/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log

Revision 1.331 - (hide annotations) (download)
Sat Aug 14 19:18:30 2010 UTC (7 years, 8 months ago) by blueness
Branch: MAIN
Changes since 1.330: +8 -1 lines 
Based on vanilla 2.6.32.18 + genpatches + grsecurity-2.2.0-2.6.32.18-201008112233
(Portage version: 2.1.8.3/cvs/Linux x86_64)
1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.331 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.330 2010/08/03 17:19:29 robbat2 Exp $
4    
5     *hardened-sources-2.6.32-r13 (14 Aug 2010)
6    
7     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
8     +hardened-sources-2.6.32-r13.ebuild:
9     Based on vanilla 2.6.32.18 + genpatches +
10     grsecurity-2.2.0-2.6.32.18-201008112233
11 robbat2 1.330
12     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
13     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
14 blueness 1.329
15     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
16     hardened-sources-2.6.32-r9.ebuild:
17     Stable ppc64. Bug #326885
18 blueness 1.328
19     *hardened-sources-2.6.32-r12 (24 Jul 2010)
20    
21     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
22     +hardened-sources-2.6.32-r12.ebuild:
23     Parallels fix incorporated into hardened-sources-2.6.34-r1
24 blueness 1.327
25     *hardened-sources-2.6.34-r1 (24 Jul 2010)
26    
27     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
28     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
29     Fixes bug #328275
30 chainsaw 1.326
31     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
32     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
33     on gentoo-dev.
34 jer 1.325
35     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
36     Correct mail address.
37 blueness 1.324
38     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
39     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
40     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
41     -hardened-sources-2.6.32-r8.ebuild:
42     Removing outdated releases
43 fauli 1.323
44     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
45     hardened-sources-2.6.32-r9.ebuild:
46     stable x86, bug 326885
47 blueness 1.322
48     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
49     -hardened-sources-2.6.32-r7.ebuild:
50     Removed for security. Bug #325573
51 blueness 1.321
52     *hardened-sources-2.6.34 (13 Jul 2010)
53    
54     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
55     +hardened-sources-2.6.34.ebuild:
56     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
57 blueness 1.320
58     *hardened-sources-2.6.32-r11 (13 Jul 2010)
59    
60     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
61     +hardened-sources-2.6.32-r11.ebuild:
62     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
63 chainsaw 1.319
64     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
65     Marked stable on AMD64 as requested by Anthony G. Basile
66     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
67     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
68 blueness 1.318
69     *hardened-sources-2.6.32-r10 (30 Jun 2010)
70    
71     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
72     +hardened-sources-2.6.32-r10.ebuild:
73     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
74 blueness 1.317
75     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
76     Added myself to the metadata.xml
77 chainsaw 1.316
78     *hardened-sources-2.6.32-r9 (11 Jun 2010)
79    
80     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
81     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
82 chainsaw 1.315
83     *hardened-sources-2.6.32-r8 (01 Jun 2010)
84    
85     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
86     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
87 chainsaw 1.314
88     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
89     Update SRC_URI to point to mirror network now that the distfile has
90     propagated.
91 chainsaw 1.313
92     *hardened-sources-2.6.32-r7 (26 May 2010)
93    
94     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
95     metadata.xml:
96     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
97     Summers.
98 robbat2 1.312
99     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
100     Update Manifest for deblob support in kernel-2 eclass.
101 nixnut 1.311
102     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
103     ppc stable
104 gengor 1.310
105     29 May 2009; Gordon Malm <gengor@gentoo.org>
106     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
107     Stable amd64/x86 and remove old.
108 gengor 1.309
109     *hardened-sources-2.6.29 (25 May 2009)
110    
111     25 May 2009; Gordon Malm <gengor@gentoo.org>
112     +hardened-sources-2.6.29.ebuild:
113     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
114     release candidates.
115 gengor 1.308
116     *hardened-sources-2.6.28-r9 (25 May 2009)
117    
118     25 May 2009; Gordon Malm <gengor@gentoo.org>
119     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
120     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
121 gengor 1.307
122     *hardened-sources-2.6.28-r8 (18 May 2009)
123    
124     18 May 2009; Gordon Malm <gengor@gentoo.org>
125     +hardened-sources-2.6.28-r8.ebuild:
126     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
127     and #262862 among others.
128 gengor 1.306
129     01 May 2009; Gordon Malm <gengor@gentoo.org>
130     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
131     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
132     Remove unnecessary mirror://gentoo from SRC_URI.
133 nixnut 1.305
134     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
135     ppc stable
136 gengor 1.304
137     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
138     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
139     Stable amd64/x86 and remove old.
140 gengor 1.303
141     *hardened-sources-2.6.28-r7 (27 Mar 2009)
142    
143     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
144     +hardened-sources-2.6.28-r7.ebuild:
145     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
146 gengor 1.302
147     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
148     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
149     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
150     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
151     Stable amd64/x86 and remove old versions.
152 nixnut 1.301
153     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
154     ppc stable
155 gengor 1.300
156     *hardened-sources-2.6.28-r6 (21 Mar 2009)
157    
158     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
159     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
160     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
161 gengor 1.299
162     *hardened-sources-2.6.28-r5 (20 Mar 2009)
163    
164     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
165     +hardened-sources-2.6.28-r5.ebuild:
166     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
167 gengor 1.298
168     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
169     hardened-sources-2.6.28-r4.ebuild:
170     Stable amd64/x86.
171 gengor 1.297
172     *hardened-sources-2.6.28-r4 (18 Mar 2009)
173    
174     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
175     +hardened-sources-2.6.28-r4.ebuild:
176     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
177     compilation with CPA_DEBUG and more.
178 gengor 1.296
179     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
180     hardened-sources-2.6.28-r3.ebuild:
181     Quick stable amd64/x86.
182 gengor 1.295
183     *hardened-sources-2.6.28-r3 (15 Mar 2009)
184    
185     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
186     +hardened-sources-2.6.28-r3.ebuild:
187     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
188 nixnut 1.294
189     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
190     ppc stable
191 gengor 1.293
192     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
193     hardened-sources-2.6.28-r2.ebuild:
194     Stable amd64/x86.
195 gengor 1.292
196     *hardened-sources-2.6.28-r2 (11 Mar 2009)
197    
198     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
199     +hardened-sources-2.6.28-r2.ebuild:
200     Version bump bringing in latest grsecurity patch.
201 gengor 1.291
202     *hardened-sources-2.6.28-r1 (09 Mar 2009)
203    
204     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
205     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
206     Version bump and remove old.
207 nixnut 1.290
208     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
209     ppc stable
210 gengor 1.289
211     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
212     hardened-sources-2.6.27-r8.ebuild:
213     Remove amd64 testing keyword, bug 256226.
214 gengor 1.288
215     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
216     hardened-sources-2.6.27-r8.ebuild:
217     Revert amd64 stable, bug #256226.
218 gengor 1.287
219     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
220     hardened-sources-2.6.27-r8.ebuild:
221     Stable on amd64/x86.
222 gengor 1.286
223     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
224     -hardened-sources-2.6.27-r6.ebuild:
225     Remove old 2.6.27 release.
226 gengor 1.285
227     *hardened-sources-2.6.27-r8 (24 Feb 2009)
228    
229     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
230     +hardened-sources-2.6.27-r8.ebuild:
231     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
232     and probably more.
233 nixnut 1.284
234     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
235     ppc stable
236 gengor 1.283
237     *hardened-sources-2.6.28 (25 Jan 2009)
238    
239     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
240     +hardened-sources-2.6.28.ebuild:
241     Initial 2.6.28 release.
242 gengor 1.282
243     *hardened-sources-2.6.27-r7 (25 Jan 2009)
244    
245     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
246     +hardened-sources-2.6.27-r7.ebuild:
247     Bump to Linux 2.6.27.13.
248 gengor 1.281
249     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
250     hardened-sources-2.6.26-r9.ebuild:
251     Stable amd64/x86.
252 gengor 1.280
253     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
254     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
255     -hardened-sources-2.6.27-r5.ebuild:
256     Remove problem versions.
257 gengor 1.279
258     *hardened-sources-2.6.27-r6 (24 Jan 2009)
259    
260     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
261     +hardened-sources-2.6.27-r6.ebuild:
262     Revert PaX test29 to test30 changes. Fixes bug 256226.
263 gengor 1.277
264     *hardened-sources-2.6.27-r5 (24 Jan 2009)
265    
266     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
267     +hardened-sources-2.6.27-r5.ebuild:
268 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
269 gengor 1.277 254843.
270 gengor 1.276
271     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
272     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
273     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
274     Remove problem versions.
275 nixnut 1.275
276     23 Jan 2009; nixnut <nixnut@gentoo.org>
277     hardened-sources-2.6.25-r13.ebuild:
278     ppc stable
279 gengor 1.274
280     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
281     hardened-sources-2.6.25-r13.ebuild:
282     Fasttrack stable amd64/x86.
283 gengor 1.273
284     *hardened-sources-2.6.26-r9 (21 Jan 2009)
285    
286     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
287     +hardened-sources-2.6.26-r9.ebuild:
288 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
289 gengor 1.272
290     *hardened-sources-2.6.25-r13 (20 Jan 2009)
291    
292     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
293     +hardened-sources-2.6.25-r13.ebuild:
294 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
295 nixnut 1.271
296     20 Jan 2009; nixnut <nixnut@gentoo.org>
297     hardened-sources-2.6.25-r12.ebuild:
298     ppc stable
299 gengor 1.270
300     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
301     hardened-sources-2.6.25-r12.ebuild:
302     Stable amd64/x86.
303 gengor 1.269
304     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
305     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
306     -hardened-sources-2.6.27-r2.ebuild:
307     Clean out old versions.
308 gengor 1.268
309     *hardened-sources-2.6.27-r4 (14 Jan 2009)
310     *hardened-sources-2.6.26-r8 (14 Jan 2009)
311     *hardened-sources-2.6.25-r12 (14 Jan 2009)
312    
313     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
314     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
315     +hardened-sources-2.6.27-r4.ebuild:
316     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
317     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
318     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
319     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
320 nixnut 1.267
321     15 Dec 2008; nixnut <nixnut@gentoo.org>
322     hardened-sources-2.6.25-r11.ebuild:
323     Stable on ppc
324 gengor 1.266
325     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
326     hardened-sources-2.6.25-r11.ebuild:
327     Stable amd64/x86.
328 gengor 1.265
329     *hardened-sources-2.6.27-r3 (07 Dec 2008)
330    
331     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
332     +hardened-sources-2.6.27-r3.ebuild:
333     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
334     Fixes bug #248754, #249729 and #246607.
335 gengor 1.264
336     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
337     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
338     Remove old versions.
339 gengor 1.262
340     *hardened-sources-2.6.26-r7 (03 Dec 2008)
341     *hardened-sources-2.6.25-r11 (03 Dec 2008)
342    
343 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
344     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
345 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
346     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
347     Both include many backports from 2.6.27.{6,7} -stable releases.
348 gengor 1.261
349     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
350     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
351     Remove versions broken on ARCHes != x86/amd64.
352 gengor 1.260
353     *hardened-sources-2.6.27-r2 (24 Nov 2008)
354    
355     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
356     +hardened-sources-2.6.27-r2.ebuild:
357     Bump to Linux 2.6.27.7 and latest grsecurity patch.
358 gengor 1.259
359     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
360     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
361     Remove old versions.
362 gengor 1.258
363     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
364     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
365     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
366 nixnut 1.257
367     16 Nov 2008; nixnut <nixnut@gentoo.org>
368     hardened-sources-2.6.25-r10.ebuild:
369     Stable on ppc
370 gengor 1.256
371     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
372     hardened-sources-2.6.25-r10.ebuild:
373     Stable amd64/x86.
374 gengor 1.255
375     *hardened-sources-2.6.26-r6 (12 Nov 2008)
376    
377     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
378     +hardened-sources-2.6.26-r6.ebuild:
379     Bump to Linux 2.6.26.8 and fix security bug #245650.
380 gengor 1.254
381     *hardened-sources-2.6.25-r10 (12 Nov 2008)
382    
383     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
384     +hardened-sources-2.6.25-r10.ebuild:
385     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
386 gengor 1.253
387     *hardened-sources-2.6.27-r1 (09 Nov 2008)
388    
389     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
390     +hardened-sources-2.6.27-r1.ebuild:
391     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
392 gengor 1.252
393     *hardened-sources-2.6.27 (04 Nov 2008)
394    
395     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
396     +hardened-sources-2.6.27.ebuild:
397     Initial 2.6.27 release.
398 gengor 1.251
399     *hardened-sources-2.6.26-r5 (03 Nov 2008)
400    
401     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
402     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
403     +hardened-sources-2.6.26-r5.ebuild:
404     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
405     Clean out some old versions.
406 nixnut 1.250
407     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
408     Stable on ppc
409 gengor 1.249
410     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
411     hardened-sources-2.6.25-r9.ebuild:
412     Stable on amd64/x86.
413 gengor 1.248
414     *hardened-sources-2.6.25-r9 (26 Oct 2008)
415    
416     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
417     +hardened-sources-2.6.25-r9.ebuild:
418     Update to Linux 2.6.25.19
419 nixnut 1.247
420     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
421     Stable on ppc
422 gengor 1.246
423     *hardened-sources-2.6.26-r4 (14 Oct 2008)
424    
425     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
426     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
427     Update to latest grsecurity patch, fixing building of non-modular kernels.
428 gengor 1.245
429     *hardened-sources-2.6.26-r3 (12 Oct 2008)
430    
431     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
432     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
433     +hardened-sources-2.6.26-r3.ebuild:
434     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
435     2.6.26-r1: Removed.
436     2.6.25-r8: Stable amd64/x86.
437 gengor 1.244
438     *hardened-sources-2.6.25-r8 (09 Oct 2008)
439    
440     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
441     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
442     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
443     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
444 nixnut 1.243
445     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
446     Stable on ppc
447 gengor 1.242
448     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
449     hardened-sources-2.6.25-r7.ebuild:
450     Stable amd64/x86.
451 gengor 1.241
452     *hardened-sources-2.6.26-r2 (13 Sep 2008)
453    
454     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
455     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
456     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
457     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
458 gengor 1.240
459     *hardened-sources-2.6.25-r7 (13 Sep 2008)
460    
461     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
462     +hardened-sources-2.6.25-r7.ebuild:
463     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
464 gengor 1.239
465     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
466     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
467     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
468     hardened-sources-2.6.26-r1.ebuild:
469     Update DESCRIPTION and HGPV_URI.
470 gengor 1.238
471     *hardened-sources-2.6.25-r6 (09 Sep 2008)
472    
473     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
474     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
475     2.6.25-r6: Update to Linux 2.6.25.17.
476     2.6.24-r3: Removed.
477 gengor 1.237
478     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
479     hardened-sources-2.6.25-r5.ebuild:
480     Stable on amd64/x86
481 gengor 1.236
482     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
483     Update my email address.
484 nixnut 1.235
485     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
486     stable on ppc
487 battousai 1.234
488     *hardened-sources-2.6.26-r1 (23 Aug 2008)
489     *hardened-sources-2.6.25-r5 (23 Aug 2008)
490    
491     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
492     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
493     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
494     +hardened-sources-2.6.26-r1.ebuild:
495     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
496     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
497     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
498     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
499     (gengor).
500 solar 1.233
501     *hardened-sources-2.6.26 (18 Aug 2008)
502     *hardened-sources-2.6.25-r4 (18 Aug 2008)
503    
504     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
505     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
506     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
507     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
508     2.6.25-r2: Removed.
509 tove 1.232
510     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
511     Remove phreak from metadata.xml (#96398)
512 solar 1.231
513     *hardened-sources-2.6.25-r3 (31 Jul 2008)
514    
515     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
516     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
517     +hardened-sources-2.6.25-r3.ebuild:
518     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
519     fixes, including security bug #231750.
520 nixnut 1.230
521     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
522     Stable on ppc
523 solar 1.229
524     *hardened-sources-2.6.25-r2 (05 Jul 2008)
525    
526     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
527     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
528     +hardened-sources-2.6.25-r2.ebuild:
529     2.6.23-r4: Stable x86/amd64
530     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
531     2.6.23-r{11,12}: Removed due to multiple vulns.
532     (gengor & kerframil)
533 nixnut 1.228
534     04 Jul 2008; nixnut <nixnut@gentoo.org>
535     hardened-sources-2.6.23-r13.ebuild:
536     Stable on ppc
537 solar 1.227
538     *hardened-sources-2.6.25-r1 (30 Jun 2008)
539    
540     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
541     +hardened-sources-2.6.25-r1.ebuild:
542     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
543     grsecurity release. 2.6.23-r13: x86/amd64 stable
544 solar 1.226
545     *hardened-sources-2.6.25 (17 Jun 2008)
546     *hardened-sources-2.6.24-r3 (17 Jun 2008)
547     *hardened-sources-2.6.23-r13 (17 Jun 2008)
548    
549     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
550     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
551     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
552     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
553     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
554     2.6.25: Initial 2.6.25 release.
555 solar 1.225
556     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
557     - fasttrack to stable x86/amd64
558 swegener 1.224
559     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
560     Fix broken digest for linux-2.6.24.tar.bz2.
561 solar 1.223
562     *hardened-sources-2.6.24-r2 (11 May 2008)
563     *hardened-sources-2.6.23-r12 (11 May 2008)
564    
565     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
566     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
567     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
568     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
569     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
570     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
571     security bugs 219901, 220691, 220975, 220979, 221123. New
572     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
573     should be removed as far as I'm concerned, everything else remove due to
574     vulnerable to numerous security bugs or brokeness.
575 nixnut 1.222
576     10 May 2008; nixnut <nixnut@gentoo.org>
577     hardened-sources-2.6.23-r11.ebuild:
578     Stable on ppc
579 solar 1.221
580     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
581     - -r11 stable on x86/amd64
582 solar 1.220
583     *hardened-sources-2.6.23-r11 (01 May 2008)
584    
585     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
586     - version bump to fix ulgy linux bugs
587 phreak 1.219
588     *hardened-sources-2.6.24-r1 (30 Apr 2008)
589    
590     30 Apr 2008; Christian Heim <phreak@gentoo.org>
591     +hardened-sources-2.6.24-r1.ebuild:
592     Revision bump (thanks to Kerin and Gordon, again), pulling
593     genpatches-2.6.24-7, solving #219089. Additionally contains further security
594     fixes plus some minor updates.
595 phreak 1.218
596     *hardened-sources-2.6.23-r10 (30 Apr 2008)
597    
598     30 Apr 2008; Christian Heim <phreak@gentoo.org>
599     +hardened-sources-2.6.23-r10.ebuild:
600     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
601     Additional contains "various other fixes".
602 phreak 1.217
603     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
604     Update the longdescription in metadata, thanks to Gordon Malm.
605 nixnut 1.216
606     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
607     Stable on ppc wrt bug #213255
608 solar 1.215
609     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
610     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
611     - stable on x86/amd64 per request. Removed obsolete ebuilds
612 phreak 1.214
613     *hardened-sources-2.6.24 (07 Apr 2008)
614    
615     07 Apr 2008; Christian Heim <phreak@gentoo.org>
616     +hardened-sources-2.6.24.ebuild:
617     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
618     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
619     for the many contributions and their continued effort in #216612) based on
620     2.6.24 and genpatches-2.6.24-5.
621    
622     The current ebuild/patchset contains these things:
623     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
624     * Introduces bespoke server and workstation oriented security levels
625     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
626 phreak 1.213
627     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
628     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
629     maintaining it).
630 phreak 1.212
631     24 Mar 2008; Christian Heim <phreak@gentoo.org>
632     hardened-sources-2.4.35-r2.ebuild:
633     Fixing SRC_URI for 2.4.35-r2.
634 phreak 1.211
635     *hardened-sources-2.6.23-r9 (22 Mar 2008)
636    
637     22 Mar 2008; Christian Heim <phreak@gentoo.org>
638     +hardened-sources-2.6.23-r9.ebuild:
639     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
640     * Change the default GIDs for some grsecurity options
641     * Revamp the Hardened [Gentoo] security level and make it the default level
642     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
643     * Fix a recursive lock -- call to capable() within ptrace_attach()
644     * Fix bug that allows audit and iscsi operations to be controlled via netlink
645 solar 1.210
646     *hardened-sources-2.6.23-r8 (27 Feb 2008)
647    
648     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
649     - version bump from Kerin Millar bug 210026
650 solar 1.209
651     17 Feb 2008; <solar@gentoo.org> metadata.xml,
652     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
653     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
654     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
655     - stable on x86 and remove old ebuilds
656 solar 1.207
657     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
658 solar 1.208 - stable on amd64 per request of amd64 lead
659 solar 1.206
660     *hardened-sources-2.6.23-r7 (11 Feb 2008)
661    
662     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
663     - version bump from kerin.millar
664     Changes:
665    
666     * Bump to genpatches-base-2.6.23-9
667     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
668     * Disables COMPAT_VDSO in x86/defconfig
669     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
670 phreak 1.205
671     25 Jan 2008; Christian Heim <phreak@gentoo.org>
672     -hardened-sources-2.6.22-r8.ebuild:
673     Cleaning up old versions.
674 phreak 1.204
675     *hardened-sources-2.6.23-r6 (25 Jan 2008)
676    
677     25 Jan 2008; Christian Heim <phreak@gentoo.org>
678     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
679     Revision bump, pulling in the latest genpatches.
680 phreak 1.203
681     *hardened-sources-2.6.23-r5 (24 Dec 2007)
682    
683     24 Dec 2007; Christian Heim <phreak@gentoo.org>
684     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
685     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
686     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
687     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
688 phreak 1.202
689     24 Dec 2007; Christian Heim <phreak@gentoo.org>
690     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
691     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
692     -hardened-sources-2.6.23-r3.ebuild:
693     Cleaning out some unused, old versions.
694 phreak 1.201
695     24 Dec 2007; Christian Heim <phreak@gentoo.org>
696     hardened-sources-2.6.23-r4.ebuild:
697     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
698     in the tree for long, but there isn't much of a difference between this and
699     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
700 phreak 1.200
701     *hardened-sources-2.6.23-r4 (23 Dec 2007)
702    
703     23 Dec 2007; Christian Heim <phreak@gentoo.org>
704     +hardened-sources-2.6.23-r4.ebuild:
705     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
706 phreak 1.199
707     *hardened-sources-2.6.23-r3 (04 Dec 2007)
708    
709     04 Dec 2007; Christian Heim <phreak@gentoo.org>
710     +hardened-sources-2.6.23-r3.ebuild:
711     Revision bump, pulling in 2.6.23.9.
712 phreak 1.198
713     *hardened-sources-2.6.23-r2 (25 Nov 2007)
714    
715     25 Nov 2007; Christian Heim <phreak@gentoo.org>
716     +hardened-sources-2.6.23-r2.ebuild:
717     Updated patchset, thanks to solar.
718 phreak 1.197
719     *hardened-sources-2.6.23-r1 (31 Oct 2007)
720    
721     31 Oct 2007; Christian Heim <phreak@gentoo.org>
722     +hardened-sources-2.6.23-r1.ebuild:
723     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
724 solar 1.196
725     29 Oct 2007; <solar@gentoo.org> metadata.xml:
726     - update metadata.xml
727 phreak 1.195
728     25 Oct 2007; Christian Heim <phreak@gentoo.org>
729     hardened-sources-2.6.22-r8.ebuild:
730     Marking 2.6.22-r8 stable on amd64 and x86.
731 phreak 1.194
732     21 Oct 2007; Christian Heim <phreak@gentoo.org>
733     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
734     -hardened-sources-2.6.21-r4.ebuild:
735     Removing old ebuilds.
736 phreak 1.193
737     *hardened-sources-2.4.35-r2 (21 Oct 2007)
738    
739     21 Oct 2007; Christian Heim <phreak@gentoo.org>
740     +hardened-sources-2.4.35-r2.ebuild:
741     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
742     patches.
743 phreak 1.192
744     *hardened-sources-2.6.22-r8 (21 Oct 2007)
745    
746     21 Oct 2007; Christian Heim <phreak@gentoo.org>
747     +hardened-sources-2.6.22-r8.ebuild:
748     Yet another new patch, hopefully fixing the remaining issues we had w/
749     2.6.22. Candidate for stabling.
750 phreak 1.191
751     *hardened-sources-2.6.23 (13 Oct 2007)
752    
753     13 Oct 2007; Christian Heim <phreak@gentoo.org>
754     +hardened-sources-2.6.23.ebuild:
755     Initial hardened-sources-2.6.23. If people still have problems w/ bug
756     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
757 phreak 1.190
758     11 Oct 2007; Christian Heim <phreak@gentoo.org>
759     hardened-sources-2.6.20-r10.ebuild:
760     Pulling in yet another new genpatches version, fixing the PWC bug for real.
761 phreak 1.189
762     04 Oct 2007; Christian Heim <phreak@gentoo.org>
763     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
764     Removing old versions.
765 phreak 1.188
766     *hardened-sources-2.6.22-r7 (01 Oct 2007)
767    
768     01 Oct 2007; Christian Heim <phreak@gentoo.org>
769     +hardened-sources-2.6.22-r7.ebuild:
770     Revision bump, pulling in a newer patch. Should fix #194276.
771 phreak 1.187
772     30 Sep 2007; Christian Heim <phreak@gentoo.org>
773     hardened-sources-2.6.20-r10.ebuild:
774     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
775     Mike Doty).
776 phreak 1.186
777     *hardened-sources-2.6.22-r6 (26 Sep 2007)
778    
779     26 Sep 2007; Christian Heim <phreak@gentoo.org>
780     +hardened-sources-2.6.22-r6.ebuild:
781     Revision bump, grabbing up till Linux 2.6.22.9.
782 phreak 1.185
783     24 Sep 2007; Christian Heim <phreak@gentoo.org>
784     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
785     Cleaning up further.
786 phreak 1.184
787     *hardened-sources-2.6.20-r10 (24 Sep 2007)
788    
789     24 Sep 2007; Christian Heim <phreak@gentoo.org>
790     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
791     +hardened-sources-2.6.20-r10.ebuild:
792     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
793     revisions.
794 phreak 1.183
795     *hardened-sources-2.6.22-r5 (22 Sep 2007)
796    
797     22 Sep 2007; Christian Heim <phreak@gentoo.org>
798     +hardened-sources-2.6.22-r5.ebuild:
799     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
800 phreak 1.182
801     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
802     Removing johnm from metadata.xml (see #186467 for reference).
803 phreak 1.181
804     *hardened-sources-2.6.22-r4 (17 Sep 2007)
805    
806     17 Sep 2007; Christian Heim <phreak@gentoo.org>
807     +hardened-sources-2.6.22-r4.ebuild:
808     Revision bump, hopefully fixing all those weird PAX failures.
809 phreak 1.180
810     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
811     Updating the metadata.xml.
812 phreak 1.179
813     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
814     Removing tocharian from metadata due to his retirement (see #71718 for
815     reference).
816 phreak 1.178
817     *hardened-sources-2.6.20-r9 (30 Aug 2007)
818    
819     30 Aug 2007; Christian Heim <phreak@gentoo.org>
820     +hardened-sources-2.6.20-r9.ebuild:
821     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
822 phreak 1.177
823     29 Aug 2007; Christian Heim <phreak@gentoo.org>
824     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
825     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
826     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
827     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
828     -hardened-sources-2.6.22-r2.ebuild:
829     Removing some redundant versions.
830 phreak 1.176
831     *hardened-sources-2.4.35-r1 (29 Aug 2007)
832    
833     29 Aug 2007; Christian Heim <phreak@gentoo.org>
834     +hardened-sources-2.4.35-r1.ebuild:
835     Revision bump, new grsecurity patch.
836 phreak 1.175
837     *hardened-sources-2.6.20-r8 (26 Aug 2007)
838    
839     26 Aug 2007; Christian Heim <phreak@gentoo.org>
840     +hardened-sources-2.6.20-r8.ebuild:
841     Revision bump for Linux 2.6.20.17.
842 phreak 1.174
843     *hardened-sources-2.6.22-r3 (22 Aug 2007)
844    
845     22 Aug 2007; Christian Heim <phreak@gentoo.org>
846     +hardened-sources-2.6.22-r3.ebuild:
847     Revision bump for Linux 2.6.22.4.
848 phreak 1.173
849     16 Aug 2007; Christian Heim <phreak@gentoo.org>
850     hardened-sources-2.6.22-r2.ebuild:
851     Updated patchset, to fix the alignment against 2.6.22.3.
852 phreak 1.172
853     *hardened-sources-2.6.22-r2 (16 Aug 2007)
854    
855     16 Aug 2007; Christian Heim <phreak@gentoo.org>
856     +hardened-sources-2.6.22-r2.ebuild:
857     Revision bump for Linux 2.6.22.3.
858 phreak 1.171
859     *hardened-sources-2.4.35 (16 Aug 2007)
860    
861     16 Aug 2007; Christian Heim <phreak@gentoo.org>
862     +hardened-sources-2.4.35.ebuild:
863     Version bump, initial version for Linux 2.4.35.
864 phreak 1.170
865     *hardened-sources-2.6.21-r4 (16 Aug 2007)
866    
867     16 Aug 2007; Christian Heim <phreak@gentoo.org>
868     +hardened-sources-2.6.21-r4.ebuild:
869     Revision bump for Linux 2.6.21.6.
870 phreak 1.169
871     *hardened-sources-2.6.20-r7 (16 Aug 2007)
872    
873     16 Aug 2007; Christian Heim <phreak@gentoo.org>
874     +hardened-sources-2.6.20-r7.ebuild:
875     Revision bump for Linux 2.6.20.16.
876 phreak 1.168
877     *hardened-sources-2.6.22-r1 (13 Aug 2007)
878    
879     13 Aug 2007; Christian Heim <phreak@gentoo.org>
880     +hardened-sources-2.6.22-r1.ebuild:
881     Yet another revision bump.
882 phreak 1.167
883     *hardened-sources-2.6.22 (10 Aug 2007)
884    
885     10 Aug 2007; Christian Heim <phreak@gentoo.org>
886     +hardened-sources-2.6.22.ebuild:
887     Initial release for 2.6.22. If you are using hardened-sources on a desktop
888     machine (P4 or newer), be aware you might need to disable
889     CONFIG_PAX_PAGEEXEC.
890 phreak 1.166
891     04 Aug 2007; Christian Heim <phreak@gentoo.org>
892     hardened-sources-2.6.20-r6.ebuild:
893     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
894     2.6.20.15.
895 phreak 1.165
896     10 Jul 2007; Christian Heim <phreak@gentoo.org>
897     hardened-sources-2.6.20-r5.ebuild:
898     Marking hardened-sources-2.6.20-r5 stable on ppc.
899 phreak 1.164
900     10 Jul 2007; Christian Heim <phreak@gentoo.org>
901     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
902     Cleanup.
903 phreak 1.163
904     *hardened-sources-2.6.20-r6 (08 Jul 2007)
905    
906     08 Jul 2007; Christian Heim <phreak@gentoo.org>
907     +hardened-sources-2.6.20-r6.ebuild:
908     Revision bump, grabbing yet another stable release.
909 phreak 1.162
910     17 Jun 2007; Christian Heim <phreak@gentoo.org>
911     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
912     -hardened-sources-2.6.21-r2.ebuild:
913     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
914     alpha stable KEYWORD by mistake.
915 phreak 1.161
916     17 Jun 2007; Christian Heim <phreak@gentoo.org>
917     hardened-sources-2.6.20-r5.ebuild:
918     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
919     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
920 phreak 1.160
921     *hardened-sources-2.6.21-r3 (12 Jun 2007)
922    
923     12 Jun 2007; Christian Heim <phreak@gentoo.org>
924     +hardened-sources-2.6.21-r3.ebuild:
925     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
926     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
927     love.
928 phreak 1.159
929     *hardened-sources-2.6.20-r5 (11 Jun 2007)
930    
931     11 Jun 2007; Christian Heim <phreak@gentoo.org>
932     +hardened-sources-2.6.20-r5.ebuild:
933     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
934     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
935     love.
936 pappy 1.158
937     *hardened-sources-2.4.34.5 (11 Jun 2007)
938    
939     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
940     +hardened-sources-2.4.34.5.ebuild:
941     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
942 phreak 1.157
943     30 May 2007; Christian Heim <phreak@gentoo.org>
944     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
945     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
946     stale ebuild(s).
947 phreak 1.156
948     30 May 2007; Christian Heim <phreak@gentoo.org>
949     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
950     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
951     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
952     Doing some cleanups, remove stale ebuilds.
953 phreak 1.155
954     26 May 2007; Christian Heim <phreak@gentoo.org>
955     hardened-sources-2.6.21-r2.ebuild:
956     Fixing the grsecurity patch, had one '};' too much.
957 phreak 1.154
958     *hardened-sources-2.6.21-r2 (26 May 2007)
959    
960     26 May 2007; Christian Heim <phreak@gentoo.org>
961     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
962     +hardened-sources-2.6.21-r2.ebuild:
963     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
964     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
965 phreak 1.153
966     *hardened-sources-2.6.20-r4 (26 May 2007)
967    
968     26 May 2007; Christian Heim <phreak@gentoo.org>
969     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
970     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
971 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
972 phreak 1.152
973     15 May 2007; Christian Heim <phreak@gentoo.org>
974     hardened-sources-2.6.20-r3.ebuild:
975     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
976     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
977     grsecurity patch fail in that exact same hunk.
978 phreak 1.151
979     *hardened-sources-2.6.20-r3 (15 May 2007)
980    
981     15 May 2007; Christian Heim <phreak@gentoo.org>
982     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
983     Revision bump, incorporating Linux 2.6.20.11.
984    
985     *hardened-sources-2.6.21-r1 (11 May 2007)
986    
987     11 May 2007; Christian Heim <phreak@gentoo.org>
988     +hardened-sources-2.6.21-r1.ebuild:
989     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
990     mentioned in #177234.
991 kevquinn 1.150
992     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
993     files/digest-hardened-sources-2.6.21, Manifest:
994     Fix Manifest/digest for linux-2.6.21.tar.bz2
995 phreak 1.149
996     06 May 2007; Christian Heim <phreak@gentoo.org>
997     hardened-sources-2.6.21.ebuild:
998     Bumping the hardened-patches version, needed for the fix for #177234.
999 phreak 1.148
1000     *hardened-sources-2.6.21 (02 May 2007)
1001    
1002     02 May 2007; Christian Heim <phreak@gentoo.org>
1003     +hardened-sources-2.6.21.ebuild:
1004     Version bump, Linux 2.6.21-hardened.
1005 phreak 1.147
1006     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1007     hardened-sources-2.6.20-r2.ebuild:
1008     Adding ~ia64 on Ned's request.
1009 phreak 1.146
1010     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1011     hardened-sources-2.6.20-r2.ebuild:
1012     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1013     header line(s).
1014 phreak 1.145
1015     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1016     hardened-sources-2.6.20-r2.ebuild:
1017     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1018 armin76 1.144
1019     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1020    
1021     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1022     +hardened-sources-2.6.20-r2.ebuild:
1023     Version bump, on behalf of phreak
1024 phreak 1.143
1025     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1026    
1027     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1028     +hardened-sources-2.6.20-r1.ebuild:
1029     Revision bump, grabbing a newer grsecurity snapshot.
1030 phreak 1.142
1031     *hardened-sources-2.6.20 (25 Mar 2007)
1032    
1033     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1034     +hardened-sources-2.6.20.ebuild:
1035     Finally a hardened-sources version for 2.6.20; many people have been waiting
1036     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1037     testbox.
1038 chainsaw 1.141
1039     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1040     hardened-sources-2.6.18-r6.ebuild:
1041     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1042 phreak 1.140
1043     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1044    
1045     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1046     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1047     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1048     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1049     supposed to be.
1050 phreak 1.139
1051     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1052     Fixing the Manifest, the previous one was broken (as in still had the
1053     deleted ebuild in it).
1054 phreak 1.138
1055     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1056     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1057     +hardened-sources-2.6.18-r5.ebuild:
1058     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1059     Linux 2.6.18.8. Also cleaning up the older version.
1060    
1061     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1062    
1063     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1064     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1065     +hardened-sources-2.6.18-r5.ebuild:
1066     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1067     Linux 2.6.18.8. Also cleaning up the older version.
1068 phreak 1.137
1069     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1070     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1071     -hardened-sources-2.6.19-r5.ebuild:
1072     Removing some of the old version, that didn't work.
1073 phreak 1.136
1074     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1075    
1076     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1077     +hardened-sources-2.6.19-r6.ebuild:
1078     Revision bump, including a new grsec version fixing #166235.
1079 pappy 1.134
1080     *hardened-sources-2.4.34 (24 Jan 2007)
1081    
1082     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1083 pappy 1.135 Manifest:
1084     updating Manifest with checksums of new tarball and ebuild
1085    
1086     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1087 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1088     I added new hardened sources 2.4 update, this is a critical path
1089     security bugfix - all users of h-s are strongly advised
1090     to update their existing hardened sources to this version.
1091     It contains a fix for a kernel vulnerability that is pertaining
1092     to the PaX changes to virtual memory management, possibly leading
1093     to a local kernel exploit ... see grsecurity.net forums and homepage
1094 phreak 1.133
1095     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1096     files/digest-hardened-sources-2.6.19-r5, Manifest:
1097     Fixing the patch-tarball digest.
1098 phreak 1.132
1099     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1100    
1101     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1102     +hardened-sources-2.6.19-r5.ebuild:
1103     Revision bump, closing the recently discovered PaX expand_stack()
1104     vulnerability.
1105 phreak 1.131
1106     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1107    
1108     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1109     +hardened-sources-2.6.19-r4.ebuild:
1110     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1111     dropping the randomized PID feature.
1112 opfer 1.130
1113     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1114     hardened-sources-2.4.33.4.ebuild:
1115     stable x86, bug #161171
1116 phreak 1.129
1117     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1118    
1119     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1120     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1121     Revision bump for bug #157186 and #158786.
1122 phreak 1.128
1123     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1124    
1125     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1126     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1127     Revision bump for bug #157186.
1128 phreak 1.127
1129     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1130    
1131     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1132     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1133     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1134 phreak 1.126
1135     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1136     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1137     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1138     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1139     hardened-sources-2.6.19-r1.ebuild:
1140     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1141     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1142 pappy 1.125
1143     *hardened-sources-2.4.33.4 (17 Dec 2006)
1144    
1145     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1146     +hardened-sources-2.4.33.4.ebuild:
1147     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1148     and quilting
1149 phreak 1.124
1150     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1151    
1152     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1153     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1154     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1155     for reporting).
1156 phreak 1.123
1157     *hardened-sources-2.6.19 (13 Dec 2006)
1158    
1159     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1160     +hardened-sources-2.6.19.ebuild:
1161     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1162     Brad for providing that prompt update.
1163 phreak 1.122
1164     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1165    
1166     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1167     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1168     +hardened-sources-2.6.18-r3.ebuild:
1169     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1170     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1171 phreak 1.121
1172     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1173     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1174 nixnut 1.120
1175     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1176     Stable on ppc wrt bug 157356
1177 opfer 1.119
1178     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1179     hardened-sources-2.6.18.ebuild:
1180     stable x86, bug #157356
1181 phreak 1.118
1182     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1183    
1184     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1185     +hardened-sources-2.6.18-r2.ebuild:
1186     Revision bump, including 2.6.18.5 (via genpatches) and
1187     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1188     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1189     redesign.
1190 phreak 1.117
1191     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1192     hardened-sources-2.6.18.ebuild:
1193     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1194     of Mike Doty).
1195 phreak 1.116
1196     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1197    
1198     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1199     +hardened-sources-2.6.18-r1.ebuild:
1200     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1201 phreak 1.115
1202     *hardened-sources-2.6.18 (11 Nov 2006)
1203    
1204     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1205     +hardened-sources-2.6.18.ebuild:
1206     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1207 solar 1.114
1208     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1209     - mark amd64 stable also. bug #151877
1210 solar 1.113
1211     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1212     - mark 2.6.17-r1 stable
1213 phreak 1.112
1214     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1215     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1216     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1217 phreak 1.111
1218     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1219    
1220     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1221     +hardened-sources-2.6.17-r1.ebuild:
1222     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1223     grsecurity patch.
1224 phreak 1.110
1225     *hardened-sources-2.6.17 (17 Aug 2006)
1226    
1227     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1228     +hardened-sources-2.6.17.ebuild:
1229     Bumping the hardened-sources-2.6 series to 2.6.17, using
1230     genpatches-2.6.17-6.base.
1231 solar 1.109
1232     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1233     - stable on x86 and amd64
1234 solar 1.108
1235     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1236    
1237     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1238     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1239     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1240     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1241     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1242     crusty ebuilds
1243 johnm 1.107
1244     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1245     hardened-sources-2.6.16-r10.ebuild:
1246     marking stable on x86 and amd64
1247 solar 1.106
1248     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1249     - 2.4.32-r6 stable on x86. RSBAC state unknown
1250 kang 1.105
1251     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1252    
1253     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1254     +hardened-sources-2.4.32-r7.ebuild:
1255     Bump PaX for RSBAC to test-17
1256 johnm 1.104
1257     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1258    
1259     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1260     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1261     hardened-sources-2.6.16 bump to latest -base.
1262 solar 1.103
1263     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1264    
1265     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1266     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1267     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1268     sysctl controlable resource logging
1269 johnm 1.102
1270     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1271    
1272     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1273     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1274     push new 2.6.16 release in preparation for stable
1275 solar 1.101
1276     22 May 2006; <solar@gentoo.org> :
1277     - redigest bug 134002
1278 kang 1.100
1279     *hardened-sources-2.4.32-r5 (16 May 2006)
1280    
1281     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1282     +hardened-sources-2.4.32-r5.ebuild:
1283     Fixes rsbac common patching (new patch in new -r5 patchset)
1284 solar 1.99
1285     *hardened-sources-2.4.32-r4 (13 May 2006)
1286    
1287     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1288     +hardened-sources-2.4.32-r4.ebuild:
1289     - security bumps
1290 johnm 1.98
1291     *hardened-sources-2.6.16-r6 (03 May 2006)
1292    
1293     03 May 2006; John Mylchreest <johnm@gentoo.org>
1294     +hardened-sources-2.6.16-r6.ebuild:
1295     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1296 johnm 1.97
1297     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1298     hardened-sources-2.6.14-r8.ebuild:
1299     fix x86_64 build problem, this will delay the digest issue again for a short
1300     while but it will sort itself out
1301 johnm 1.96
1302     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1303     hardened-sources-2.6.14-r8.ebuild:
1304     bump hardened patchset
1305 antarus 1.94
1306     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1307     files/digest-hardened-sources-2.4.32-r2,
1308     files/digest-hardened-sources-2.4.32-r3,
1309     files/digest-hardened-sources-2.6.14-r8, Manifest:
1310     Fixing duff SHA256 digests: Bug # 131293
1311 johnm 1.93
1312 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1313    
1314     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1315     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1316     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1317     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1318     cleanup of old uneccessary sources
1319    
1320 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1321     fix digest
1322 johnm 1.92
1323     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1324    
1325     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1326     +hardened-sources-2.6.14-r8.ebuild:
1327     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1328 johnm 1.91
1329     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1330     Turning on gpg-signing again, and recomitting
1331 johnm 1.90
1332     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1333    
1334     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1335     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1336     +hardened-sources-2.6.16-r4.ebuild:
1337     Fix numerous security vulns
1338 solar 1.89
1339     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1340    
1341     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1342     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1343     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1344     - security bump for bug #112791. Removed old ebuilds
1345 johnm 1.88
1346     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1347    
1348     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1349     +hardened-sources-2.6.16-r3.ebuild:
1350     Removing silly localversion which I missed
1351 johnm 1.87
1352     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1353    
1354     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1355     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1356     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1357 johnm 1.86
1358     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1359    
1360     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1361     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1362     +hardened-sources-2.6.16-r2.ebuild:
1363     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1364     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1365 johnm 1.85
1366     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1367    
1368     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1369     +hardened-sources-2.6.16-r1.ebuild:
1370     Bumping to include ppc build fix and 2.6.16.3
1371 tsunam 1.84
1372     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1373     hardened-sources-2.6.14-r6.ebuild:
1374     Stable on x86; bug #127718
1375 johnm 1.83
1376     *hardened-sources-2.6.16 (31 Mar 2006)
1377    
1378     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1379     +hardened-sources-2.6.16.ebuild:
1380     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1381     2.6.16.1
1382 cryos 1.82
1383     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1384     hardened-sources-2.6.14-r6.ebuild:
1385     Stable on amd64, bug 127718.
1386 nixnut 1.81
1387     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1388     Stable on ppc. Bug #127718
1389 johnm 1.80
1390     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1391     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1392     -hardened-sources-2.6.14-r4.ebuild:
1393     Cleanup.
1394 johnm 1.79
1395     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1396    
1397     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1398     +hardened-sources-2.6.14-r6.ebuild:
1399     Fixes grsec policy recreation bug and adds a
1400     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1401 solar 1.78
1402     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1403     - stable on x86
1404 hansmi 1.77
1405     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1406     hardened-sources-2.6.14-r5.ebuild:
1407     Stable on ppc.
1408 johnm 1.76
1409     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1410    
1411     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1412     +hardened-sources-2.6.14-r5.ebuild:
1413     fixing every known exploit
1414 solar 1.75
1415     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1416    
1417     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1418     +hardened-sources-2.4.32-r2.ebuild:
1419     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1420 solar 1.74
1421     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1422    
1423     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1424     - version bump for new genpatches which fix up a few sec holes
1425 solar 1.73
1426     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1427    
1428     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1429     - revision bump to add misc vital linux kernel security patches.
1430 johnm 1.72
1431     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1432    
1433     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1434     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1435     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1436 johnm 1.71
1437     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1438     hardened-sources-2.6.14-r2.ebuild:
1439     making x86 & amd64 stable following testing.
1440 johnm 1.70
1441     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1442    
1443     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1444     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1445     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1446     network hooks.
1447 johnm 1.69
1448     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1449     hardened-sources-2.6.14-r1.ebuild:
1450     bumping to stable early for sec fix on x86 & amd64
1451 johnm 1.68
1452     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1453    
1454     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1455     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1456     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1457 solar 1.67
1458     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1459     - stable on x86 security bug #114227 CAN-2005-3257
1460 kang 1.66
1461     *hardened-sources-2.4.32 (19 Nov 2005)
1462    
1463     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1464     +hardened-sources-2.4.32.ebuild:
1465     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1466     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1467     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1468     rsbac >> /etc/portage/package.use)
1469 johnm 1.65
1470     *hardened-sources-2.6.14 (14 Nov 2005)
1471    
1472     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1473     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1474     Bumping 2.6 series to 2.6.14.2
1475 johnm 1.64
1476     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1477    
1478     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1479     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1480     +hardened-sources-2.6.13-r2.ebuild:
1481     Fixes minor build error in ppc.
1482 johnm 1.63
1483     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1484    
1485     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1486     +hardened-sources-2.6.13-r1.ebuild:
1487     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1488     2.6.13.4, fixes some major amd64 stability problems.
1489 johnm 1.62
1490     *hardened-sources-2.6.13 (16 Sep 2005)
1491    
1492     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1493     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1494     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1495     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1496     users should test this thoroughly.
1497 solar 1.61
1498     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1499     - stable on x86
1500 johnm 1.60
1501     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1502    
1503     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1504     +hardened-sources-2.6.11-r15.ebuild:
1505     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1506     grsec redefining curr_ip struct.
1507 solar 1.59
1508     *hardened-sources-2.4.31 (20 Jun 2005)
1509    
1510     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1511     initial import of 2.4.31 tree
1512 johnm 1.58
1513     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1514    
1515     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1516     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1517     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1518     naming scheme to abide by genpatches
1519 johnm 1.57
1520     *hardened-sources-2.6.11-r13 (18 May 2005)
1521    
1522     18 May 2005; John Mylchreest <johnm@gentoo.org>
1523     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1524     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1525     target. sorry about that. Fixes bug #93022
1526 johnm 1.56
1527     *hardened-sources-2.6.11-r12 (17 May 2005)
1528    
1529     17 May 2005; John Mylchreest <johnm@gentoo.org>
1530     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1531     +hardened-sources-2.6.11-r12.ebuild:
1532     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1533     merges in genpatches-base
1534 johnm 1.55
1535     *hardened-sources-2.6.11-r12 (17 May 2005)
1536    
1537     17 May 2005; John Mylchreest <johnm@gentoo.org>
1538     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1539     +hardened-sources-2.6.11-r12.ebuild:
1540     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1541     merges in genpatches-base
1542 solar 1.54
1543     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1544     -files/2.4.27-cmdline-race.patch,
1545     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1546     -files/2.4.28-grsec-binfmt_a.out.patch,
1547     -files/2.4.28-grsec-cmdline-race.patch,
1548     -files/2.4.28-selinux-binfmt_a.out.patch,
1549     -files/2.4.28-selinux-cmdline-race.patch,
1550     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1551     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1552     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1553     cleanup..
1554 solar 1.53
1555     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1556    
1557     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1558     - disable aout by default
1559 solar 1.52
1560     *hardened-sources-2.4.30 (18 Apr 2005)
1561    
1562     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1563     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1564     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1565     use
1566 tocharian 1.50
1567 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1568    
1569     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1570     +hardened-sources-2.4.29.ebuild:
1571     New hardened-patches-2.4-29.0 patchball.
1572     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1573    
1574     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1575    
1576     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1577     +hardened-sources-2.4.28-r5.ebuild:
1578     Added a fix for a PaX vulnerability.
1579    
1580     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1581 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1582     Stable on x86
1583 solar 1.49
1584     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1585     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1586     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1587     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1588     - fixed/added RDEPEND= in all kernel-2 ebuilds
1589 tocharian 1.48
1590     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1591    
1592     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1593     +hardened-sources-2.4.28-r4.ebuild:
1594     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1595     backport of neighbour hash updates.
1596 tocharian 1.47
1597     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1598     hardened-sources-2.4.28-r3.ebuild:
1599     Stable on x86
1600 tseng 1.46
1601     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1602    
1603     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1604     +hardened-sources-2.6.10-r3.ebuild:
1605     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1606     in 2005.0
1607 tocharian 1.45
1608     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1609     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1610     hardened-sources-2.4.28-r2.ebuild:
1611     Mark stable on x86
1612 tocharian 1.44
1613     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1614    
1615     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1616     +hardened-sources-2.4.28-r3.ebuild:
1617     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1618 tocharian 1.43
1619     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1620     hardened-sources-2.4.28.ebuild:
1621     Mark stable on x86.
1622 tocharian 1.42
1623     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1624    
1625     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1626     +hardened-sources-2.4.28-r2.ebuild:
1627     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1628     Mazinger for grsecurity patches as well.
1629 plasmaroo 1.41
1630     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1631    
1632     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1633     Security bump. Thank tocharian for rolling a new patchset...
1634 solar 1.40
1635     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1636     +files/2.4.28-grsec-cmdline-race.patch,
1637     +files/2.4.28-selinux-binfmt_a.out.patch,
1638     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1639     - Round up remaining security patches that appear to be missing in 2.4.28. -
1640     PaX standalone updated to current. hgpv=28.1
1641 solar 1.39
1642     *hardened-sources-2.4.28 (28 Nov 2004)
1643    
1644     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1645     security bump. Thank tocharian for rolling a new patchset
1646 scox 1.31
1647 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1648    
1649     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1650     +hardened-sources-2.4.27-r3.ebuild:
1651     Applies the new 2.4-27.2 patchball which updates
1652     GRSecurity to the 2.0.1 version.
1653    
1654 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1655    
1656     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1657     +hardened-sources-2.4.27-r2.ebuild:
1658     Version bump.
1659     This version uses the new 2.4-27.1 patchball which updates
1660     both the SELinux PaX hooks patch and the SELinux headers.
1661    
1662 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1663    
1664     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1665     +hardened-sources-2.4.27-r1.ebuild,
1666     -hardened-sources-2.4.27.ebuild,
1667     +files/2.4.27-cmdline-race.patch:
1668     Version bump, fix for cmdline race. See bug #59905.
1669    
1670     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1671    
1672     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1673     +hardened-sources-2.4.26-r6.ebuild,
1674     -hardened-sources-2.4.26-r5.ebuild,
1675     -hardened-sources-2.4.26-r4.ebuild,
1676     +files/2.4.26-cmdline-race.patch:
1677     Version bump, fix for cmdline race. See bug #59905.
1678    
1679 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1680    
1681     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1682     +hardened-sources-2.4.27.ebuild,
1683     +files/2.4.27-CAN-2004-0394.patch:
1684     Ported the patchball to the 2.4.27 kernel version.
1685    
1686 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1687    
1688     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1689     +hardened-sources-2.4.26-r5.ebuild:
1690 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1691 scox 1.34 It adds the following features:
1692     - Squashfs
1693     - Ebtables
1694     - Netdev random (core+drivers)
1695     - Watchdog Timer (WDT) fix.
1696    
1697 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1698    
1699     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1700     +hardened-sources-2.4.26-r4.ebuild,
1701     +files/2.4.26-CAN-2004-0415.patch,
1702     -hardened-sources-2.4.26-3:
1703     Version bump, fix for CAN 0415, see bug #59378.
1704    
1705 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1706    
1707     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1708     +hardened-sources-2.4.26-r3.ebuild,
1709     +files/2.4.26-CAN-2004-0497.patch,
1710     -hardened-sources-2.4.26-r2.ebuild:
1711     Version bump, fixed CAN 0497, see bug #56171.
1712    
1713 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1714    
1715     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1716 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1717 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1718     +files/2.4.26-CAN-2004-0535.patch,
1719     -hardened-sources-2.4.26-r1.ebuild:
1720     Fixes for both CAN 0495 and 0535, see bug #54976
1721 pvdabeel 1.27
1722 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1723     hardened-sources-2.4.26-r1.ebuild:
1724     QA - fix use invocation
1725 scox 1.28
1726     *hardened-sources-2.4.26-r1 (22 June 2004)
1727    
1728     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1729     +hardened-sources-2.4.26-r1.ebuild,
1730     +files/2.4.26-CAN-2004-0394.patch,
1731     +files/2.4.26-signal-race.patch,
1732     -hardened-sources-2.4.26.ebuild,
1733     -hardened-sources-2.4.24-r3.ebuild:
1734     Version bump for the CAN-2004-0394 issue and bug #53804
1735     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1736    
1737    
1738 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1739     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1740     Masked hardened-sources-2.4.26.ebuild broken for ppc
1741    
1742     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1743     hardened-sources-2.4.24-r3.ebuild:
1744     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1745 plasmaroo 1.25
1746 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1747    
1748     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1749     +hardened-sources-2.4.26.ebuild:
1750     Updated hardened-sources for the 2.4.26 kernel
1751     Removed broken components, updated almost everything.
1752    
1753 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1754    
1755     17 Apr 2004; <plasmaroo@gentoo.org>
1756     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1757     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1758     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1759     +hardened-sources-2.4.24-r3.ebuild:
1760     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1761     vulnerabilities. Old revisions removed.
1762 plasmaroo 1.24
1763     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1764    
1765     15 Apr 2004; <plasmaroo@gentoo.org>
1766     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1767     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1768     Version bump for the CAN-2004-0109 issue; bug #47881.
1769 aliz 1.23
1770     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1771     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1772     Add eutils to inherit.
1773 plasmaroo 1.22
1774     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1775    
1776     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1777     files/hardened-sources-2.4.24.munmap.patch:
1778     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1779 scox 1.19
1780 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1781 scox 1.26
1782 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1783     hardened-sources-2.4.24.ebuild:
1784     Version bump, updated most of the components.
1785     This release includes the following:
1786    
1787     - Hardened security
1788     - Netfilter patch-o-matic 20031219
1789     - FreeSWAN 2.04 & x509 1.4.8
1790     - EVMS 2.2.2
1791     - XFS 1.3.1
1792     - cryptoloop jari
1793     - grsecurity 2.0-rc4
1794     - SELinux
1795     - PaX 200402060000
1796     - PaX Obscurity 200308302223
1797     - Others...
1798    
1799     Neither -ck nor systrace are included anymore.
1800    
1801 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1802    
1803     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1804     hardened-sources-2.4.22-r2.ebuild:
1805 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1806 scox 1.19
1807     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1808 iggy 1.17
1809     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1810 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1811 iggy 1.16
1812     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1813 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1814     Version bump for the 'do_brk' vulnerability.
1815 iggy 1.15
1816     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1817     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1818     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1819     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1820 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1821 frogger 1.14
1822     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1823     hardened-sources-2.4.22.ebuild:
1824 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1825     components. These are no longer handled in the kernel
1826     so this code was not necessary.
1827 frogger 1.13
1828     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1829     New 2.4.22 based hardened-sources thanks to
1830     Phil West <p.west@computer.org>.
1831    
1832     These sources include:
1833 plasmaroo 1.18 - New SELinux API
1834     - Updated CK-base
1835     - Updated GRSec
1836     - Systrace
1837     - SuperFreeS/WAN 1.99.8
1838     - Propolice kernel build support
1839     - EVMS
1840     - Other various security related patches
1841 frogger 1.11
1842 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1843    
1844     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1845     Updated hardened-sources based on the 2.4.21 Linux kernel.
1846     This includes updates to most major components such as:
1847 plasmaroo 1.18 - ck-base-0306300059
1848     - selinux-2.4-2003071106
1849     - grsecurity-2.0-rc1
1850     - Updated IPTables patch-o-matic
1851     - Updated SuperFreeS/WAN
1852    
1853 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1854     updated patch set ready for the 2.4.21 based kernel.
1855    
1856 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1857     Initial import of hardened-sources-2.4.20-r4. This revision
1858     includes only a few changes, but one of these is an important
1859     security fix. It is recommended all users of hardened-sources
1860     upgrade to this release.
1861 plasmaroo 1.18
1862 frogger 1.11 - ioperm bug fix
1863     - fixed compilation failure when building without GRSec
1864 plasmaroo 1.18
1865 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1866     due to time constraints, but is planned for inclusion in the near
1867     future.
1868 msterret 1.10
1869     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1870    
1871     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1872     hardened-sources-2.4.20-r3.ebuild:
1873 plasmaroo 1.18 Add Header...
1874 frogger 1.9
1875     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1876     hardened-sources-2.4.20-r3.ebuild:
1877     Removed warnings from ebuild. This kernel should be safe to
1878     use at this point.
1879 frogger 1.8
1880     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1881    
1882     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1883     hardened-sources-2.4.20-r3.ebuild:
1884     New revision. Includes the following changes over -r2:
1885 plasmaroo 1.18
1886 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1887     - Super FreeS/WAN 1.99.7rc2
1888     - PaX for the LSM/SELinux branch
1889     - GRSecurity 2.0-pre4 (role based access control)
1890     - Systrace 1.3
1891     - EXT3 fixes
1892     - EVMS 2.0.1
1893     - GCC 3.1+ compile optimizations
1894     - ProPolice kernel build support
1895     - Hashing table security fixes
1896 frogger 1.3
1897     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1898 frogger 1.7
1899     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1900     Initial import of hardened-sources-r2. This new
1901     ebuild includes many new performance and security
1902     related patches. As in -r1, it will patch in
1903     LSM/SELinux if "selinux" is in USE, otherwise it
1904     will patch in GRSecurity. The following patches
1905     are included in this revision:
1906 plasmaroo 1.18
1907 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1908     (pulled from the base CK patch)
1909     - ptrace exploit patch for the LSM kernel
1910     (the GRSec patch already fixes this)
1911     - LSM 2.4-2003040709
1912     - SELinux 2.4-2003040709
1913     - Systrace v1.2
1914     - IPTables patch-o-matic base patches - 20030107
1915     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1916     - Super FreeS/WAN 1.99.6.1
1917     - GRSecurity 1.9.9g
1918     - MPPE
1919     - EXT3 data journal fix
1920     - CIPE 1.5.4
1921 frogger 1.6
1922     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1923     hardened-sources-2.4.20-r1.ebuild, manifest:
1924 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1925 frogger 1.5
1926     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1927     hardened-sources-2.4.20-r1.ebuild:
1928     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1929     is patched in instead. Ptrace patches for selinux have also been added. In
1930     either case, systrace support will be patched in as well.
1931 frogger 1.3
1932     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1933     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1934 plasmaroo 1.18 Revision bump for new sources.
1935 frogger 1.4
1936 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1937 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1938 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1939 method 1.1
1940 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1941    
1942 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1943     hardened-sources-2.4.20.ebuild:
1944 plasmaroo 1.18 Initial import, only has systrace support.
1945 method 1.1
  ViewVC Help
Powered by ViewVC 1.1.20