Age | Commit message (Collapse) | Author |
|
Kernel: T3318: update Linux Kernel to v5.4.261
|
|
|
|
keepalived: T5402: Added patch with arp_ignore to 1 on IPv6 VMACs
|
|
Added patch with commit '9ca8688' to keepalived package.
Setting arp_ignore to 1 ensures that the VMAC interface
does not respond to ARP requests for IPv4 addresses not
configured on the VMAC.
Backported from 1.5.
|
|
systemd: T5684: Incrised DefaultLimitMEMLOCK to 8M
|
|
This fix increases DefaultLimitMEMLOCK from 64K to 8M.
Some services cannot run, when memlock eq 64K
This bug was fixed in the next kernel release
https://github.com/torvalds/linux/commit/9dcc38e2813e0cd3b195940c98b181ce6ede8f20
|
|
systemd: T5354: always disable sshguard.service
|
|
|
|
T5624: add a hook for deleting /etc/debian_version
|
|
|
|
Revert "openvpn: T5272: upgrade package to Debian version 2.6.3-2"
|
|
This reverts commit 6383f8ae2716635d87c685df764aabcc608381e3.
|
|
Revert "frr: T5557: use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802"
|
|
CVE-2023-38802"
This reverts commit 13a5fa10d8c8632d08cf48a445c7d5925d3d42c4.
Patch merged upstream
|
|
frr: T5557: use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802
|
|
CVE-2023-38802
Before this path we used session reset method, which is discouraged by rfc7606.
Handle this as rfc requires.
This addes the fix submitted as https://github.com/FRRouting/frr/pull/14381
upstream. Using VyOS patch until the above mentioned PR is merged.
|
|
T5524: Add config directory for livecd
|
|
Add the '/config' directory for live image boot
One of the reasons the DHCP-server uses lease from this directory T2958
(cherry picked from commit cb330a797ef8c56d68220afc44798bcf8f2e0a47)
|
|
|
|
|
|
|
|
|
|
build: T5187: Fixed Realtek r8152 compatibility with 5.4 kernels
|
|
There is no need to define `eth_hw_addr_set()` in sources anymore because it is
already backported into the 5.4.254 kernel:
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/include/linux/etherdevice.h?h=v5.4.254&id=24f34f67be24674c5c3ef922de70ab95a0d7ce16
|
|
Equuleus Updates
|
|
Kernel: T5310: add stmicro driver support (Equuleus)
|
|
|
|
(cherry picked from commit f9946312dfdfb8163995cf7ddd0efb1e485fc977)
|
|
I added also additional expansion card with 2 Intel i211 NIC’s.
I want to utilize all 4 NIC’s, but I have an issue because only NIC on expansion cards are properly detected.
|
|
There is no option to build arm64 packages in equuleus
|
|
openvpn: T5272: upgrade package to Debian version 2.6.3-2 (equuleus)
|
|
Kernel: T5186: T3318: update Linux Kernel to v5.4.243
|
|
T5280: Update Expired keys (2023-06-08) for PowerDNS
|
|
Packages in the versioned repositories are signed with PGP key-id 0xFD380FBB
|
|
|
|
|
|
frr: T4737: Replaced patch for connected routes processing
|
|
An old patch breaks connected routes in a situation when more than one IP
address is presented on an interface and it switches state from down to up:
```
ip link set eth0 down
ip a add 192.0.2.50/24 dev eth0
ip a add 192.0.2.51/24 dev eth0
ip link set eth0 up
```
A new version includes more backports from frr upstream, which work well
regardless of an interface state.
|
|
FRR: Fixed BGP as-override behavior
|
|
Override peer's ASN even if original as-path contains other ASNs
This is a backport of 9bbdb4572d3bb255211fecf1c756452ab27e91c2 from
the main FRR repository
|
|
|
|
This reverts commit e873e9385cb3a9ed94d7d5cf1c967aaec9b4f504.
Newer kernel versions break QoS b/c of incompatible tc change.
|
|
r8152: T5187: Updated Realtek r8152 driver
|
|
The Realtek r8152 driver is updated to 2.16.3
|
|
ice: T5182: Included Intel ICE driver to the system
|
|
Intel ICE driver for E810 Ethernet Controllers is included in the
list of requirements for images and initramfs.
|
|
ice: T5182: added build task for Intel ICE driver
|
|
This commit adds a build task for an out-of-tree Intel ICE driver
for E810 Ethernet Controllers.
|
|
initramfs-tools: T5180: Updated initramfs tools to v0.140
|
|
The new version contains important changes in firmware path selection.
This is required for proper driver integrations.
|