Age | Commit message (Collapse) | Author |
|
(cherry picked from commit 4417986365472fd9055b12309ba49d88272db04c)
|
|
Fix CVE-2023-48795: (terrapin attack)
The SSH transport protocol with certain OpenSSH extensions allows remote
attackers to bypass integrity checks such that some packets are omitted (from
the extension negotiation message), and a client and server may consequently
end up with a connection for which some security features have been downgraded
or disabled, aka a Terrapin attack.
(cherry picked from commit b17befe2e4e914f3f604bcfa1843f75519d46a4d)
|
|
Bump the `hsflowd` version to `v2.0.55-1`
Fixed and extended PCAP capabilities for not hardware/bridge
interfaces (like GRE tunnel interface).
It fixes crashes the daemon if you use tunnel interfaces
```
hsflowd[9160]: PCAP: tun0 has no supported datalink encapsulaton
hsflowd[9160]: Received signal 11
hsflowd[9160]: SIGSEGV, faulty address is (nil)
```
The correct commit fix in https://github.com/sflow/host-sflow/commit/62346aa67240ced0fb16b6725f16d8fa40eaea60
Updated version starts the hsflowd without issues
(cherry picked from commit eb05b77bac542dca906b25f647117c7566380cf2)
|
|
is undefined
This extends an else path with the logic from commit ea7d59a4b ("ixgbe: T6155:
always enable allow_unsupported_sfp for all NICs by default")
(cherry picked from commit 70ac747b2889757e35ac2a90fd77cda9d4b97ebd)
|
|
In-tree vs. Out-Of-Tree drivers differ in the way how unsupported transceivers
are defined (uint vs array of int) for the Kernel module parameters.
This results in:
kernel: ixgbe 0000:5e:00.0: failed to initialize because an unsupported SFP+ module type was detected.
kernel: ixgbe 0000:5e:00.0: Reload the driver after installing a supported module.
kernel: ixgbe 0000:5e:00.0: removed PHC on eth6
This patch always enables unsupported SFP+ modules as wo do anyway from
the userspace but only for the first port.
(cherry picked from commit ea7d59a4bf64a854be04ccf7566e1cf95d4e09a8)
|
|
radvd: T6118: add custom build support with recent source version
|
|
Packages got backported from current, but we need to select the proper pipeline
version from sagitta branch.
|
|
(cherry picked from commit ed79a9fa939fdba80eb004a79989153d51eeea88)
|
|
(cherry picked from commit 016809208da4d5500734f275d544463d8122bbd1)
|
|
(cherry picked from commit d93cb288d7d6bb16afad0df727f012837123a47e)
|
|
This reverts commit 60d16e494958bfe4a43048ee3a7f63fd57600875.
We already use iproute2 6.7 from Debian Bookworm Backports
(cherry picked from commit c56d76986f9efa05c4348401e7cdd05073aed2e7)
|
|
(cherry picked from commit fb31cf3412437f417870c28e9aaba66dc9144aff)
|
|
(cherry picked from commit 60d16e494958bfe4a43048ee3a7f63fd57600875)
|
|
(cherry picked from commit 1ba64f600c3578f7d63d1fc242f2088bf86e3605)
|
|
(cherry picked from commit f56b09145f9faeed061fb42f484acca226bfd914)
|
|
This reverts commit 795d890d6570036753e8c03616d38a7f3f692dfe.
|
|
libnftnl and nftables version.
(cherry picked from commit b31f5fe934bcb37534d49acdb5f7756bf05422e8)
|
|
(cherry picked from commit a4ef86ab2095f5a4dc2e9061dedbeacde4ac8606)
|
|
T6014: Bump keepalived version to 2.2.8-1 (backport #493)
|
|
Latest stable/9.0 FRR branch has an updated version of frr-reload.py which
is more strict on the commands to remove from the running config. This resulted
in some issues in the codebase of FRR which are addressed in the attached patches
and are pending for upstream integration.
(cherry picked from commit 798b95eb9776486aed874346869a8238383c18f6)
|
|
(cherry picked from commit 8b89929fdae6fac454c072c4f29b8a4f338365ba)
|
|
(cherry picked from commit 8e2cfd669941d815004cc424b182ae373867b690)
|
|
(cherry picked from commit 9376117efbe5022ece7942cf5e3e9606ca6586bf)
|
|
(cherry picked from commit ea4d2746ae77ce7e20eb1b65e5508332f1a42e8e)
|
|
This fixes commit 0f80a22b5 ("T5619: Add out-of-tree Intel ixgbe driver") to
work with the latest 6.6 code base.
For more information see
https://lore.kernel.org/lkml/f90837d0-810e-5772-7841-28d47c44d260@intel.com
(cherry picked from commit 36065ae874e170f3f60829b0b5348119b7e15e9a)
|
|
(cherry picked from commit 738ce141fb1c5cf77832bb93e21029b882910921)
|
|
(cherry picked from commit 6c6fe821de20eaf18640285587e960726c1ea39b)
|
|
(cherry picked from commit c910d5843ac4f7f96d9cb2d9c564f7fe8587c50f)
|
|
(cherry picked from commit 13a2c6ad63478ee575e33dc389e50e9d409db948)
|
|
(cherry picked from commit bf211f4558c2799d4258c4225d4d795064a52fd7)
|
|
(cherry picked from commit eb1a10558717239f2025737ee4e56dd01cba4355)
|
|
Add kernel modules for Hyper-V
Based on user reviews the following settings must be made:
```
CONFIG_CONNECTOR=y
CONFIG_HYPERV_UTILS=m
```
(cherry picked from commit 6f6e826977bd59947a660c9131ffeaf41d01d4bb)
|
|
(cherry picked from commit cc04a75932345ba37e4e18f82ae3f85330cedf68)
|
|
(cherry picked from commit e6701712e12189506e49be8c0e25c52a2b1325a1)
|
|
(cherry picked from commit 4e3fded1daa95cd0119af736ab15c79de494816d)
|
|
Mellanox/NVIDIA NICs require Infiniband support for proper communication with
user space, which is used by tools like DPDK.
This commit enables Infiniband with user access support and adds it to
`mlx4`/`mlx5`.
(cherry picked from commit 0a5b69b8472ce1b39f5a6f8af575aeecd459c34f)
|
|
(cherry picked from commit 68744626ea2650259a4d8daad528542556bb6188)
|
|
(cherry picked from commit f5d50b520313622a12feceb7b5f7ea4d1db6e96d)
|
|
(cherry picked from commit 04acce88c84857d58e347366b9cbd64bb1425aed)
|
|
(cherry picked from commit 2844d38c77547df7cd60b02730bd54b7e7952751)
|
|
Upgrade to ddclient 3.11.2 and remove the patches that are now included
in the release version.
(cherry picked from commit 368b89ef056dbb412520dd49bd21611b8c7c1cb5)
|
|
- Upgrade to ddclient 3.11.1
- Remove patches that are now upstream
- Add patch for duckdns dual stack
(cherry picked from commit f3cc9f58b60a8b9d69fe741e6e6811d06bd82a15)
|
|
(cherry picked from commit c237941c3c95de16d2581b198b679288898758f3)
|
|
|
|
This fixes FRR crashing on vtysh -c "show rpki $prefix" with the vyos build when librtr-dev was not available at FRR built time, see T5689.
(cherry picked from commit 931571bd486eb84042a4beb50412f5c7c21cbd9d)
|
|
Build FRR with LUA scripts --enable-scripting option
(cherry picked from commit 83d4a070897012e49c5b227a082a6f31cdb62815)
|
|
|
|
keepalived: T5402: Fixed Vyos branch in the Jenkins file
|
|
(cherry picked from commit d0649cf3b5b6058e464c906f20fce92d75f1bdcd)
|
|
Fixed Vyos branch in the Jenkins file
|