Age | Commit message (Collapse) | Author |
|
CVE-2023-38802
Before this path we used session reset method, which is discouraged by rfc7606.
Handle this as rfc requires.
This addes the fix submitted as https://github.com/FRRouting/frr/pull/14381
upstream. Using VyOS patch until the above mentioned PR is merged.
|
|
T5524: Add config directory for livecd
|
|
Add the '/config' directory for live image boot
One of the reasons the DHCP-server uses lease from this directory T2958
(cherry picked from commit cb330a797ef8c56d68220afc44798bcf8f2e0a47)
|
|
|
|
|
|
|
|
|
|
build: T5187: Fixed Realtek r8152 compatibility with 5.4 kernels
|
|
There is no need to define `eth_hw_addr_set()` in sources anymore because it is
already backported into the 5.4.254 kernel:
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/include/linux/etherdevice.h?h=v5.4.254&id=24f34f67be24674c5c3ef922de70ab95a0d7ce16
|
|
Equuleus Updates
|
|
Kernel: T5310: add stmicro driver support (Equuleus)
|
|
|
|
(cherry picked from commit f9946312dfdfb8163995cf7ddd0efb1e485fc977)
|
|
I added also additional expansion card with 2 Intel i211 NIC’s.
I want to utilize all 4 NIC’s, but I have an issue because only NIC on expansion cards are properly detected.
|
|
There is no option to build arm64 packages in equuleus
|
|
openvpn: T5272: upgrade package to Debian version 2.6.3-2 (equuleus)
|
|
Kernel: T5186: T3318: update Linux Kernel to v5.4.243
|
|
T5280: Update Expired keys (2023-06-08) for PowerDNS
|
|
Packages in the versioned repositories are signed with PGP key-id 0xFD380FBB
|
|
|
|
|
|
frr: T4737: Replaced patch for connected routes processing
|
|
An old patch breaks connected routes in a situation when more than one IP
address is presented on an interface and it switches state from down to up:
```
ip link set eth0 down
ip a add 192.0.2.50/24 dev eth0
ip a add 192.0.2.51/24 dev eth0
ip link set eth0 up
```
A new version includes more backports from frr upstream, which work well
regardless of an interface state.
|
|
FRR: Fixed BGP as-override behavior
|
|
Override peer's ASN even if original as-path contains other ASNs
This is a backport of 9bbdb4572d3bb255211fecf1c756452ab27e91c2 from
the main FRR repository
|
|
|
|
This reverts commit e873e9385cb3a9ed94d7d5cf1c967aaec9b4f504.
Newer kernel versions break QoS b/c of incompatible tc change.
|
|
r8152: T5187: Updated Realtek r8152 driver
|
|
The Realtek r8152 driver is updated to 2.16.3
|
|
ice: T5182: Included Intel ICE driver to the system
|
|
Intel ICE driver for E810 Ethernet Controllers is included in the
list of requirements for images and initramfs.
|
|
ice: T5182: added build task for Intel ICE driver
|
|
This commit adds a build task for an out-of-tree Intel ICE driver
for E810 Ethernet Controllers.
|
|
initramfs-tools: T5180: Updated initramfs tools to v0.140
|
|
The new version contains important changes in firmware path selection.
This is required for proper driver integrations.
|
|
|
|
T425: add amazon-cloudwatch-agent to AWS image (equuleus)
|
|
|
|
|
|
systemd: T5111: always disable pppd-dns.service
|
|
An update to the Debian ppp package remove the needed
/etc/ppp/ip-down.d/0000usepeerdns file. As DNS resolution is handled by
vyos-hostsd we can disable this service entirely.
|
|
Docker: T4625: add missing build dependencies
|
|
Commit 317ffe1 ("T4625: Update ocserv packet to 1.1.6-3") updated the version
used for ocserv on VyOS 1.3. This commit adds the missing dependencies
for the Docker container in order to build the ocserv packages.
|
|
T3318: T5003: Docker and Kernel updates for equuleus
|
|
|
|
The newer Docker versions seem to be a bit more picky when using tools
like goso. The container will no longer start if the gosu binary has the setuid
root bit set.
This change adjusts the container to continue working on recent Docker
versions.
|
|
T4625: Update ocserv packet to 1.1.6-3
|
|
|
|
T5001: Replace links to the phabricator site
|
|
Replace links to the phabricator site from https://phabricator.vyos.net to
https://vyos.dev
(cherry picked from commit 82f35fd474400429cc73cc93386f2a21afd9aaf8)
|