor updates.
542 phreak 1.218
543     *hardened-sources-2.6.23-r10 (30 Apr 2008)
544    
545     30 Apr 2008; Christian Heim <phreak@gentoo.org>
546     +hardened-sources-2.6.23-r10.ebuild:
547     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
548     Additional contains "various other fixes".
549 phreak 1.217
550     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
551     Update the longdescription in metadata, thanks to Gordon Malm.
552 nixnut 1.216
553     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
554     Stable on ppc wrt bug #213255
555 solar 1.215
556     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
557     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
558     - stable on x86/amd64 per request. Removed obsolete ebuilds
559 phreak 1.214
560     *hardened-sources-2.6.24 (07 Apr 2008)
561    
562     07 Apr 2008; Christian Heim <phreak@gentoo.org>
563     +hardened-sources-2.6.24.ebuild:
564     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
565     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
566     for the many contributions and their continued effort in #216612) based on
567     2.6.24 and genpatches-2.6.24-5.
568    
569     The current ebuild/patchset contains these things:
570     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
571     * Introduces bespoke server and workstation oriented security levels
572     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
573 phreak 1.213
574     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
575     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
576     maintaining it).
577 phreak 1.212
578     24 Mar 2008; Christian Heim <phreak@gentoo.org>
579     hardened-sources-2.4.35-r2.ebuild:
580     Fixing SRC_URI for 2.4.35-r2.
581 phreak 1.211
582     *hardened-sources-2.6.23-r9 (22 Mar 2008)
583    
584     22 Mar 2008; Christian Heim <phreak@gentoo.org>
585     +hardened-sources-2.6.23-r9.ebuild:
586     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
587     * Change the default GIDs for some grsecurity options
588     * Revamp the Hardened [Gentoo] security level and make it the default level
589     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
590     * Fix a recursive lock -- call to capable() within ptrace_attach()
591     * Fix bug that allows audit and iscsi operations to be controlled via netlink
592 solar 1.210
593     *hardened-sources-2.6.23-r8 (27 Feb 2008)
594    
595     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
596     - version bump from Kerin Millar bug 210026
597 solar 1.209
598     17 Feb 2008; <solar@gentoo.org> metadata.xml,
599     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
600     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
601     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
602     - stable on x86 and remove old ebuilds
603 solar 1.207
604     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
605 solar 1.208 - stable on amd64 per request of amd64 lead
606 solar 1.206
607     *hardened-sources-2.6.23-r7 (11 Feb 2008)
608    
609     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
610     - version bump from kerin.millar
611     Changes:
612    
613     * Bump to genpatches-base-2.6.23-9
614     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
615     * Disables COMPAT_VDSO in x86/defconfig
616     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
617 phreak 1.205
618     25 Jan 2008; Christian Heim <phreak@gentoo.org>
619     -hardened-sources-2.6.22-r8.ebuild:
620     Cleaning up old versions.
621 phreak 1.204
622     *hardened-sources-2.6.23-r6 (25 Jan 2008)
623    
624     25 Jan 2008; Christian Heim <phreak@gentoo.org>
625     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
626     Revision bump, pulling in the latest genpatches.
627 phreak 1.203
628     *hardened-sources-2.6.23-r5 (24 Dec 2007)
629    
630     24 Dec 2007; Christian Heim <phreak@gentoo.org>
631     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
632     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
633     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
634     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
635 phreak 1.202
636     24 Dec 2007; Christian Heim <phreak@gentoo.org>
637     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
638     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
639     -hardened-sources-2.6.23-r3.ebuild:
640     Cleaning out some unused, old versions.
641 phreak 1.201
642     24 Dec 2007; Christian Heim <phreak@gentoo.org>
643     hardened-sources-2.6.23-r4.ebuild:
644     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
645     in the tree for long, but there isn't much of a difference between this and
646     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
647 phreak 1.200
648     *hardened-sources-2.6.23-r4 (23 Dec 2007)
649    
650     23 Dec 2007; Christian Heim <phreak@gentoo.org>
651     +hardened-sources-2.6.23-r4.ebuild:
652     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
653 phreak 1.199
654     *hardened-sources-2.6.23-r3 (04 Dec 2007)
655    
656     04 Dec 2007; Christian Heim <phreak@gentoo.org>
657     +hardened-sources-2.6.23-r3.ebuild:
658     Revision bump, pulling in 2.6.23.9.
659 phreak 1.198
660     *hardened-sources-2.6.23-r2 (25 Nov 2007)
661    
662     25 Nov 2007; Christian Heim <phreak@gentoo.org>
663     +hardened-sources-2.6.23-r2.ebuild:
664     Updated patchset, thanks to solar.
665 phreak 1.197
666     *hardened-sources-2.6.23-r1 (31 Oct 2007)
667    
668     31 Oct 2007; Christian Heim <phreak@gentoo.org>
669     +hardened-sources-2.6.23-r1.ebuild:
670     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
671 solar 1.196
672     29 Oct 2007; <solar@gentoo.org> metadata.xml:
673     - update metadata.xml
674 phreak 1.195
675     25 Oct 2007; Christian Heim <phreak@gentoo.org>
676     hardened-sources-2.6.22-r8.ebuild:
677     Marking 2.6.22-r8 stable on amd64 and x86.
678 phreak 1.194
679     21 Oct 2007; Christian Heim <phreak@gentoo.org>
680     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
681     -hardened-sources-2.6.21-r4.ebuild:
682     Removing old ebuilds.
683 phreak 1.193
684     *hardened-sources-2.4.35-r2 (21 Oct 2007)
685    
686     21 Oct 2007; Christian Heim <phreak@gentoo.org>
687     +hardened-sources-2.4.35-r2.ebuild:
688     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
689     patches.
690 phreak 1.192
691     *hardened-sources-2.6.22-r8 (21 Oct 2007)
692    
693     21 Oct 2007; Christian Heim <phreak@gentoo.org>
694     +hardened-sources-2.6.22-r8.ebuild:
695     Yet another new patch, hopefully fixing the remaining issues we had w/
696     2.6.22. Candidate for stabling.
697 phreak 1.191
698     *hardened-sources-2.6.23 (13 Oct 2007)
699    
700     13 Oct 2007; Christian Heim <phreak@gentoo.org>
701     +hardened-sources-2.6.23.ebuild:
702     Initial hardened-sources-2.6.23. If people still have problems w/ bug
703     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
704 phreak 1.190
705     11 Oct 2007; Christian Heim <phreak@gentoo.org>
706     hardened-sources-2.6.20-r10.ebuild:
707     Pulling in yet another new genpatches version, fixing the PWC bug for real.
708 phreak 1.189
709     04 Oct 2007; Christian Heim <phreak@gentoo.org>
710     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
711     Removing old versions.
712 phreak 1.188
713     *hardened-sources-2.6.22-r7 (01 Oct 2007)
714    
715     01 Oct 2007; Christian Heim <phreak@gentoo.org>
716     +hardened-sources-2.6.22-r7.ebuild:
717     Revision bump, pulling in a newer patch. Should fix #194276.
718 phreak 1.187
719     30 Sep 2007; Christian Heim <phreak@gentoo.org>
720     hardened-sources-2.6.20-r10.ebuild:
721     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
722     Mike Doty).
723 phreak 1.186
724     *hardened-sources-2.6.22-r6 (26 Sep 2007)
725    
726     26 Sep 2007; Christian Heim <phreak@gentoo.org>
727     +hardened-sources-2.6.22-r6.ebuild:
728     Revision bump, grabbing up till Linux 2.6.22.9.
729 phreak 1.185
730     24 Sep 2007; Christian Heim <phreak@gentoo.org>
731     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
732     Cleaning up further.
733 phreak 1.184
734     *hardened-sources-2.6.20-r10 (24 Sep 2007)
735    
736     24 Sep 2007; Christian Heim <phreak@gentoo.org>
737     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
738     +hardened-sources-2.6.20-r10.ebuild:
739     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
740     revisions.
741 phreak 1.183
742     *hardened-sources-2.6.22-r5 (22 Sep 2007)
743    
744     22 Sep 2007; Christian Heim <phreak@gentoo.org>
745     +hardened-sources-2.6.22-r5.ebuild:
746     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
747 phreak 1.182
748     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
749     Removing johnm from metadata.xml (see #186467 for reference).
750 phreak 1.181
751     *hardened-sources-2.6.22-r4 (17 Sep 2007)
752    
753     17 Sep 2007; Christian Heim <phreak@gentoo.org>
754     +hardened-sources-2.6.22-r4.ebuild:
755     Revision bump, hopefully fixing all those weird PAX failures.
756 phreak 1.180
757     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
758     Updating the metadata.xml.
759 phreak 1.179
760     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
761     Removing tocharian from metadata due to his retirement (see #71718 for
762     reference).
763 phreak 1.178
764     *hardened-sources-2.6.20-r9 (30 Aug 2007)
765    
766     30 Aug 2007; Christian Heim <phreak@gentoo.org>
767     +hardened-sources-2.6.20-r9.ebuild:
768     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
769 phreak 1.177
770     29 Aug 2007; Christian Heim <phreak@gentoo.org>
771     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
772     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
773     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
774     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
775     -hardened-sources-2.6.22-r2.ebuild:
776     Removing some redundant versions.
777 phreak 1.176
778     *hardened-sources-2.4.35-r1 (29 Aug 2007)
779    
780     29 Aug 2007; Christian Heim <phreak@gentoo.org>
781     +hardened-sources-2.4.35-r1.ebuild:
782     Revision bump, new grsecurity patch.
783 phreak 1.175
784     *hardened-sources-2.6.20-r8 (26 Aug 2007)
785    
786     26 Aug 2007; Christian Heim <phreak@gentoo.org>
787     +hardened-sources-2.6.20-r8.ebuild:
788     Revision bump for Linux 2.6.20.17.
789 phreak 1.174
790     *hardened-sources-2.6.22-r3 (22 Aug 2007)
791    
792     22 Aug 2007; Christian Heim <phreak@gentoo.org>
793     +hardened-sources-2.6.22-r3.ebuild:
794     Revision bump for Linux 2.6.22.4.
795 phreak 1.173
796     16 Aug 2007; Christian Heim <phreak@gentoo.org>
797     hardened-sources-2.6.22-r2.ebuild:
798     Updated patchset, to fix the alignment against 2.6.22.3.
799 phreak 1.172
800     *hardened-sources-2.6.22-r2 (16 Aug 2007)
801    
802     16 Aug 2007; Christian Heim <phreak@gentoo.org>
803     +hardened-sources-2.6.22-r2.ebuild:
804     Revision bump for Linux 2.6.22.3.
805 phreak 1.171
806     *hardened-sources-2.4.35 (16 Aug 2007)
807    
808     16 Aug 2007; Christian Heim <phreak@gentoo.org>
809     +hardened-sources-2.4.35.ebuild:
810     Version bump, initial version for Linux 2.4.35.
811 phreak 1.170
812     *hardened-sources-2.6.21-r4 (16 Aug 2007)
813    
814     16 Aug 2007; Christian Heim <phreak@gentoo.org>
815     +hardened-sources-2.6.21-r4.ebuild:
816     Revision bump for Linux 2.6.21.6.
817 phreak 1.169
818     *hardened-sources-2.6.20-r7 (16 Aug 2007)
819    
820     16 Aug 2007; Christian Heim <phreak@gentoo.org>
821     +hardened-sources-2.6.20-r7.ebuild:
822     Revision bump for Linux 2.6.20.16.
823 phreak 1.168
824     *hardened-sources-2.6.22-r1 (13 Aug 2007)
825    
826     13 Aug 2007; Christian Heim <phreak@gentoo.org>
827     +hardened-sources-2.6.22-r1.ebuild:
828     Yet another revision bump.
829 phreak 1.167
830     *hardened-sources-2.6.22 (10 Aug 2007)
831    
832     10 Aug 2007; Christian Heim <phreak@gentoo.org>
833     +hardened-sources-2.6.22.ebuild:
834     Initial release for 2.6.22. If you are using hardened-sources on a desktop
835     machine (P4 or newer), be aware you might need to disable
836     CONFIG_PAX_PAGEEXEC.
837 phreak 1.166
838     04 Aug 2007; Christian Heim <phreak@gentoo.org>
839     hardened-sources-2.6.20-r6.ebuild:
840     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
841     2.6.20.15.
842 phreak 1.165
843     10 Jul 2007; Christian Heim <phreak@gentoo.org>
844     hardened-sources-2.6.20-r5.ebuild:
845     Marking hardened-sources-2.6.20-r5 stable on ppc.
846 phreak 1.164
847     10 Jul 2007; Christian Heim <phreak@gentoo.org>
848     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
849     Cleanup.
850 phreak 1.163
851     *hardened-sources-2.6.20-r6 (08 Jul 2007)
852    
853     08 Jul 2007; Christian Heim <phreak@gentoo.org>
854     +hardened-sources-2.6.20-r6.ebuild:
855     Revision bump, grabbing yet another stable release.
856 phreak 1.162
857     17 Jun 2007; Christian Heim <phreak@gentoo.org>
858     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
859     -hardened-sources-2.6.21-r2.ebuild:
860     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
861     alpha stable KEYWORD by mistake.
862 phreak 1.161
863     17 Jun 2007; Christian Heim <phreak@gentoo.org>
864     hardened-sources-2.6.20-r5.ebuild:
865     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
866     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
867 phreak 1.160
868     *hardened-sources-2.6.21-r3 (12 Jun 2007)
869    
870     12 Jun 2007; Christian Heim <phreak@gentoo.org>
871     +hardened-sources-2.6.21-r3.ebuild:
872     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
873     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
874     love.
875 phreak 1.159
876     *hardened-sources-2.6.20-r5 (11 Jun 2007)
877    
878     11 Jun 2007; Christian Heim <phreak@gentoo.org>
879     +hardened-sources-2.6.20-r5.ebuild:
880     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
881     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
882     love.
883 pappy 1.158
884     *hardened-sources-2.4.34.5 (11 Jun 2007)
885    
886     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
887     +hardened-sources-2.4.34.5.ebuild:
888     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
889 phreak 1.157
890     30 May 2007; Christian Heim <phreak@gentoo.org>
891     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
892     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
893     stale ebuild(s).
894 phreak 1.156
895     30 May 2007; Christian Heim <phreak@gentoo.org>
896     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
897     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
898     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
899     Doing some cleanups, remove stale ebuilds.
900 phreak 1.155
901     26 May 2007; Christian Heim <phreak@gentoo.org>
902     hardened-sources-2.6.21-r2.ebuild:
903     Fixing the grsecurity patch, had one '};' too much.
904 phreak 1.154
905     *hardened-sources-2.6.21-r2 (26 May 2007)
906    
907     26 May 2007; Christian Heim <phreak@gentoo.org>
908     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
909     +hardened-sources-2.6.21-r2.ebuild:
910     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
911     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
912 phreak 1.153
913     *hardened-sources-2.6.20-r4 (26 May 2007)
914    
915     26 May 2007; Christian Heim <phreak@gentoo.org>
916     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
917     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
918 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
919 phreak 1.152
920     15 May 2007; Christian Heim <phreak@gentoo.org>
921     hardened-sources-2.6.20-r3.ebuild:
922     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
923     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
924     grsecurity patch fail in that exact same hunk.
925 phreak 1.151
926     *hardened-sources-2.6.20-r3 (15 May 2007)
927    
928     15 May 2007; Christian Heim <phreak@gentoo.org>
929     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
930     Revision bump, incorporating Linux 2.6.20.11.
931    
932     *hardened-sources-2.6.21-r1 (11 May 2007)
933    
934     11 May 2007; Christian Heim <phreak@gentoo.org>
935     +hardened-sources-2.6.21-r1.ebuild:
936     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
937     mentioned in #177234.
938 kevquinn 1.150
939     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
940     files/digest-hardened-sources-2.6.21, Manifest:
941     Fix Manifest/digest for linux-2.6.21.tar.bz2
942 phreak 1.149
943     06 May 2007; Christian Heim <phreak@gentoo.org>
944     hardened-sources-2.6.21.ebuild:
945     Bumping the hardened-patches version, needed for the fix for #177234.
946 phreak 1.148
947     *hardened-sources-2.6.21 (02 May 2007)
948    
949     02 May 2007; Christian Heim <phreak@gentoo.org>
950     +hardened-sources-2.6.21.ebuild:
951     Version bump, Linux 2.6.21-hardened.
952 phreak 1.147
953     29 Apr 2007; Christian Heim <phreak@gentoo.org>
954     hardened-sources-2.6.20-r2.ebuild:
955     Adding ~ia64 on Ned's request.
956 phreak 1.146
957     29 Apr 2007; Christian Heim <phreak@gentoo.org>
958     hardened-sources-2.6.20-r2.ebuild:
959     Fixing the included grsecurity patch, wasn't alligning due to the Index:
960     header line(s).
961 phreak 1.145
962     29 Apr 2007; Christian Heim <phreak@gentoo.org>
963     hardened-sources-2.6.20-r2.ebuild:
964     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
965 armin76 1.144
966     *hardened-sources-2.6.20-r2 (10 Apr 2007)
967    
968     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
969     +hardened-sources-2.6.20-r2.ebuild:
970     Version bump, on behalf of phreak
971 phreak 1.143
972     *hardened-sources-2.6.20-r1 (04 Apr 2007)
973    
974     04 Apr 2007; Christian Heim <phreak@gentoo.org>
975     +hardened-sources-2.6.20-r1.ebuild:
976     Revision bump, grabbing a newer grsecurity snapshot.
977 phreak 1.142
978     *hardened-sources-2.6.20 (25 Mar 2007)
979    
980     25 Mar 2007; Christian Heim <phreak@gentoo.org>
981     +hardened-sources-2.6.20.ebuild:
982     Finally a hardened-sources version for 2.6.20; many people have been waiting
983     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
984     testbox.
985 chainsaw 1.141
986     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
987     hardened-sources-2.6.18-r6.ebuild:
988     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
989 phreak 1.140
990     *hardened-sources-2.6.18-r6 (16 Mar 2007)
991    
992     16 Mar 2007; Christian Heim <phreak@gentoo.org>
993     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
994     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
995     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
996     supposed to be.
997 phreak 1.139
998     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
999     Fixing the Manifest, the previous one was broken (as in still had the
1000     deleted ebuild in it).
1001 phreak 1.138
1002     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1003     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1004     +hardened-sources-2.6.18-r5.ebuild:
1005     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1006     Linux 2.6.18.8. Also cleaning up the older version.
1007    
1008     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1009    
1010     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1011     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1012     +hardened-sources-2.6.18-r5.ebuild:
1013     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1014     Linux 2.6.18.8. Also cleaning up the older version.
1015 phreak 1.137
1016     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1017     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1018     -hardened-sources-2.6.19-r5.ebuild:
1019     Removing some of the old version, that didn't work.
1020 phreak 1.136
1021     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1022    
1023     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1024     +hardened-sources-2.6.19-r6.ebuild:
1025     Revision bump, including a new grsec version fixing #166235.
1026 pappy 1.134
1027     *hardened-sources-2.4.34 (24 Jan 2007)
1028    
1029     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1030 pappy 1.135 Manifest:
1031     updating Manifest with checksums of new tarball and ebuild
1032    
1033     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1034 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1035     I added new hardened sources 2.4 update, this is a critical path
1036     security bugfix - all users of h-s are strongly advised
1037     to update their existing hardened sources to this version.
1038     It contains a fix for a kernel vulnerability that is pertaining
1039     to the PaX changes to virtual memory management, possibly leading
1040     to a local kernel exploit ... see grsecurity.net forums and homepage
1041 phreak 1.133
1042     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1043     files/digest-hardened-sources-2.6.19-r5, Manifest:
1044     Fixing the patch-tarball digest.
1045 phreak 1.132
1046     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1047    
1048     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1049     +hardened-sources-2.6.19-r5.ebuild:
1050     Revision bump, closing the recently discovered PaX expand_stack()
1051     vulnerability.
1052 phreak 1.131
1053     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1054    
1055     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1056     +hardened-sources-2.6.19-r4.ebuild:
1057     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1058     dropping the randomized PID feature.
1059 opfer 1.130
1060     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1061     hardened-sources-2.4.33.4.ebuild:
1062     stable x86, bug #161171
1063 phreak 1.129
1064     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1065    
1066     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1067     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1068     Revision bump for bug #157186 and #158786.
1069 phreak 1.128
1070     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1071    
1072     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1073     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1074     Revision bump for bug #157186.
1075 phreak 1.127
1076     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1077    
1078     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1079     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1080     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1081 phreak 1.126
1082     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1083     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1084     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1085     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1086     hardened-sources-2.6.19-r1.ebuild:
1087     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1088     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1089 pappy 1.125
1090     *hardened-sources-2.4.33.4 (17 Dec 2006)
1091    
1092     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1093     +hardened-sources-2.4.33.4.ebuild:
1094     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1095     and quilting
1096 phreak 1.124
1097     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1098    
1099     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1100     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1101     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1102     for reporting).
1103 phreak 1.123
1104     *hardened-sources-2.6.19 (13 Dec 2006)
1105    
1106     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1107     +hardened-sources-2.6.19.ebuild:
1108     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1109     Brad for providing that prompt update.
1110 phreak 1.122
1111     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1112    
1113     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1114     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1115     +hardened-sources-2.6.18-r3.ebuild:
1116     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1117     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1118 phreak 1.121
1119     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1120     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1121 nixnut 1.120
1122     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1123     Stable on ppc wrt bug 157356
1124 opfer 1.119
1125     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1126     hardened-sources-2.6.18.ebuild:
1127     stable x86, bug #157356
1128 phreak 1.118
1129     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1130    
1131     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1132     +hardened-sources-2.6.18-r2.ebuild:
1133     Revision bump, including 2.6.18.5 (via genpatches) and
1134     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1135     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1136     redesign.
1137 phreak 1.117
1138     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1139     hardened-sources-2.6.18.ebuild:
1140     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1141     of Mike Doty).
1142 phreak 1.116
1143     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1144    
1145     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1146     +hardened-sources-2.6.18-r1.ebuild:
1147     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1148 phreak 1.115
1149     *hardened-sources-2.6.18 (11 Nov 2006)
1150    
1151     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1152     +hardened-sources-2.6.18.ebuild:
1153     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1154 solar 1.114
1155     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1156     - mark amd64 stable also. bug #151877
1157 solar 1.113
1158     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1159     - mark 2.6.17-r1 stable
1160 phreak 1.112
1161     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1162     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1163     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1164 phreak 1.111
1165     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1166    
1167     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1168     +hardened-sources-2.6.17-r1.ebuild:
1169     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1170     grsecurity patch.
1171 phreak 1.110
1172     *hardened-sources-2.6.17 (17 Aug 2006)
1173    
1174     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1175     +hardened-sources-2.6.17.ebuild:
1176     Bumping the hardened-sources-2.6 series to 2.6.17, using
1177     genpatches-2.6.17-6.base.
1178 solar 1.109
1179     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1180     - stable on x86 and amd64
1181 solar 1.108
1182     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1183    
1184     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1185     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1186     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1187     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1188     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1189     crusty ebuilds
1190 johnm 1.107
1191     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1192     hardened-sources-2.6.16-r10.ebuild:
1193     marking stable on x86 and amd64
1194 solar 1.106
1195     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1196     - 2.4.32-r6 stable on x86. RSBAC state unknown
1197 kang 1.105
1198     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1199    
1200     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1201     +hardened-sources-2.4.32-r7.ebuild:
1202     Bump PaX for RSBAC to test-17
1203 johnm 1.104
1204     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1205    
1206     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1207     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1208     hardened-sources-2.6.16 bump to latest -base.
1209 solar 1.103
1210     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1211    
1212     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1213     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1214     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1215     sysctl controlable resource logging
1216 johnm 1.102
1217     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1218    
1219     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1220     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1221     push new 2.6.16 release in preparation for stable
1222 solar 1.101
1223     22 May 2006; <solar@gentoo.org> :
1224     - redigest bug 134002
1225 kang 1.100
1226     *hardened-sources-2.4.32-r5 (16 May 2006)
1227    
1228     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1229     +hardened-sources-2.4.32-r5.ebuild:
1230     Fixes rsbac common patching (new patch in new -r5 patchset)
1231 solar 1.99
1232     *hardened-sources-2.4.32-r4 (13 May 2006)
1233    
1234     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1235     +hardened-sources-2.4.32-r4.ebuild:
1236     - security bumps
1237 johnm 1.98
1238     *hardened-sources-2.6.16-r6 (03 May 2006)
1239    
1240     03 May 2006; John Mylchreest <johnm@gentoo.org>
1241     +hardened-sources-2.6.16-r6.ebuild:
1242     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1243 johnm 1.97
1244     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1245     hardened-sources-2.6.14-r8.ebuild:
1246     fix x86_64 build problem, this will delay the digest issue again for a short
1247     while but it will sort itself out
1248 johnm 1.96
1249     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1250     hardened-sources-2.6.14-r8.ebuild:
1251     bump hardened patchset
1252 antarus 1.94
1253     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1254     files/digest-hardened-sources-2.4.32-r2,
1255     files/digest-hardened-sources-2.4.32-r3,
1256     files/digest-hardened-sources-2.6.14-r8, Manifest:
1257     Fixing duff SHA256 digests: Bug # 131293
1258 johnm 1.93
1259 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1260    
1261     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1262     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1263     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1264     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1265     cleanup of old uneccessary sources
1266    
1267 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1268     fix digest
1269 johnm 1.92
1270     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1271    
1272     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1273     +hardened-sources-2.6.14-r8.ebuild:
1274     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1275 johnm 1.91
1276     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1277     Turning on gpg-signing again, and recomitting
1278 johnm 1.90
1279     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1280    
1281     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1282     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1283     +hardened-sources-2.6.16-r4.ebuild:
1284     Fix numerous security vulns
1285 solar 1.89
1286     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1287    
1288     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1289     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1290     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1291     - security bump for bug #112791. Removed old ebuilds
1292 johnm 1.88
1293     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1294    
1295     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1296     +hardened-sources-2.6.16-r3.ebuild:
1297     Removing silly localversion which I missed
1298 johnm 1.87
1299     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1300    
1301     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1302     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1303     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1304 johnm 1.86
1305     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1306    
1307     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1308     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1309     +hardened-sources-2.6.16-r2.ebuild:
1310     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1311     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1312 johnm 1.85
1313     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1314    
1315     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1316     +hardened-sources-2.6.16-r1.ebuild:
1317     Bumping to include ppc build fix and 2.6.16.3
1318 tsunam 1.84
1319     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1320     hardened-sources-2.6.14-r6.ebuild:
1321     Stable on x86; bug #127718
1322 johnm 1.83
1323     *hardened-sources-2.6.16 (31 Mar 2006)
1324    
1325     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1326     +hardened-sources-2.6.16.ebuild:
1327     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1328     2.6.16.1
1329 cryos 1.82
1330     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1331     hardened-sources-2.6.14-r6.ebuild:
1332     Stable on amd64, bug 127718.
1333 nixnut 1.81
1334     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1335     Stable on ppc. Bug #127718
1336 johnm 1.80
1337     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1338     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1339     -hardened-sources-2.6.14-r4.ebuild:
1340     Cleanup.
1341 johnm 1.79
1342     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1343    
1344     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1345     +hardened-sources-2.6.14-r6.ebuild:
1346     Fixes grsec policy recreation bug and adds a
1347     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1348 solar 1.78
1349     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1350     - stable on x86
1351 hansmi 1.77
1352     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1353     hardened-sources-2.6.14-r5.ebuild:
1354     Stable on ppc.
1355 johnm 1.76
1356     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1357    
1358     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1359     +hardened-sources-2.6.14-r5.ebuild:
1360     fixing every known exploit
1361 solar 1.75
1362     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1363    
1364     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1365     +hardened-sources-2.4.32-r2.ebuild:
1366     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1367 solar 1.74
1368     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1369    
1370     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1371     - version bump for new genpatches which fix up a few sec holes
1372 solar 1.73
1373     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1374    
1375     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1376     - revision bump to add misc vital linux kernel security patches.
1377 johnm 1.72
1378     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1379    
1380     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1381     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1382     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1383 johnm 1.71
1384     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1385     hardened-sources-2.6.14-r2.ebuild:
1386     making x86 & amd64 stable following testing.
1387 johnm 1.70
1388     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1389    
1390     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1391     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1392     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1393     network hooks.
1394 johnm 1.69
1395     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1396     hardened-sources-2.6.14-r1.ebuild:
1397     bumping to stable early for sec fix on x86 & amd64
1398 johnm 1.68
1399     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1400    
1401     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1402     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1403     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1404 solar 1.67
1405     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1406     - stable on x86 security bug #114227 CAN-2005-3257
1407 kang 1.66
1408     *hardened-sources-2.4.32 (19 Nov 2005)
1409    
1410     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1411     +hardened-sources-2.4.32.ebuild:
1412     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1413     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1414     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1415     rsbac >> /etc/portage/package.use)
1416 johnm 1.65
1417     *hardened-sources-2.6.14 (14 Nov 2005)
1418    
1419     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1420     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1421     Bumping 2.6 series to 2.6.14.2
1422 johnm 1.64
1423     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1424    
1425     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1426     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1427     +hardened-sources-2.6.13-r2.ebuild:
1428     Fixes minor build error in ppc.
1429 johnm 1.63
1430     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1431    
1432     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1433     +hardened-sources-2.6.13-r1.ebuild:
1434     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1435     2.6.13.4, fixes some major amd64 stability problems.
1436 johnm 1.62
1437     *hardened-sources-2.6.13 (16 Sep 2005)
1438    
1439     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1440     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1441     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1442     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1443     users should test this thoroughly.
1444 solar 1.61
1445     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1446     - stable on x86
1447 johnm 1.60
1448     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1449    
1450     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1451     +hardened-sources-2.6.11-r15.ebuild:
1452     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1453     grsec redefining curr_ip struct.
1454 solar 1.59
1455     *hardened-sources-2.4.31 (20 Jun 2005)
1456    
1457     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1458     initial import of 2.4.31 tree
1459 johnm 1.58
1460     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1461    
1462     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1463     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1464     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1465     naming scheme to abide by genpatches
1466 johnm 1.57
1467     *hardened-sources-2.6.11-r13 (18 May 2005)
1468    
1469     18 May 2005; John Mylchreest <johnm@gentoo.org>
1470     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1471     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1472     target. sorry about that. Fixes bug #93022
1473 johnm 1.56
1474     *hardened-sources-2.6.11-r12 (17 May 2005)
1475    
1476     17 May 2005; John Mylchreest <johnm@gentoo.org>
1477     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1478     +hardened-sources-2.6.11-r12.ebuild:
1479     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1480     merges in genpatches-base
1481 johnm 1.55
1482     *hardened-sources-2.6.11-r12 (17 May 2005)
1483    
1484     17 May 2005; John Mylchreest <johnm@gentoo.org>
1485     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1486     +hardened-sources-2.6.11-r12.ebuild:
1487     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1488     merges in genpatches-base
1489 solar 1.54
1490     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1491     -files/2.4.27-cmdline-race.patch,
1492     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1493     -files/2.4.28-grsec-binfmt_a.out.patch,
1494     -files/2.4.28-grsec-cmdline-race.patch,
1495     -files/2.4.28-selinux-binfmt_a.out.patch,
1496     -files/2.4.28-selinux-cmdline-race.patch,
1497     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1498     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1499     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1500     cleanup..
1501 solar 1.53
1502     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1503    
1504     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1505     - disable aout by default
1506 solar 1.52
1507     *hardened-sources-2.4.30 (18 Apr 2005)
1508    
1509     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1510     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1511     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1512     use
1513 tocharian 1.50
1514 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1515    
1516     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1517     +hardened-sources-2.4.29.ebuild:
1518     New hardened-patches-2.4-29.0 patchball.
1519     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1520    
1521     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1522    
1523     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1524     +hardened-sources-2.4.28-r5.ebuild:
1525     Added a fix for a PaX vulnerability.
1526    
1527     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1528 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1529     Stable on x86
1530 solar 1.49
1531     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1532     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1533     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1534     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1535     - fixed/added RDEPEND= in all kernel-2 ebuilds
1536 tocharian 1.48
1537     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1538    
1539     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1540     +hardened-sources-2.4.28-r4.ebuild:
1541     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1542     backport of neighbour hash updates.
1543 tocharian 1.47
1544     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1545     hardened-sources-2.4.28-r3.ebuild:
1546     Stable on x86
1547 tseng 1.46
1548     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1549    
1550     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1551     +hardened-sources-2.6.10-r3.ebuild:
1552     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1553     in 2005.0
1554 tocharian 1.45
1555     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1556     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1557     hardened-sources-2.4.28-r2.ebuild:
1558     Mark stable on x86
1559 tocharian 1.44
1560     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1561    
1562     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1563     +hardened-sources-2.4.28-r3.ebuild:
1564     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1565 tocharian 1.43
1566     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1567     hardened-sources-2.4.28.ebuild:
1568     Mark stable on x86.
1569 tocharian 1.42
1570     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1571    
1572     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1573     +hardened-sources-2.4.28-r2.ebuild:
1574     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1575     Mazinger for grsecurity patches as well.
1576 plasmaroo 1.41
1577     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1578    
1579     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1580     Security bump. Thank tocharian for rolling a new patchset...
1581 solar 1.40
1582     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1583     +files/2.4.28-grsec-cmdline-race.patch,
1584     +files/2.4.28-selinux-binfmt_a.out.patch,
1585     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1586     - Round up remaining security patches that appear to be missing in 2.4.28. -
1587     PaX standalone updated to current. hgpv=28.1
1588 solar 1.39
1589     *hardened-sources-2.4.28 (28 Nov 2004)
1590    
1591     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1592     security bump. Thank tocharian for rolling a new patchset
1593 scox 1.31
1594 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1595    
1596     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1597     +hardened-sources-2.4.27-r3.ebuild:
1598     Applies the new 2.4-27.2 patchball which updates
1599     GRSecurity to the 2.0.1 version.
1600    
1601 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1602    
1603     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1604     +hardened-sources-2.4.27-r2.ebuild:
1605     Version bump.
1606     This version uses the new 2.4-27.1 patchball which updates
1607     both the SELinux PaX hooks patch and the SELinux headers.
1608    
1609 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1610    
1611     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1612     +hardened-sources-2.4.27-r1.ebuild,
1613     -hardened-sources-2.4.27.ebuild,
1614     +files/2.4.27-cmdline-race.patch:
1615     Version bump, fix for cmdline race. See bug #59905.
1616    
1617     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1618    
1619     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1620     +hardened-sources-2.4.26-r6.ebuild,
1621     -hardened-sources-2.4.26-r5.ebuild,
1622     -hardened-sources-2.4.26-r4.ebuild,
1623     +files/2.4.26-cmdline-race.patch:
1624     Version bump, fix for cmdline race. See bug #59905.
1625    
1626 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1627    
1628     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1629     +hardened-sources-2.4.27.ebuild,
1630     +files/2.4.27-CAN-2004-0394.patch:
1631     Ported the patchball to the 2.4.27 kernel version.
1632    
1633 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1634    
1635     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1636     +hardened-sources-2.4.26-r5.ebuild:
1637 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1638 scox 1.34 It adds the following features:
1639     - Squashfs
1640     - Ebtables
1641     - Netdev random (core+drivers)
1642     - Watchdog Timer (WDT) fix.
1643    
1644 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1645    
1646     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1647     +hardened-sources-2.4.26-r4.ebuild,
1648     +files/2.4.26-CAN-2004-0415.patch,
1649     -hardened-sources-2.4.26-3:
1650     Version bump, fix for CAN 0415, see bug #59378.
1651    
1652 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1653    
1654     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1655     +hardened-sources-2.4.26-r3.ebuild,
1656     +files/2.4.26-CAN-2004-0497.patch,
1657     -hardened-sources-2.4.26-r2.ebuild:
1658     Version bump, fixed CAN 0497, see bug #56171.
1659    
1660 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1661    
1662     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1663 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1664 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1665     +files/2.4.26-CAN-2004-0535.patch,
1666     -hardened-sources-2.4.26-r1.ebuild:
1667     Fixes for both CAN 0495 and 0535, see bug #54976
1668 pvdabeel 1.27
1669 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1670     hardened-sources-2.4.26-r1.ebuild:
1671     QA - fix use invocation
1672 scox 1.28
1673     *hardened-sources-2.4.26-r1 (22 June 2004)
1674    
1675     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1676     +hardened-sources-2.4.26-r1.ebuild,
1677     +files/2.4.26-CAN-2004-0394.patch,
1678     +files/2.4.26-signal-race.patch,
1679     -hardened-sources-2.4.26.ebuild,
1680     -hardened-sources-2.4.24-r3.ebuild:
1681     Version bump for the CAN-2004-0394 issue and bug #53804
1682     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1683    
1684    
1685 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1686     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1687     Masked hardened-sources-2.4.26.ebuild broken for ppc
1688    
1689     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1690     hardened-sources-2.4.24-r3.ebuild:
1691     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1692 plasmaroo 1.25
1693 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1694    
1695     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1696     +hardened-sources-2.4.26.ebuild:
1697     Updated hardened-sources for the 2.4.26 kernel
1698     Removed broken components, updated almost everything.
1699    
1700 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1701    
1702     17 Apr 2004; <plasmaroo@gentoo.org>
1703     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1704     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1705     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1706     +hardened-sources-2.4.24-r3.ebuild:
1707     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1708     vulnerabilities. Old revisions removed.
1709 plasmaroo 1.24
1710     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1711    
1712     15 Apr 2004; <plasmaroo@gentoo.org>
1713     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1714     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1715     Version bump for the CAN-2004-0109 issue; bug #47881.
1716 aliz 1.23
1717     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1718     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1719     Add eutils to inherit.
1720 plasmaroo 1.22
1721     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1722    
1723     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1724     files/hardened-sources-2.4.24.munmap.patch:
1725     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1726 scox 1.19
1727 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1728 scox 1.26
1729 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1730     hardened-sources-2.4.24.ebuild:
1731     Version bump, updated most of the components.
1732     This release includes the following:
1733    
1734     - Hardened security
1735     - Netfilter patch-o-matic 20031219
1736     - FreeSWAN 2.04 & x509 1.4.8
1737     - EVMS 2.2.2
1738     - XFS 1.3.1
1739     - cryptoloop jari
1740     - grsecurity 2.0-rc4
1741     - SELinux
1742     - PaX 200402060000
1743     - PaX Obscurity 200308302223
1744     - Others...
1745    
1746     Neither -ck nor systrace are included anymore.
1747    
1748 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1749    
1750     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1751     hardened-sources-2.4.22-r2.ebuild:
1752 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1753 scox 1.19
1754     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1755 iggy 1.17
1756     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1757 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1758 iggy 1.16
1759     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1760 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1761     Version bump for the 'do_brk' vulnerability.
1762 iggy 1.15
1763     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1764     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1765     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1766     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1767 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1768 frogger 1.14
1769     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1770     hardened-sources-2.4.22.ebuild:
1771 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1772     components. These are no longer handled in the kernel
1773     so this code was not necessary.
1774 frogger 1.13
1775     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1776     New 2.4.22 based hardened-sources thanks to
1777     Phil West <p.west@computer.org>.
1778    
1779     These sources include:
1780 plasmaroo 1.18 - New SELinux API
1781     - Updated CK-base
1782     - Updated GRSec
1783     - Systrace
1784     - SuperFreeS/WAN 1.99.8
1785     - Propolice kernel build support
1786     - EVMS
1787     - Other various security related patches
1788 frogger 1.11
1789 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1790    
1791     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1792     Updated hardened-sources based on the 2.4.21 Linux kernel.
1793     This includes updates to most major components such as:
1794 plasmaroo 1.18 - ck-base-0306300059
1795     - selinux-2.4-2003071106
1796     - grsecurity-2.0-rc1
1797     - Updated IPTables patch-o-matic
1798     - Updated SuperFreeS/WAN
1799    
1800 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1801     updated patch set ready for the 2.4.21 based kernel.
1802    
1803 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1804     Initial import of hardened-sources-2.4.20-r4. This revision
1805     includes only a few changes, but one of these is an important
1806     security fix. It is recommended all users of hardened-sources
1807     upgrade to this release.
1808 plasmaroo 1.18
1809 frogger 1.11 - ioperm bug fix
1810     - fixed compilation failure when building without GRSec
1811 plasmaroo 1.18
1812 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1813     due to time constraints, but is planned for inclusion in the near
1814     future.
1815 msterret 1.10
1816     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1817    
1818     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1819     hardened-sources-2.4.20-r3.ebuild:
1820 plasmaroo 1.18 Add Header...
1821 frogger 1.9
1822     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1823     hardened-sources-2.4.20-r3.ebuild:
1824     Removed warnings from ebuild. This kernel should be safe to
1825     use at this point.
1826 frogger 1.8
1827     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1828    
1829     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1830     hardened-sources-2.4.20-r3.ebuild:
1831     New revision. Includes the following changes over -r2:
1832 plasmaroo 1.18
1833 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1834     - Super FreeS/WAN 1.99.7rc2
1835     - PaX for the LSM/SELinux branch
1836     - GRSecurity 2.0-pre4 (role based access control)
1837     - Systrace 1.3
1838     - EXT3 fixes
1839     - EVMS 2.0.1
1840     - GCC 3.1+ compile optimizations
1841     - ProPolice kernel build support
1842     - Hashing table security fixes
1843 frogger 1.3
1844     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1845 frogger 1.7
1846     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1847     Initial import of hardened-sources-r2. This new
1848     ebuild includes many new performance and security
1849     related patches. As in -r1, it will patch in
1850     LSM/SELinux if "selinux" is in USE, otherwise it
1851     will patch in GRSecurity. The following patches
1852     are included in this revision:
1853 plasmaroo 1.18
1854 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1855     (pulled from the base CK patch)
1856     - ptrace exploit patch for the LSM kernel
1857     (the GRSec patch already fixes this)
1858     - LSM 2.4-2003040709
1859     - SELinux 2.4-2003040709
1860     - Systrace v1.2
1861     - IPTables patch-o-matic base patches - 20030107
1862     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1863     - Super FreeS/WAN 1.99.6.1
1864     - GRSecurity 1.9.9g
1865     - MPPE
1866     - EXT3 data journal fix
1867     - CIPE 1.5.4
1868 frogger 1.6
1869     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1870     hardened-sources-2.4.20-r1.ebuild, manifest:
1871 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1872 frogger 1.5
1873     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1874     hardened-sources-2.4.20-r1.ebuild:
1875     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1876     is patched in instead. Ptrace patches for selinux have also been added. In
1877     either case, systrace support will be patched in as well.
1878 frogger 1.3
1879     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1880     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1881 plasmaroo 1.18 Revision bump for new sources.
1882 frogger 1.4
1883 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1884 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1885 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1886 method 1.1
1887 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1888    
1889 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1890     hardened-sources-2.4.20.ebuild:
1891 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20