/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.305 - (show annotations) (download)
Sun Apr 5 18:26:47 2009 UTC (6 years ago) by nixnut
Branch: MAIN
Changes since 1.304: +4 -1 lines
ppc stable
(Portage version: 2.1.6.11/cvs/Linux ppc)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.304 2009/03/30 01:48:30 gengor Exp $
4
5 05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
6 ppc stable
7
8 30 Mar 2009; Gordon Malm <gengor@gentoo.org>
9 -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
10 Stable amd64/x86 and remove old.
11
12 *hardened-sources-2.6.28-r7 (27 Mar 2009)
13
14 27 Mar 2009; Gordon Malm <gengor@gentoo.org>
15 +hardened-sources-2.6.28-r7.ebuild:
16 Add Linux 2.6.28.9. Fix bugs 263424, 263870.
17
18 22 Mar 2009; Gordon Malm <gengor@gentoo.org>
19 -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
20 -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
21 -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
22 Stable amd64/x86 and remove old versions.
23
24 22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
25 ppc stable
26
27 *hardened-sources-2.6.28-r6 (21 Mar 2009)
28
29 21 Mar 2009; Gordon Malm <gengor@gentoo.org>
30 -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
31 Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
32
33 *hardened-sources-2.6.28-r5 (20 Mar 2009)
34
35 20 Mar 2009; Gordon Malm <gengor@gentoo.org>
36 +hardened-sources-2.6.28-r5.ebuild:
37 Bump genpatches. Grsecurity patch bump, fixes bug #262752.
38
39 20 Mar 2009; Gordon Malm <gengor@gentoo.org>
40 hardened-sources-2.6.28-r4.ebuild:
41 Stable amd64/x86.
42
43 *hardened-sources-2.6.28-r4 (18 Mar 2009)
44
45 18 Mar 2009; Gordon Malm <gengor@gentoo.org>
46 +hardened-sources-2.6.28-r4.ebuild:
47 Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
48 compilation with CPA_DEBUG and more.
49
50 17 Mar 2009; Gordon Malm <gengor@gentoo.org>
51 hardened-sources-2.6.28-r3.ebuild:
52 Quick stable amd64/x86.
53
54 *hardened-sources-2.6.28-r3 (15 Mar 2009)
55
56 15 Mar 2009; Gordon Malm <gengor@gentoo.org>
57 +hardened-sources-2.6.28-r3.ebuild:
58 Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
59
60 14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
61 ppc stable
62
63 13 Mar 2009; Gordon Malm <gengor@gentoo.org>
64 hardened-sources-2.6.28-r2.ebuild:
65 Stable amd64/x86.
66
67 *hardened-sources-2.6.28-r2 (11 Mar 2009)
68
69 11 Mar 2009; Gordon Malm <gengor@gentoo.org>
70 +hardened-sources-2.6.28-r2.ebuild:
71 Version bump bringing in latest grsecurity patch.
72
73 *hardened-sources-2.6.28-r1 (09 Mar 2009)
74
75 09 Mar 2009; Gordon Malm <gengor@gentoo.org>
76 -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
77 Version bump and remove old.
78
79 07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
80 ppc stable
81
82 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
83 hardened-sources-2.6.27-r8.ebuild:
84 Remove amd64 testing keyword, bug 256226.
85
86 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
87 hardened-sources-2.6.27-r8.ebuild:
88 Revert amd64 stable, bug #256226.
89
90 01 Mar 2009; Gordon Malm <gengor@gentoo.org>
91 hardened-sources-2.6.27-r8.ebuild:
92 Stable on amd64/x86.
93
94 24 Feb 2009; Gordon Malm <gengor@gentoo.org>
95 -hardened-sources-2.6.27-r6.ebuild:
96 Remove old 2.6.27 release.
97
98 *hardened-sources-2.6.27-r8 (24 Feb 2009)
99
100 24 Feb 2009; Gordon Malm <gengor@gentoo.org>
101 +hardened-sources-2.6.27-r8.ebuild:
102 Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
103 and probably more.
104
105 04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
106 ppc stable
107
108 *hardened-sources-2.6.28 (25 Jan 2009)
109
110 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
111 +hardened-sources-2.6.28.ebuild:
112 Initial 2.6.28 release.
113
114 *hardened-sources-2.6.27-r7 (25 Jan 2009)
115
116 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
117 +hardened-sources-2.6.27-r7.ebuild:
118 Bump to Linux 2.6.27.13.
119
120 25 Jan 2009; Gordon Malm <gengor@gentoo.org>
121 hardened-sources-2.6.26-r9.ebuild:
122 Stable amd64/x86.
123
124 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
125 -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
126 -hardened-sources-2.6.27-r5.ebuild:
127 Remove problem versions.
128
129 *hardened-sources-2.6.27-r6 (24 Jan 2009)
130
131 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
132 +hardened-sources-2.6.27-r6.ebuild:
133 Revert PaX test29 to test30 changes. Fixes bug 256226.
134
135 *hardened-sources-2.6.27-r5 (24 Jan 2009)
136
137 24 Jan 2009; Gordon Malm <gengor@gentoo.org>
138 +hardened-sources-2.6.27-r5.ebuild:
139 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
140 254843.
141
142 23 Jan 2009; Gordon Malm <gengor@gentoo.org>
143 -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
144 -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
145 Remove problem versions.
146
147 23 Jan 2009; nixnut <nixnut@gentoo.org>
148 hardened-sources-2.6.25-r13.ebuild:
149 ppc stable
150
151 21 Jan 2009; Gordon Malm <gengor@gentoo.org>
152 hardened-sources-2.6.25-r13.ebuild:
153 Fasttrack stable amd64/x86.
154
155 *hardened-sources-2.6.26-r9 (21 Jan 2009)
156
157 21 Jan 2009; Gordon Malm <gengor@gentoo.org>
158 +hardened-sources-2.6.26-r9.ebuild:
159 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
160
161 *hardened-sources-2.6.25-r13 (20 Jan 2009)
162
163 20 Jan 2009; Gordon Malm <gengor@gentoo.org>
164 +hardened-sources-2.6.25-r13.ebuild:
165 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
166
167 20 Jan 2009; nixnut <nixnut@gentoo.org>
168 hardened-sources-2.6.25-r12.ebuild:
169 ppc stable
170
171 17 Jan 2009; Gordon Malm <gengor@gentoo.org>
172 hardened-sources-2.6.25-r12.ebuild:
173 Stable amd64/x86.
174
175 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
176 -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
177 -hardened-sources-2.6.27-r2.ebuild:
178 Clean out old versions.
179
180 *hardened-sources-2.6.27-r4 (14 Jan 2009)
181 *hardened-sources-2.6.26-r8 (14 Jan 2009)
182 *hardened-sources-2.6.25-r12 (14 Jan 2009)
183
184 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
185 +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
186 +hardened-sources-2.6.27-r4.ebuild:
187 2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
188 2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
189 2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
190 grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
191
192 15 Dec 2008; nixnut <nixnut@gentoo.org>
193 hardened-sources-2.6.25-r11.ebuild:
194 Stable on ppc
195
196 09 Dec 2008; Gordon Malm <gengor@gentoo.org>
197 hardened-sources-2.6.25-r11.ebuild:
198 Stable amd64/x86.
199
200 *hardened-sources-2.6.27-r3 (07 Dec 2008)
201
202 07 Dec 2008; Gordon Malm <gengor@gentoo.org>
203 +hardened-sources-2.6.27-r3.ebuild:
204 Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
205 Fixes bug #248754, #249729 and #246607.
206
207 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
208 -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
209 Remove old versions.
210
211 *hardened-sources-2.6.26-r7 (03 Dec 2008)
212 *hardened-sources-2.6.25-r11 (03 Dec 2008)
213
214 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
215 +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
216 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
217 2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
218 Both include many backports from 2.6.27.{6,7} -stable releases.
219
220 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
221 -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
222 Remove versions broken on ARCHes != x86/amd64.
223
224 *hardened-sources-2.6.27-r2 (24 Nov 2008)
225
226 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
227 +hardened-sources-2.6.27-r2.ebuild:
228 Bump to Linux 2.6.27.7 and latest grsecurity patch.
229
230 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
231 -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
232 Remove old versions.
233
234 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
235 hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
236 Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
237
238 16 Nov 2008; nixnut <nixnut@gentoo.org>
239 hardened-sources-2.6.25-r10.ebuild:
240 Stable on ppc
241
242 15 Nov 2008; Gordon Malm <gengor@gentoo.org>
243 hardened-sources-2.6.25-r10.ebuild:
244 Stable amd64/x86.
245
246 *hardened-sources-2.6.26-r6 (12 Nov 2008)
247
248 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
249 +hardened-sources-2.6.26-r6.ebuild:
250 Bump to Linux 2.6.26.8 and fix security bug #245650.
251
252 *hardened-sources-2.6.25-r10 (12 Nov 2008)
253
254 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
255 +hardened-sources-2.6.25-r10.ebuild:
256 Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
257
258 *hardened-sources-2.6.27-r1 (09 Nov 2008)
259
260 09 Nov 2008; Gordon Malm <gengor@gentoo.org>
261 +hardened-sources-2.6.27-r1.ebuild:
262 Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
263
264 *hardened-sources-2.6.27 (04 Nov 2008)
265
266 04 Nov 2008; Gordon Malm <gengor@gentoo.org>
267 +hardened-sources-2.6.27.ebuild:
268 Initial 2.6.27 release.
269
270 *hardened-sources-2.6.26-r5 (03 Nov 2008)
271
272 03 Nov 2008; Gordon Malm <gengor@gentoo.org>
273 -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
274 +hardened-sources-2.6.26-r5.ebuild:
275 2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
276 Clean out some old versions.
277
278 02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
279 Stable on ppc
280
281 30 Oct 2008; Gordon Malm <gengor@gentoo.org>
282 hardened-sources-2.6.25-r9.ebuild:
283 Stable on amd64/x86.
284
285 *hardened-sources-2.6.25-r9 (26 Oct 2008)
286
287 26 Oct 2008; Gordon Malm <gengor@gentoo.org>
288 +hardened-sources-2.6.25-r9.ebuild:
289 Update to Linux 2.6.25.19
290
291 15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
292 Stable on ppc
293
294 *hardened-sources-2.6.26-r4 (14 Oct 2008)
295
296 14 Oct 2008; Gordon Malm <gengor@gentoo.org>
297 -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
298 Update to latest grsecurity patch, fixing building of non-modular kernels.
299
300 *hardened-sources-2.6.26-r3 (12 Oct 2008)
301
302 12 Oct 2008; Gordon Malm <gengor@gentoo.org>
303 hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
304 +hardened-sources-2.6.26-r3.ebuild:
305 2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
306 2.6.26-r1: Removed.
307 2.6.25-r8: Stable amd64/x86.
308
309 *hardened-sources-2.6.25-r8 (09 Oct 2008)
310
311 09 Oct 2008; Gordon Malm <gengor@gentoo.org>
312 -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
313 -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
314 Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
315
316 20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
317 Stable on ppc
318
319 17 Sep 2008; Gordon Malm <gengor@gentoo.org>
320 hardened-sources-2.6.25-r7.ebuild:
321 Stable amd64/x86.
322
323 *hardened-sources-2.6.26-r2 (13 Sep 2008)
324
325 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
326 -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
327 2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
328 PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
329
330 *hardened-sources-2.6.25-r7 (13 Sep 2008)
331
332 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
333 +hardened-sources-2.6.25-r7.ebuild:
334 Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
335
336 10 Sep 2008; Gordon Malm <gengor@gentoo.org>
337 hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
338 hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
339 hardened-sources-2.6.26-r1.ebuild:
340 Update DESCRIPTION and HGPV_URI.
341
342 *hardened-sources-2.6.25-r6 (09 Sep 2008)
343
344 09 Sep 2008; Gordon Malm <gengor@gentoo.org>
345 -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
346 2.6.25-r6: Update to Linux 2.6.25.17.
347 2.6.24-r3: Removed.
348
349 08 Sep 2008; Gordon Malm <gengor@gentoo.org>
350 hardened-sources-2.6.25-r5.ebuild:
351 Stable on amd64/x86
352
353 07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
354 Update my email address.
355
356 31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
357 stable on ppc
358
359 *hardened-sources-2.6.26-r1 (23 Aug 2008)
360 *hardened-sources-2.6.25-r5 (23 Aug 2008)
361
362 23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
363 -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
364 hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
365 +hardened-sources-2.6.26-r1.ebuild:
366 Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
367 security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
368 fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
369 Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
370 (gengor).
371
372 *hardened-sources-2.6.26 (18 Aug 2008)
373 *hardened-sources-2.6.25-r4 (18 Aug 2008)
374
375 18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
376 +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
377 - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
378 to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
379 2.6.25-r2: Removed.
380
381 16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
382 Remove phreak from metadata.xml (#96398)
383
384 *hardened-sources-2.6.25-r3 (31 Jul 2008)
385
386 31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
387 -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
388 +hardened-sources-2.6.25-r3.ebuild:
389 - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
390 fixes, including security bug #231750.
391
392 28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
393 Stable on ppc
394
395 *hardened-sources-2.6.25-r2 (05 Jul 2008)
396
397 05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
398 -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
399 +hardened-sources-2.6.25-r2.ebuild:
400 2.6.23-r4: Stable x86/amd64
401 2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
402 2.6.23-r{11,12}: Removed due to multiple vulns.
403 (gengor & kerframil)
404
405 04 Jul 2008; nixnut <nixnut@gentoo.org>
406 hardened-sources-2.6.23-r13.ebuild:
407 Stable on ppc
408
409 *hardened-sources-2.6.25-r1 (30 Jun 2008)
410
411 30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
412 +hardened-sources-2.6.25-r1.ebuild:
413 2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
414 grsecurity release. 2.6.23-r13: x86/amd64 stable
415
416 *hardened-sources-2.6.25 (17 Jun 2008)
417 *hardened-sources-2.6.24-r3 (17 Jun 2008)
418 *hardened-sources-2.6.23-r13 (17 Jun 2008)
419
420 17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
421 +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
422 * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
423 #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
424 #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
425 2.6.25: Initial 2.6.25 release.
426
427 15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
428 - fasttrack to stable x86/amd64
429
430 11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
431 Fix broken digest for linux-2.6.24.tar.bz2.
432
433 *hardened-sources-2.6.24-r2 (11 May 2008)
434 *hardened-sources-2.6.23-r12 (11 May 2008)
435
436 11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
437 -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
438 +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
439 -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
440 proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
441 220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
442 security bugs 219901, 220691, 220975, 220979, 221123. New
443 genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
444 should be removed as far as I'm concerned, everything else remove due to
445 vulnerable to numerous security bugs or brokeness.
446
447 10 May 2008; nixnut <nixnut@gentoo.org>
448 hardened-sources-2.6.23-r11.ebuild:
449 Stable on ppc
450
451 05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
452 - -r11 stable on x86/amd64
453
454 *hardened-sources-2.6.23-r11 (01 May 2008)
455
456 01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
457 - version bump to fix ulgy linux bugs
458
459 *hardened-sources-2.6.24-r1 (30 Apr 2008)
460
461 30 Apr 2008; Christian Heim <phreak@gentoo.org>
462 +hardened-sources-2.6.24-r1.ebuild:
463 Revision bump (thanks to Kerin and Gordon, again), pulling
464 genpatches-2.6.24-7, solving #219089. Additionally contains further security
465 fixes plus some minor updates.
466
467 *hardened-sources-2.6.23-r10 (30 Apr 2008)
468
469 30 Apr 2008; Christian Heim <phreak@gentoo.org>
470 +hardened-sources-2.6.23-r10.ebuild:
471 Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
472 Additional contains "various other fixes".
473
474 09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
475 Update the longdescription in metadata, thanks to Gordon Malm.
476
477 08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
478 Stable on ppc wrt bug #213255
479
480 07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
481 -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
482 - stable on x86/amd64 per request. Removed obsolete ebuilds
483
484 *hardened-sources-2.6.24 (07 Apr 2008)
485
486 07 Apr 2008; Christian Heim <phreak@gentoo.org>
487 +hardened-sources-2.6.24.ebuild:
488 Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
489 <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
490 for the many contributions and their continued effort in #216612) based on
491 2.6.24 and genpatches-2.6.24-5.
492
493 The current ebuild/patchset contains these things:
494 * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
495 * Introduces bespoke server and workstation oriented security levels
496 * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
497
498 30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
499 Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
500 maintaining it).
501
502 24 Mar 2008; Christian Heim <phreak@gentoo.org>
503 hardened-sources-2.4.35-r2.ebuild:
504 Fixing SRC_URI for 2.4.35-r2.
505
506 *hardened-sources-2.6.23-r9 (22 Mar 2008)
507
508 22 Mar 2008; Christian Heim <phreak@gentoo.org>
509 +hardened-sources-2.6.23-r9.ebuild:
510 * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
511 * Change the default GIDs for some grsecurity options
512 * Revamp the Hardened [Gentoo] security level and make it the default level
513 * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
514 * Fix a recursive lock -- call to capable() within ptrace_attach()
515 * Fix bug that allows audit and iscsi operations to be controlled via netlink
516
517 *hardened-sources-2.6.23-r8 (27 Feb 2008)
518
519 27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
520 - version bump from Kerin Millar bug 210026
521
522 17 Feb 2008; <solar@gentoo.org> metadata.xml,
523 -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
524 -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
525 -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
526 - stable on x86 and remove old ebuilds
527
528 15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
529 - stable on amd64 per request of amd64 lead
530
531 *hardened-sources-2.6.23-r7 (11 Feb 2008)
532
533 11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
534 - version bump from kerin.millar
535 Changes:
536
537 * Bump to genpatches-base-2.6.23-9
538 * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
539 * Disables COMPAT_VDSO in x86/defconfig
540 * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
541
542 25 Jan 2008; Christian Heim <phreak@gentoo.org>
543 -hardened-sources-2.6.22-r8.ebuild:
544 Cleaning up old versions.
545
546 *hardened-sources-2.6.23-r6 (25 Jan 2008)
547
548 25 Jan 2008; Christian Heim <phreak@gentoo.org>
549 -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
550 Revision bump, pulling in the latest genpatches.
551
552 *hardened-sources-2.6.23-r5 (24 Dec 2007)
553
554 24 Dec 2007; Christian Heim <phreak@gentoo.org>
555 hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
556 hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
557 hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
558 Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
559
560 24 Dec 2007; Christian Heim <phreak@gentoo.org>
561 -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
562 -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
563 -hardened-sources-2.6.23-r3.ebuild:
564 Cleaning out some unused, old versions.
565
566 24 Dec 2007; Christian Heim <phreak@gentoo.org>
567 hardened-sources-2.6.23-r4.ebuild:
568 Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
569 in the tree for long, but there isn't much of a difference between this and
570 -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
571
572 *hardened-sources-2.6.23-r4 (23 Dec 2007)
573
574 23 Dec 2007; Christian Heim <phreak@gentoo.org>
575 +hardened-sources-2.6.23-r4.ebuild:
576 Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
577
578 *hardened-sources-2.6.23-r3 (04 Dec 2007)
579
580 04 Dec 2007; Christian Heim <phreak@gentoo.org>
581 +hardened-sources-2.6.23-r3.ebuild:
582 Revision bump, pulling in 2.6.23.9.
583
584 *hardened-sources-2.6.23-r2 (25 Nov 2007)
585
586 25 Nov 2007; Christian Heim <phreak@gentoo.org>
587 +hardened-sources-2.6.23-r2.ebuild:
588 Updated patchset, thanks to solar.
589
590 *hardened-sources-2.6.23-r1 (31 Oct 2007)
591
592 31 Oct 2007; Christian Heim <phreak@gentoo.org>
593 +hardened-sources-2.6.23-r1.ebuild:
594 Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
595
596 29 Oct 2007; <solar@gentoo.org> metadata.xml:
597 - update metadata.xml
598
599 25 Oct 2007; Christian Heim <phreak@gentoo.org>
600 hardened-sources-2.6.22-r8.ebuild:
601 Marking 2.6.22-r8 stable on amd64 and x86.
602
603 21 Oct 2007; Christian Heim <phreak@gentoo.org>
604 -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
605 -hardened-sources-2.6.21-r4.ebuild:
606 Removing old ebuilds.
607
608 *hardened-sources-2.4.35-r2 (21 Oct 2007)
609
610 21 Oct 2007; Christian Heim <phreak@gentoo.org>
611 +hardened-sources-2.4.35-r2.ebuild:
612 Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
613 patches.
614
615 *hardened-sources-2.6.22-r8 (21 Oct 2007)
616
617 21 Oct 2007; Christian Heim <phreak@gentoo.org>
618 +hardened-sources-2.6.22-r8.ebuild:
619 Yet another new patch, hopefully fixing the remaining issues we had w/
620 2.6.22. Candidate for stabling.
621
622 *hardened-sources-2.6.23 (13 Oct 2007)
623
624 13 Oct 2007; Christian Heim <phreak@gentoo.org>
625 +hardened-sources-2.6.23.ebuild:
626 Initial hardened-sources-2.6.23. If people still have problems w/ bug
627 194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
628
629 11 Oct 2007; Christian Heim <phreak@gentoo.org>
630 hardened-sources-2.6.20-r10.ebuild:
631 Pulling in yet another new genpatches version, fixing the PWC bug for real.
632
633 04 Oct 2007; Christian Heim <phreak@gentoo.org>
634 -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
635 Removing old versions.
636
637 *hardened-sources-2.6.22-r7 (01 Oct 2007)
638
639 01 Oct 2007; Christian Heim <phreak@gentoo.org>
640 +hardened-sources-2.6.22-r7.ebuild:
641 Revision bump, pulling in a newer patch. Should fix #194276.
642
643 30 Sep 2007; Christian Heim <phreak@gentoo.org>
644 hardened-sources-2.6.20-r10.ebuild:
645 Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
646 Mike Doty).
647
648 *hardened-sources-2.6.22-r6 (26 Sep 2007)
649
650 26 Sep 2007; Christian Heim <phreak@gentoo.org>
651 +hardened-sources-2.6.22-r6.ebuild:
652 Revision bump, grabbing up till Linux 2.6.22.9.
653
654 24 Sep 2007; Christian Heim <phreak@gentoo.org>
655 -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
656 Cleaning up further.
657
658 *hardened-sources-2.6.20-r10 (24 Sep 2007)
659
660 24 Sep 2007; Christian Heim <phreak@gentoo.org>
661 -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
662 +hardened-sources-2.6.20-r10.ebuild:
663 Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
664 revisions.
665
666 *hardened-sources-2.6.22-r5 (22 Sep 2007)
667
668 22 Sep 2007; Christian Heim <phreak@gentoo.org>
669 +hardened-sources-2.6.22-r5.ebuild:
670 Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
671
672 17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
673 Removing johnm from metadata.xml (see #186467 for reference).
674
675 *hardened-sources-2.6.22-r4 (17 Sep 2007)
676
677 17 Sep 2007; Christian Heim <phreak@gentoo.org>
678 +hardened-sources-2.6.22-r4.ebuild:
679 Revision bump, hopefully fixing all those weird PAX failures.
680
681 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
682 Updating the metadata.xml.
683
684 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
685 Removing tocharian from metadata due to his retirement (see #71718 for
686 reference).
687
688 *hardened-sources-2.6.20-r9 (30 Aug 2007)
689
690 30 Aug 2007; Christian Heim <phreak@gentoo.org>
691 +hardened-sources-2.6.20-r9.ebuild:
692 Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
693
694 29 Aug 2007; Christian Heim <phreak@gentoo.org>
695 -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
696 -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
697 -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
698 -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
699 -hardened-sources-2.6.22-r2.ebuild:
700 Removing some redundant versions.
701
702 *hardened-sources-2.4.35-r1 (29 Aug 2007)
703
704 29 Aug 2007; Christian Heim <phreak@gentoo.org>
705 +hardened-sources-2.4.35-r1.ebuild:
706 Revision bump, new grsecurity patch.
707
708 *hardened-sources-2.6.20-r8 (26 Aug 2007)
709
710 26 Aug 2007; Christian Heim <phreak@gentoo.org>
711 +hardened-sources-2.6.20-r8.ebuild:
712 Revision bump for Linux 2.6.20.17.
713
714 *hardened-sources-2.6.22-r3 (22 Aug 2007)
715
716 22 Aug 2007; Christian Heim <phreak@gentoo.org>
717 +hardened-sources-2.6.22-r3.ebuild:
718 Revision bump for Linux 2.6.22.4.
719
720 16 Aug 2007; Christian Heim <phreak@gentoo.org>
721 hardened-sources-2.6.22-r2.ebuild:
722 Updated patchset, to fix the alignment against 2.6.22.3.
723
724 *hardened-sources-2.6.22-r2 (16 Aug 2007)
725
726 16 Aug 2007; Christian Heim <phreak@gentoo.org>
727 +hardened-sources-2.6.22-r2.ebuild:
728 Revision bump for Linux 2.6.22.3.
729
730 *hardened-sources-2.4.35 (16 Aug 2007)
731
732 16 Aug 2007; Christian Heim <phreak@gentoo.org>
733 +hardened-sources-2.4.35.ebuild:
734 Version bump, initial version for Linux 2.4.35.
735
736 *hardened-sources-2.6.21-r4 (16 Aug 2007)
737
738 16 Aug 2007; Christian Heim <phreak@gentoo.org>
739 +hardened-sources-2.6.21-r4.ebuild:
740 Revision bump for Linux 2.6.21.6.
741
742 *hardened-sources-2.6.20-r7 (16 Aug 2007)
743
744 16 Aug 2007; Christian Heim <phreak@gentoo.org>
745 +hardened-sources-2.6.20-r7.ebuild:
746 Revision bump for Linux 2.6.20.16.
747
748 *hardened-sources-2.6.22-r1 (13 Aug 2007)
749
750 13 Aug 2007; Christian Heim <phreak@gentoo.org>
751 +hardened-sources-2.6.22-r1.ebuild:
752 Yet another revision bump.
753
754 *hardened-sources-2.6.22 (10 Aug 2007)
755
756 10 Aug 2007; Christian Heim <phreak@gentoo.org>
757 +hardened-sources-2.6.22.ebuild:
758 Initial release for 2.6.22. If you are using hardened-sources on a desktop
759 machine (P4 or newer), be aware you might need to disable
760 CONFIG_PAX_PAGEEXEC.
761
762 04 Aug 2007; Christian Heim <phreak@gentoo.org>
763 hardened-sources-2.6.20-r6.ebuild:
764 Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
765 2.6.20.15.
766
767 10 Jul 2007; Christian Heim <phreak@gentoo.org>
768 hardened-sources-2.6.20-r5.ebuild:
769 Marking hardened-sources-2.6.20-r5 stable on ppc.
770
771 10 Jul 2007; Christian Heim <phreak@gentoo.org>
772 -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
773 Cleanup.
774
775 *hardened-sources-2.6.20-r6 (08 Jul 2007)
776
777 08 Jul 2007; Christian Heim <phreak@gentoo.org>
778 +hardened-sources-2.6.20-r6.ebuild:
779 Revision bump, grabbing yet another stable release.
780
781 17 Jun 2007; Christian Heim <phreak@gentoo.org>
782 -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
783 -hardened-sources-2.6.21-r2.ebuild:
784 Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
785 alpha stable KEYWORD by mistake.
786
787 17 Jun 2007; Christian Heim <phreak@gentoo.org>
788 hardened-sources-2.6.20-r5.ebuild:
789 Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
790 genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
791
792 *hardened-sources-2.6.21-r3 (12 Jun 2007)
793
794 12 Jun 2007; Christian Heim <phreak@gentoo.org>
795 +hardened-sources-2.6.21-r3.ebuild:
796 Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
797 of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
798 love.
799
800 *hardened-sources-2.6.20-r5 (11 Jun 2007)
801
802 11 Jun 2007; Christian Heim <phreak@gentoo.org>
803 +hardened-sources-2.6.20-r5.ebuild:
804 Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
805 of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
806 love.
807
808 *hardened-sources-2.4.34.5 (11 Jun 2007)
809
810 11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
811 +hardened-sources-2.4.34.5.ebuild:
812 added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
813
814 30 May 2007; Christian Heim <phreak@gentoo.org>
815 -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
816 Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
817 stale ebuild(s).
818
819 30 May 2007; Christian Heim <phreak@gentoo.org>
820 -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
821 -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
822 -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
823 Doing some cleanups, remove stale ebuilds.
824
825 26 May 2007; Christian Heim <phreak@gentoo.org>
826 hardened-sources-2.6.21-r2.ebuild:
827 Fixing the grsecurity patch, had one '};' too much.
828
829 *hardened-sources-2.6.21-r2 (26 May 2007)
830
831 26 May 2007; Christian Heim <phreak@gentoo.org>
832 -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
833 +hardened-sources-2.6.21-r2.ebuild:
834 Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
835 grsecurity patch to 2.1.10-2.6.21.1-200705221918.
836
837 *hardened-sources-2.6.20-r4 (26 May 2007)
838
839 26 May 2007; Christian Heim <phreak@gentoo.org>
840 -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
841 Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
842 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
843
844 15 May 2007; Christian Heim <phreak@gentoo.org>
845 hardened-sources-2.6.20-r3.ebuild:
846 Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
847 introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
848 grsecurity patch fail in that exact same hunk.
849
850 *hardened-sources-2.6.20-r3 (15 May 2007)
851
852 15 May 2007; Christian Heim <phreak@gentoo.org>
853 +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
854 Revision bump, incorporating Linux 2.6.20.11.
855
856 *hardened-sources-2.6.21-r1 (11 May 2007)
857
858 11 May 2007; Christian Heim <phreak@gentoo.org>
859 +hardened-sources-2.6.21-r1.ebuild:
860 Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
861 mentioned in #177234.
862
863 07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
864 files/digest-hardened-sources-2.6.21, Manifest:
865 Fix Manifest/digest for linux-2.6.21.tar.bz2
866
867 06 May 2007; Christian Heim <phreak@gentoo.org>
868 hardened-sources-2.6.21.ebuild:
869 Bumping the hardened-patches version, needed for the fix for #177234.
870
871 *hardened-sources-2.6.21 (02 May 2007)
872
873 02 May 2007; Christian Heim <phreak@gentoo.org>
874 +hardened-sources-2.6.21.ebuild:
875 Version bump, Linux 2.6.21-hardened.
876
877 29 Apr 2007; Christian Heim <phreak@gentoo.org>
878 hardened-sources-2.6.20-r2.ebuild:
879 Adding ~ia64 on Ned's request.
880
881 29 Apr 2007; Christian Heim <phreak@gentoo.org>
882 hardened-sources-2.6.20-r2.ebuild:
883 Fixing the included grsecurity patch, wasn't alligning due to the Index:
884 header line(s).
885
886 29 Apr 2007; Christian Heim <phreak@gentoo.org>
887 hardened-sources-2.6.20-r2.ebuild:
888 Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
889
890 *hardened-sources-2.6.20-r2 (10 Apr 2007)
891
892 10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
893 +hardened-sources-2.6.20-r2.ebuild:
894 Version bump, on behalf of phreak
895
896 *hardened-sources-2.6.20-r1 (04 Apr 2007)
897
898 04 Apr 2007; Christian Heim <phreak@gentoo.org>
899 +hardened-sources-2.6.20-r1.ebuild:
900 Revision bump, grabbing a newer grsecurity snapshot.
901
902 *hardened-sources-2.6.20 (25 Mar 2007)
903
904 25 Mar 2007; Christian Heim <phreak@gentoo.org>
905 +hardened-sources-2.6.20.ebuild:
906 Finally a hardened-sources version for 2.6.20; many people have been waiting
907 for this. Thanks to Steve for preliminary testing, thanks to Ned for the
908 testbox.
909
910 16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
911 hardened-sources-2.6.18-r6.ebuild:
912 Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
913
914 *hardened-sources-2.6.18-r6 (16 Mar 2007)
915
916 16 Mar 2007; Christian Heim <phreak@gentoo.org>
917 -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
918 Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
919 yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
920 supposed to be.
921
922 06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
923 Fixing the Manifest, the previous one was broken (as in still had the
924 deleted ebuild in it).
925
926 06 Mar 2007; Christian Heim <phreak@gentoo.org>
927 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
928 +hardened-sources-2.6.18-r5.ebuild:
929 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
930 Linux 2.6.18.8. Also cleaning up the older version.
931
932 *hardened-sources-2.6.18-r5 (06 Mar 2007)
933
934 06 Mar 2007; Christian Heim <phreak@gentoo.org>
935 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
936 +hardened-sources-2.6.18-r5.ebuild:
937 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
938 Linux 2.6.18.8. Also cleaning up the older version.
939
940 24 Feb 2007; Christian Heim <phreak@gentoo.org>
941 -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
942 -hardened-sources-2.6.19-r5.ebuild:
943 Removing some of the old version, that didn't work.
944
945 *hardened-sources-2.6.19-r6 (12 Feb 2007)
946
947 12 Feb 2007; Christian Heim <phreak@gentoo.org>
948 +hardened-sources-2.6.19-r6.ebuild:
949 Revision bump, including a new grsec version fixing #166235.
950
951 *hardened-sources-2.4.34 (24 Jan 2007)
952
953 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
954 Manifest:
955 updating Manifest with checksums of new tarball and ebuild
956
957 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
958 +hardened-sources-2.4.34.ebuild:
959 I added new hardened sources 2.4 update, this is a critical path
960 security bugfix - all users of h-s are strongly advised
961 to update their existing hardened sources to this version.
962 It contains a fix for a kernel vulnerability that is pertaining
963 to the PaX changes to virtual memory management, possibly leading
964 to a local kernel exploit ... see grsecurity.net forums and homepage
965
966 23 Jan 2007; Christian Heim <phreak@gentoo.org>
967 files/digest-hardened-sources-2.6.19-r5, Manifest:
968 Fixing the patch-tarball digest.
969
970 *hardened-sources-2.6.19-r5 (23 Jan 2007)
971
972 23 Jan 2007; Christian Heim <phreak@gentoo.org>
973 +hardened-sources-2.6.19-r5.ebuild:
974 Revision bump, closing the recently discovered PaX expand_stack()
975 vulnerability.
976
977 *hardened-sources-2.6.19-r4 (14 Jan 2007)
978
979 14 Jan 2007; Christian Heim <phreak@gentoo.org>
980 +hardened-sources-2.6.19-r4.ebuild:
981 Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
982 dropping the randomized PID feature.
983
984 11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
985 hardened-sources-2.4.33.4.ebuild:
986 stable x86, bug #161171
987
988 *hardened-sources-2.6.19-r3 (27 Dec 2006)
989
990 27 Dec 2006; Christian Heim <phreak@gentoo.org>
991 -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
992 Revision bump for bug #157186 and #158786.
993
994 *hardened-sources-2.6.18-r4 (27 Dec 2006)
995
996 27 Dec 2006; Christian Heim <phreak@gentoo.org>
997 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
998 Revision bump for bug #157186.
999
1000 *hardened-sources-2.6.19-r2 (23 Dec 2006)
1001
1002 23 Dec 2006; Christian Heim <phreak@gentoo.org>
1003 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1004 Revision bump to pull in genpatches-2.6.19-3 for #157186.
1005
1006 17 Dec 2006; Christian Heim <phreak@gentoo.org>
1007 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1008 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1009 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1010 hardened-sources-2.6.19-r1.ebuild:
1011 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1012 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1013
1014 *hardened-sources-2.4.33.4 (17 Dec 2006)
1015
1016 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1017 +hardened-sources-2.4.33.4.ebuild:
1018 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1019 and quilting
1020
1021 *hardened-sources-2.6.19-r1 (14 Dec 2006)
1022
1023 14 Dec 2006; Christian Heim <phreak@gentoo.org>
1024 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1025 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1026 for reporting).
1027
1028 *hardened-sources-2.6.19 (13 Dec 2006)
1029
1030 13 Dec 2006; Christian Heim <phreak@gentoo.org>
1031 +hardened-sources-2.6.19.ebuild:
1032 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1033 Brad for providing that prompt update.
1034
1035 *hardened-sources-2.6.18-r3 (13 Dec 2006)
1036
1037 13 Dec 2006; Christian Heim <phreak@gentoo.org>
1038 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1039 +hardened-sources-2.6.18-r3.ebuild:
1040 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1041 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1042
1043 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1044 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1045
1046 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1047 Stable on ppc wrt bug 157356
1048
1049 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1050 hardened-sources-2.6.18.ebuild:
1051 stable x86, bug #157356
1052
1053 *hardened-sources-2.6.18-r2 (06 Dec 2006)
1054
1055 06 Dec 2006; Christian Heim <phreak@gentoo.org>
1056 +hardened-sources-2.6.18-r2.ebuild:
1057 Revision bump, including 2.6.18.5 (via genpatches) and
1058 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1059 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1060 redesign.
1061
1062 06 Dec 2006; Christian Heim <phreak@gentoo.org>
1063 hardened-sources-2.6.18.ebuild:
1064 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1065 of Mike Doty).
1066
1067 *hardened-sources-2.6.18-r1 (23 Nov 2006)
1068
1069 23 Nov 2006; Christian Heim <phreak@gentoo.org>
1070 +hardened-sources-2.6.18-r1.ebuild:
1071 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1072
1073 *hardened-sources-2.6.18 (11 Nov 2006)
1074
1075 11 Nov 2006; Christian Heim <phreak@gentoo.org>
1076 +hardened-sources-2.6.18.ebuild:
1077 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1078
1079 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1080 - mark amd64 stable also. bug #151877
1081
1082 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1083 - mark 2.6.17-r1 stable
1084
1085 27 Aug 2006; Christian Heim <phreak@gentoo.org>
1086 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1087 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1088
1089 *hardened-sources-2.6.17-r1 (26 Aug 2006)
1090
1091 26 Aug 2006; Christian Heim <phreak@gentoo.org>
1092 +hardened-sources-2.6.17-r1.ebuild:
1093 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1094 grsecurity patch.
1095
1096 *hardened-sources-2.6.17 (17 Aug 2006)
1097
1098 17 Aug 2006; Christian Heim <phreak@gentoo.org>
1099 +hardened-sources-2.6.17.ebuild:
1100 Bumping the hardened-sources-2.6 series to 2.6.17, using
1101 genpatches-2.6.17-6.base.
1102
1103 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1104 - stable on x86 and amd64
1105
1106 *hardened-sources-2.6.16-r11 (15 Jul 2006)
1107
1108 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1109 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1110 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1111 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1112 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1113 crusty ebuilds
1114
1115 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1116 hardened-sources-2.6.16-r10.ebuild:
1117 marking stable on x86 and amd64
1118
1119 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1120 - 2.4.32-r6 stable on x86. RSBAC state unknown
1121
1122 *hardened-sources-2.4.32-r7 (10 Jul 2006)
1123
1124 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1125 +hardened-sources-2.4.32-r7.ebuild:
1126 Bump PaX for RSBAC to test-17
1127
1128 *hardened-sources-2.6.16-r9 (03 Jul 2006)
1129
1130 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1131 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1132 hardened-sources-2.6.16 bump to latest -base.
1133
1134 *hardened-sources-2.4.32-r6 (30 Jun 2006)
1135
1136 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1137 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1138 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1139 sysctl controlable resource logging
1140
1141 *hardened-sources-2.6.16-r7 (05 Jun 2006)
1142
1143 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1144 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1145 push new 2.6.16 release in preparation for stable
1146
1147 22 May 2006; <solar@gentoo.org> :
1148 - redigest bug 134002
1149
1150 *hardened-sources-2.4.32-r5 (16 May 2006)
1151
1152 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1153 +hardened-sources-2.4.32-r5.ebuild:
1154 Fixes rsbac common patching (new patch in new -r5 patchset)
1155
1156 *hardened-sources-2.4.32-r4 (13 May 2006)
1157
1158 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1159 +hardened-sources-2.4.32-r4.ebuild:
1160 - security bumps
1161
1162 *hardened-sources-2.6.16-r6 (03 May 2006)
1163
1164 03 May 2006; John Mylchreest <johnm@gentoo.org>
1165 +hardened-sources-2.6.16-r6.ebuild:
1166 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1167
1168 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1169 hardened-sources-2.6.14-r8.ebuild:
1170 fix x86_64 build problem, this will delay the digest issue again for a short
1171 while but it will sort itself out
1172
1173 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1174 hardened-sources-2.6.14-r8.ebuild:
1175 bump hardened patchset
1176
1177 27 Apr 2006; Alec Warner <antarus@gentoo.org>
1178 files/digest-hardened-sources-2.4.32-r2,
1179 files/digest-hardened-sources-2.4.32-r3,
1180 files/digest-hardened-sources-2.6.14-r8, Manifest:
1181 Fixing duff SHA256 digests: Bug # 131293
1182
1183 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1184
1185 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1186 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1187 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1188 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1189 cleanup of old uneccessary sources
1190
1191 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1192 fix digest
1193
1194 *hardened-sources-2.6.14-r8 (20 Apr 2006)
1195
1196 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1197 +hardened-sources-2.6.14-r8.ebuild:
1198 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1199
1200 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1201 Turning on gpg-signing again, and recomitting
1202
1203 *hardened-sources-2.6.16-r4 (20 Apr 2006)
1204
1205 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1206 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1207 +hardened-sources-2.6.16-r4.ebuild:
1208 Fix numerous security vulns
1209
1210 *hardened-sources-2.4.32-r3 (16 Apr 2006)
1211
1212 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1213 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1214 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1215 - security bump for bug #112791. Removed old ebuilds
1216
1217 *hardened-sources-2.6.16-r3 (15 Apr 2006)
1218
1219 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1220 +hardened-sources-2.6.16-r3.ebuild:
1221 Removing silly localversion which I missed
1222
1223 *hardened-sources-2.6.14-r7 (14 Apr 2006)
1224
1225 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1226 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1227 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1228
1229 *hardened-sources-2.6.16-r2 (13 Apr 2006)
1230
1231 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1232 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1233 +hardened-sources-2.6.16-r2.ebuild:
1234 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1235 labels, dropping USERGROUP define fixes, since these were merged mainstream.
1236
1237 *hardened-sources-2.6.16-r1 (11 Apr 2006)
1238
1239 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1240 +hardened-sources-2.6.16-r1.ebuild:
1241 Bumping to include ppc build fix and 2.6.16.3
1242
1243 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1244 hardened-sources-2.6.14-r6.ebuild:
1245 Stable on x86; bug #127718
1246
1247 *hardened-sources-2.6.16 (31 Mar 2006)
1248
1249 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1250 +hardened-sources-2.6.16.ebuild:
1251 Bumping to new version of grsec, and kernel base. New squashfs. Based on
1252 2.6.16.1
1253
1254 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1255 hardened-sources-2.6.14-r6.ebuild:
1256 Stable on amd64, bug 127718.
1257
1258 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1259 Stable on ppc. Bug #127718
1260
1261 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1262 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1263 -hardened-sources-2.6.14-r4.ebuild:
1264 Cleanup.
1265
1266 *hardened-sources-2.6.14-r6 (15 Mar 2006)
1267
1268 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1269 +hardened-sources-2.6.14-r6.ebuild:
1270 Fixes grsec policy recreation bug and adds a
1271 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1272
1273 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1274 - stable on x86
1275
1276 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1277 hardened-sources-2.6.14-r5.ebuild:
1278 Stable on ppc.
1279
1280 *hardened-sources-2.6.14-r5 (01 Feb 2006)
1281
1282 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1283 +hardened-sources-2.6.14-r5.ebuild:
1284 fixing every known exploit
1285
1286 *hardened-sources-2.4.32-r2 (26 Jan 2006)
1287
1288 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1289 +hardened-sources-2.4.32-r2.ebuild:
1290 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1291
1292 *hardened-sources-2.6.14-r4 (12 Jan 2006)
1293
1294 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1295 - version bump for new genpatches which fix up a few sec holes
1296
1297 *hardened-sources-2.4.32-r1 (05 Jan 2006)
1298
1299 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1300 - revision bump to add misc vital linux kernel security patches.
1301
1302 *hardened-sources-2.6.14-r3 (30 Dec 2005)
1303
1304 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1305 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1306 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1307
1308 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1309 hardened-sources-2.6.14-r2.ebuild:
1310 making x86 & amd64 stable following testing.
1311
1312 *hardened-sources-2.6.14-r2 (27 Dec 2005)
1313
1314 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1315 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1316 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1317 network hooks.
1318
1319 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1320 hardened-sources-2.6.14-r1.ebuild:
1321 bumping to stable early for sec fix on x86 & amd64
1322
1323 *hardened-sources-2.6.14-r1 (05 Dec 2005)
1324
1325 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1326 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1327 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1328
1329 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1330 - stable on x86 security bug #114227 CAN-2005-3257
1331
1332 *hardened-sources-2.4.32 (19 Nov 2005)
1333
1334 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1335 +hardened-sources-2.4.32.ebuild:
1336 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1337 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1338 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1339 rsbac >> /etc/portage/package.use)
1340
1341 *hardened-sources-2.6.14 (14 Nov 2005)
1342
1343 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1344 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1345 Bumping 2.6 series to 2.6.14.2
1346
1347 *hardened-sources-2.6.13-r2 (20 Oct 2005)
1348
1349 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1350 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1351 +hardened-sources-2.6.13-r2.ebuild:
1352 Fixes minor build error in ppc.
1353
1354 *hardened-sources-2.6.13-r1 (17 Oct 2005)
1355
1356 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1357 +hardened-sources-2.6.13-r1.ebuild:
1358 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1359 2.6.13.4, fixes some major amd64 stability problems.
1360
1361 *hardened-sources-2.6.13 (16 Sep 2005)
1362
1363 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1364 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1365 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1366 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1367 users should test this thoroughly.
1368
1369 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1370 - stable on x86
1371
1372 *hardened-sources-2.6.11-r15 (27 Jun 2005)
1373
1374 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1375 +hardened-sources-2.6.11-r15.ebuild:
1376 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1377 grsec redefining curr_ip struct.
1378
1379 *hardened-sources-2.4.31 (20 Jun 2005)
1380
1381 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1382 initial import of 2.4.31 tree
1383
1384 *hardened-sources-2.6.11-r14 (14 Jun 2005)
1385
1386 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1387 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1388 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1389 naming scheme to abide by genpatches
1390
1391 *hardened-sources-2.6.11-r13 (18 May 2005)
1392
1393 18 May 2005; John Mylchreest <johnm@gentoo.org>
1394 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1395 Managed to mangle the Makefile patch from grsec, to miss out the grsec
1396 target. sorry about that. Fixes bug #93022
1397
1398 *hardened-sources-2.6.11-r12 (17 May 2005)
1399
1400 17 May 2005; John Mylchreest <johnm@gentoo.org>
1401 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1402 +hardened-sources-2.6.11-r12.ebuild:
1403 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1404 merges in genpatches-base
1405
1406 *hardened-sources-2.6.11-r12 (17 May 2005)
1407
1408 17 May 2005; John Mylchreest <johnm@gentoo.org>
1409 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1410 +hardened-sources-2.6.11-r12.ebuild:
1411 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1412 merges in genpatches-base
1413
1414 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1415 -files/2.4.27-cmdline-race.patch,
1416 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1417 -files/2.4.28-grsec-binfmt_a.out.patch,
1418 -files/2.4.28-grsec-cmdline-race.patch,
1419 -files/2.4.28-selinux-binfmt_a.out.patch,
1420 -files/2.4.28-selinux-cmdline-race.patch,
1421 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1422 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1423 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1424 cleanup..
1425
1426 *hardened-sources-2.4.30-r1 (21 Apr 2005)
1427
1428 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1429 - disable aout by default
1430
1431 *hardened-sources-2.4.30 (18 Apr 2005)
1432
1433 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1434 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1435 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1436 use
1437
1438 *hardened-sources-2.4.29 (30 Mar 2005)
1439
1440 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1441 +hardened-sources-2.4.29.ebuild:
1442 New hardened-patches-2.4-29.0 patchball.
1443 Removed SELinux support, upgraded GRSecurity to 2.1.4.
1444
1445 *hardened-sources-2.4.28-r5 (06 Mar 2005)
1446
1447 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1448 +hardened-sources-2.4.28-r5.ebuild:
1449 Added a fix for a PaX vulnerability.
1450
1451 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1452 hardened-sources-2.4.28-r4.ebuild:
1453 Stable on x86
1454
1455 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1456 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1457 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1458 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1459 - fixed/added RDEPEND= in all kernel-2 ebuilds
1460
1461 *hardened-sources-2.4.28-r4 (21 Jan 2005)
1462
1463 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1464 +hardened-sources-2.4.28-r4.ebuild:
1465 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1466 backport of neighbour hash updates.
1467
1468 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1469 hardened-sources-2.4.28-r3.ebuild:
1470 Stable on x86
1471
1472 *hardened-sources-2.6.10-r3 (20 Jan 2005)
1473
1474 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1475 +hardened-sources-2.6.10-r3.ebuild:
1476 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1477 in 2005.0
1478
1479 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1480 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1481 hardened-sources-2.4.28-r2.ebuild:
1482 Mark stable on x86
1483
1484 *hardened-sources-2.4.28-r3 (17 Jan 2005)
1485
1486 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1487 +hardened-sources-2.4.28-r3.ebuild:
1488 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1489
1490 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1491 hardened-sources-2.4.28.ebuild:
1492 Mark stable on x86.
1493
1494 *hardened-sources-2.4.28-r2 (13 Jan 2005)
1495
1496 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1497 +hardened-sources-2.4.28-r2.ebuild:
1498 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1499 Mazinger for grsecurity patches as well.
1500
1501 *hardened-sources-2.4.28-r1 (23 Dec 2004)
1502
1503 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1504 Security bump. Thank tocharian for rolling a new patchset...
1505
1506 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1507 +files/2.4.28-grsec-cmdline-race.patch,
1508 +files/2.4.28-selinux-binfmt_a.out.patch,
1509 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1510 - Round up remaining security patches that appear to be missing in 2.4.28. -
1511 PaX standalone updated to current. hgpv=28.1
1512
1513 *hardened-sources-2.4.28 (28 Nov 2004)
1514
1515 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1516 security bump. Thank tocharian for rolling a new patchset
1517
1518 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1519
1520 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1521 +hardened-sources-2.4.27-r3.ebuild:
1522 Applies the new 2.4-27.2 patchball which updates
1523 GRSecurity to the 2.0.1 version.
1524
1525 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1526
1527 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1528 +hardened-sources-2.4.27-r2.ebuild:
1529 Version bump.
1530 This version uses the new 2.4-27.1 patchball which updates
1531 both the SELinux PaX hooks patch and the SELinux headers.
1532
1533 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1534
1535 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1536 +hardened-sources-2.4.27-r1.ebuild,
1537 -hardened-sources-2.4.27.ebuild,
1538 +files/2.4.27-cmdline-race.patch:
1539 Version bump, fix for cmdline race. See bug #59905.
1540
1541 *hardened-sources-2.4.26-r6 (09 Aug 2004)
1542
1543 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1544 +hardened-sources-2.4.26-r6.ebuild,
1545 -hardened-sources-2.4.26-r5.ebuild,
1546 -hardened-sources-2.4.26-r4.ebuild,
1547 +files/2.4.26-cmdline-race.patch:
1548 Version bump, fix for cmdline race. See bug #59905.
1549
1550 *hardened-sources-2.4.27 (08 Aug 2004)
1551
1552 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1553 +hardened-sources-2.4.27.ebuild,
1554 +files/2.4.27-CAN-2004-0394.patch:
1555 Ported the patchball to the 2.4.27 kernel version.
1556
1557 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1558
1559 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1560 +hardened-sources-2.4.26-r5.ebuild:
1561 Updated to use the new hardened-patches-2.4-26.1 patchball.
1562 It adds the following features:
1563 - Squashfs
1564 - Ebtables
1565 - Netdev random (core+drivers)
1566 - Watchdog Timer (WDT) fix.
1567
1568 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1569
1570 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1571 +hardened-sources-2.4.26-r4.ebuild,
1572 +files/2.4.26-CAN-2004-0415.patch,
1573 -hardened-sources-2.4.26-3:
1574 Version bump, fix for CAN 0415, see bug #59378.
1575
1576 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1577
1578 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1579 +hardened-sources-2.4.26-r3.ebuild,
1580 +files/2.4.26-CAN-2004-0497.patch,
1581 -hardened-sources-2.4.26-r2.ebuild:
1582 Version bump, fixed CAN 0497, see bug #56171.
1583
1584 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1585
1586 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1587 +hardened-sources-2.4.26-r2.ebuild,
1588 +files/2.4.26-CAN-2004-0495.patch,
1589 +files/2.4.26-CAN-2004-0535.patch,
1590 -hardened-sources-2.4.26-r1.ebuild:
1591 Fixes for both CAN 0495 and 0535, see bug #54976
1592
1593 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1594 hardened-sources-2.4.26-r1.ebuild:
1595 QA - fix use invocation
1596
1597 *hardened-sources-2.4.26-r1 (22 June 2004)
1598
1599 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1600 +hardened-sources-2.4.26-r1.ebuild,
1601 +files/2.4.26-CAN-2004-0394.patch,
1602 +files/2.4.26-signal-race.patch,
1603 -hardened-sources-2.4.26.ebuild,
1604 -hardened-sources-2.4.24-r3.ebuild:
1605 Version bump for the CAN-2004-0394 issue and bug #53804
1606 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1607
1608
1609 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1610 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1611 Masked hardened-sources-2.4.26.ebuild broken for ppc
1612
1613 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1614 hardened-sources-2.4.24-r3.ebuild:
1615 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1616
1617 *hardened-sources-2.4.26 (29 May 2004)
1618
1619 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1620 +hardened-sources-2.4.26.ebuild:
1621 Updated hardened-sources for the 2.4.26 kernel
1622 Removed broken components, updated almost everything.
1623
1624 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1625
1626 17 Apr 2004; <plasmaroo@gentoo.org>
1627 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1628 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1629 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1630 +hardened-sources-2.4.24-r3.ebuild:
1631 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1632 vulnerabilities. Old revisions removed.
1633
1634 *hardened-sources-2.4.24-r2 (15 Apr 2004)
1635
1636 15 Apr 2004; <plasmaroo@gentoo.org>
1637 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1638 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1639 Version bump for the CAN-2004-0109 issue; bug #47881.
1640
1641 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1642 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1643 Add eutils to inherit.
1644
1645 *hardened-sources-2.4.24-r1 (19 Feb 2004)
1646
1647 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1648 files/hardened-sources-2.4.24.munmap.patch:
1649 Added the patch for the mremap/munmap vulnerability. Bug #42024.
1650
1651 *hardened-sources-2.4.24 (06 Feb 2004)
1652
1653 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1654 hardened-sources-2.4.24.ebuild:
1655 Version bump, updated most of the components.
1656 This release includes the following:
1657
1658 - Hardened security
1659 - Netfilter patch-o-matic 20031219
1660 - FreeSWAN 2.04 & x509 1.4.8
1661 - EVMS 2.2.2
1662 - XFS 1.3.1
1663 - cryptoloop jari
1664 - grsecurity 2.0-rc4
1665 - SELinux
1666 - PaX 200402060000
1667 - PaX Obscurity 200308302223
1668 - Others...
1669
1670 Neither -ck nor systrace are included anymore.
1671
1672 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1673
1674 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1675 hardened-sources-2.4.22-r2.ebuild:
1676 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1677
1678 *hardened-sources-2.4.22-r1 (02 Dec 2003)
1679
1680 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1681 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1682
1683 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1684 hardened-sources-2.4.22-r1.ebuild:
1685 Version bump for the 'do_brk' vulnerability.
1686
1687 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1688 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1689 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1690 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1691 Fix the 'do_brk' vulnerability.
1692
1693 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1694 hardened-sources-2.4.22.ebuild:
1695 - Removed the src_install() portion for SELinux flask
1696 components. These are no longer handled in the kernel
1697 so this code was not necessary.
1698
1699 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1700 New 2.4.22 based hardened-sources thanks to
1701 Phil West <p.west@computer.org>.
1702
1703 These sources include:
1704 - New SELinux API
1705 - Updated CK-base
1706 - Updated GRSec
1707 - Systrace
1708 - SuperFreeS/WAN 1.99.8
1709 - Propolice kernel build support
1710 - EVMS
1711 - Other various security related patches
1712
1713 *hardened-sources-2.4.21 (14 Sep 2003)
1714
1715 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1716 Updated hardened-sources based on the 2.4.21 Linux kernel.
1717 This includes updates to most major components such as:
1718 - ck-base-0306300059
1719 - selinux-2.4-2003071106
1720 - grsecurity-2.0-rc1
1721 - Updated IPTables patch-o-matic
1722 - Updated SuperFreeS/WAN
1723
1724 Thanks to Phil West <pwest@computer.org> for his work in getting this
1725 updated patch set ready for the 2.4.21 based kernel.
1726
1727 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1728 Initial import of hardened-sources-2.4.20-r4. This revision
1729 includes only a few changes, but one of these is an important
1730 security fix. It is recommended all users of hardened-sources
1731 upgrade to this release.
1732
1733 - ioperm bug fix
1734 - fixed compilation failure when building without GRSec
1735
1736 SAL (Secure Auditing for Linux) is NOT included in this revision
1737 due to time constraints, but is planned for inclusion in the near
1738 future.
1739
1740 *hardened-sources-2.4.20-r2 (12 Jun 2003)
1741
1742 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1743 hardened-sources-2.4.20-r3.ebuild:
1744 Add Header...
1745
1746 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1747 hardened-sources-2.4.20-r3.ebuild:
1748 Removed warnings from ebuild. This kernel should be safe to
1749 use at this point.
1750
1751 *hardened-sources-2.4.20-r3 (08 Jun 2003)
1752
1753 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1754 hardened-sources-2.4.20-r3.ebuild:
1755 New revision. Includes the following changes over -r2:
1756
1757 - ck7-base (O(1), preempt, low latency)
1758 - Super FreeS/WAN 1.99.7rc2
1759 - PaX for the LSM/SELinux branch
1760 - GRSecurity 2.0-pre4 (role based access control)
1761 - Systrace 1.3
1762 - EXT3 fixes
1763 - EVMS 2.0.1
1764 - GCC 3.1+ compile optimizations
1765 - ProPolice kernel build support
1766 - Hashing table security fixes
1767
1768 *hardened-sources-2.4.20-r1 (09 Apr 2003)
1769
1770 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1771 Initial import of hardened-sources-r2. This new
1772 ebuild includes many new performance and security
1773 related patches. As in -r1, it will patch in
1774 LSM/SELinux if "selinux" is in USE, otherwise it
1775 will patch in GRSecurity. The following patches
1776 are included in this revision:
1777
1778 - O(1) Scheduler, Low Latency, and Preempt
1779 (pulled from the base CK patch)
1780 - ptrace exploit patch for the LSM kernel
1781 (the GRSec patch already fixes this)
1782 - LSM 2.4-2003040709
1783 - SELinux 2.4-2003040709
1784 - Systrace v1.2
1785 - IPTables patch-o-matic base patches - 20030107
1786 - CryptoAPI 2.4.20.1 w/ loop-jari patch
1787 - Super FreeS/WAN 1.99.6.1
1788 - GRSecurity 1.9.9g
1789 - MPPE
1790 - EXT3 data journal fix
1791 - CIPE 1.5.4
1792
1793 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1794 hardened-sources-2.4.20-r1.ebuild, manifest:
1795 Updated to install flask components correctly for selinux.
1796
1797 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1798 hardened-sources-2.4.20-r1.ebuild:
1799 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1800 is patched in instead. Ptrace patches for selinux have also been added. In
1801 either case, systrace support will be patched in as well.
1802
1803 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1804 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1805 Revision bump for new sources.
1806
1807 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1808 hardened-sources-2.4.20-r1.ebuild:
1809 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1810
1811 *hardened-sources-2.4.20 (30 Mar 2003)
1812
1813 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1814 hardened-sources-2.4.20.ebuild:
1815 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20