Will this be backported to 1.4 ahead of the 1.4.2 release?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Mar 25 2025
Mar 23 2025
Mar 21 2025
Mar 20 2025
I'm sorry, all it took was to disable PFS. PFS prevented future SA's from happening due to a policy mismatch.
Mar 18 2025
Thanks. I'll see what I can do about reporting this upstream!
Hi Morgan,
Add a set of commands to reproduce (from both sites)
The lexer is unnecessarily aggressive in disallowing strings following '//', originally added to ignore version string information. This has the side effect of ignoring legitimate values. Since the version string is extracted before parsing, this restriction can be dropped. Fix in preparation.
Mar 17 2025
Change is perfectly compatible as it was not working in the first place.
I can't assign myself to this task for whatever reason, but here is a PR to correct this behavior:
https://github.com/vyos/vyos-1x/pull/4400
MITRE has assigned CVE-2025-30095.
Mar 16 2025
Mar 15 2025
Mar 14 2025
Did you have a chance to testing ?
Mar 13 2025
Looks like it was assigned too restrictively before.
Hi there,
Thanks for testing and confirming, @JeffWDH
Hey guys. Is there any reason why this issue was changed from "possibly destroys the router" (which is true if using conntrack and rebooting the system) to => perfectly compatible?
Mar 12 2025
Possible fix https://github.com/accel-ppp/accel-ppp/pull/93
Needs testing