Explicitly disable the new dpdk_telemetry module to fix
compilation in buildbot.
(other dpdk modules are aleady disabled)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b936fc4e0d)
This backports the following bug-fix commits from the master branch:
c6b4d7f367 ("acme: Include empty 'dns' config option by default")
983cc995a3 ("acme: Correctly handle domain state dir for ECC certificates")
Fixes#11675.
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
This is a workaround to prevent the whole build from failing because of
the intree kmods are not supported yet by upstream project.
Root cause is that kernel version should not play a part when making
DEPENDS as the generated kconfig was for all targets that may have
different kernel versions.
One less than ideal effect of this change is that for an unsupported
kernel version, people can still select the intree kmod but it won't be
built. This may contradict expectation if the warning was not noticed
by them
Resolvesopenwrt/packages#9274
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a6ec885522)
cxxabi.h is a useless header that libcxx does not include.
Remove indent on postint script. It should be on the same as the above
section.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a135cbb9f1)
CMake is faster and allows to simplify the Makefile slightly. It also
creates a slightly smaller package for some reason.
Fixed license information.
Ran postinst through shellcheck. It was using bashisms.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from faa8962178)
Run the service under an unprivileged
user account
The following parameters are now configurable
niceness
max concurrency (defaults to number of CPUs)
user
Added flags "-no-browser"
Disabled in-place upgrades (disabled in the
build already)
Redirected stderr/stdout to syslog
Added support for "reload_config"
Increased "term_timeout" to 15s to give it
plenty of time to shut down gracefully
Properly handled non-existing directories
Removed a softlink that assumes a specific naming
convention in syncthing
Added a comment that using external storage is a
recommend configration
Signed-off-by: Marc Benoit <marcb62185@gmail.com>
[increased package release]
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit a9443eb0eb)
Tested-by: Marc Benoit <marcb62185@gmail.com>
Since upstream commit dc92994 the LDFLAGS used for settings the version
(and build host and user) changed resulting in "unknown" versions in
syncthing.
Correct version detection is important for syncthing to assure
compatibility with other running instances. The "unknown" version fails
to communicate and sync with correctly compiled instances.
This patch updates the syncthing Makefile to inject the correct
variables and thereby fixes the version detection in syncthing.
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b85e387cc2)
Tested-by: Marc Benoit <marcb62185@gmail.com>
Add a conffiles-section for the /etc/swanctl folder, which is used by the swanctl util. This will keep the configfiles during an sysupgrade.
Signed-off-by: Sven Roederer <S.Roederer@colvistec.de>
(cherry picked from commit 49f298eb74)
Newer versions of the kconfig generator require quotes. Prepare the
package for an eventual update.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 404c113bc2)
This backports a patch[1] to fix several request smuggling attacks.
This includes fixes for:
* CVE-2020-10108
* CVE-2020-10109
[1]: 4a7d22e490
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
ICU 66 updates to Unicode 13, including new characters, scripts, emoji, and corresponding API constants. It also updates to CLDR 36.1 with Unicode 13 updates and bug fixes.
Create symbolic link to current version.
FIX CVE-2020-10531
An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
This is intended as a match with standard urngd. They serve same purpose
and urngd starts as first with 00. Starting haveged later can create
issues if you replace urngd with it. The example problem is if
uci-defaults script decides to generate certificate. Haveged can supply
entropy but it is started later and to mitigate this urngd would still
have to be installed. This means that haveget can't serve as replacement
without moving it to match start order of urngd.
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 1ef38f45d9)
Switch to normal tarballs. Remove autoreconf as a result.
Several Makefile cleanups for consistency.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c22dd1bf74)
