- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Dec 22 2025
Dec 22 2025
c-po closed T8098: ssh: defining cipher rijndael-cbc@lysator.liu.se will break SSH daemon, a subtask of T8090: sshd: add support for config test mode, as Resolved.
Dec 21 2025
Dec 21 2025
c-po moved T8086: login: replace getpwall() based user enumeration to avoid NSS/TACACS timeouts from Need Triage to Completed on the VyOS Rolling board.
Dec 19 2025
Dec 19 2025
sarthurdev moved T8092: Start building Kea from source from Need Triage to Backport Candidates on the VyOS Rolling board.
Dec 17 2025
Dec 17 2025
c-po moved T8098: ssh: defining cipher rijndael-cbc@lysator.liu.se will break SSH daemon from Need Triage to Completed on the VyOS Rolling board.
c-po moved T8090: sshd: add support for config test mode from Need Triage to Completed on the VyOS Rolling board.
dmbaturin removed a project from T8083: tacacs: nss_tacplus: buffer truncated due to size limitation: VyOS 1.4 Sagitta (1.4.4).
Dec 16 2025
Dec 16 2025
dmbaturin added a comment to T8098: ssh: defining cipher rijndael-cbc@lysator.liu.se will break SSH daemon.
We could migrate it to aes256-cbc it seems.
Dec 15 2025
Dec 15 2025
c-po added a comment to T8098: ssh: defining cipher rijndael-cbc@lysator.liu.se will break SSH daemon.
Dec 14 2025
Dec 14 2025
c-po closed T8094: isis: configuration migrator 0 -> 1 broken, a subtask of T8087: Smoketests: reorganize folder structure for embedded config tests, as Resolved.
c-po moved T8094: isis: configuration migrator 0 -> 1 broken from Need Triage to Completed on the VyOS Rolling board.
Dec 13 2025
Dec 13 2025
c-po updated the task description for T8098: ssh: defining cipher rijndael-cbc@lysator.liu.se will break SSH daemon.
c-po updated the task description for T8098: ssh: defining cipher rijndael-cbc@lysator.liu.se will break SSH daemon.
c-po updated the task description for T8098: ssh: defining cipher rijndael-cbc@lysator.liu.se will break SSH daemon.
c-po changed Version from - to 1.4.3 on T8098: ssh: defining cipher rijndael-cbc@lysator.liu.se will break SSH daemon.
c-po changed the status of T8098: ssh: defining cipher rijndael-cbc@lysator.liu.se will break SSH daemon, a subtask of T8090: sshd: add support for config test mode, from Open to In progress.
c-po changed the status of T8098: ssh: defining cipher rijndael-cbc@lysator.liu.se will break SSH daemon from Open to In progress.
Dec 12 2025
Dec 12 2025
c-po moved T8094: isis: configuration migrator 0 -> 1 broken from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
c-po moved T8087: Smoketests: reorganize folder structure for embedded config tests from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
c-po moved T8089: Add a completion helper for "geoip country-code" in firewall from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
c-po moved T8089: Add a completion helper for "geoip country-code" in firewall from Need Triage to Completed on the VyOS Rolling board.
c-po changed the status of T8094: isis: configuration migrator 0 -> 1 broken, a subtask of T8087: Smoketests: reorganize folder structure for embedded config tests, from Open to In progress.
Dec 11 2025
Dec 11 2025
c-po moved T8087: Smoketests: reorganize folder structure for embedded config tests from Need Triage to Completed on the VyOS Rolling board.
Dec 10 2025
Dec 10 2025
c-po changed the status of T8089: Add a completion helper for "geoip country-code" in firewall from Open to In progress.
c-po changed the status of T8087: Smoketests: reorganize folder structure for embedded config tests from Open to In progress.
c-po updated the task description for T8087: Smoketests: reorganize folder structure for embedded config tests.
c-po renamed T8086: login: replace getpwall() based user enumeration to avoid NSS/TACACS timeouts from Evaluate direct read of /etc/passwd over Python getpwall() to login: replace getpwall() based user enumeration to avoid NSS/TACACS timeouts.
c-po changed the status of T8086: login: replace getpwall() based user enumeration to avoid NSS/TACACS timeouts from Open to In progress.
Dec 9 2025
Dec 9 2025
Dec 8 2025
Dec 8 2025
c-po moved T8021: bgpd crashed, when BGP EVPN peers are changed/rebooted from Need Triage to Completed on the VyOS Rolling board.
dmbaturin changed Is it a breaking change? from none to compatible on T8038: xml: cleanup double CLI properties in NAT.
dmbaturin edited projects for T7485: DHCPv6 does not work on PPPoE interfaces, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS Rolling.
Dec 5 2025
Dec 5 2025
It seems that, even though this is technically true, the strongswan seems require hash for negotiation. So, it is probably better not to rock the boat.
Dec 4 2025
Dec 4 2025
dmbaturin renamed T8017: Virtual ethernet interfaces do not correctly check for the missing peer option from Virtual-Ethernet wrong setup error to Virtual ethernet interfaces do not correctly check for the missing peer option.
dmbaturin renamed T7485: DHCPv6 does not work on PPPoE interfaces from pppoe interfaces do not get assigned an ipv6 address with pppoe ipv6 enabled. ipv6 prefix delegation works. to DHCPv6 does not work on PPPoE interfaces.
Dec 3 2025
Dec 3 2025
a.kudientsov added a comment to T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
Warning is not displayed in sagitta and circinus because a warning class import from vyos.base is missing in system_login.py
a.pidnebesny renamed T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system" from BP 1.4.4 not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system" to BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
a.pidnebesny updated the task description for T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
Dec 2 2025
Dec 2 2025
dmbaturin added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
Cisco and Arista support such addresses as interface addresses, and the anycast bit doesn't preclude unicast usage, so we should allow that.
vyos@vyos:~$ show pki Certificate Authorities: Name Subject Issuer CN Issued Expiry Private Key Parent ---------------- ---------------------------------------------------------------------------------------------------------------------------------- --------------------------------------------- ------------------- ------------------- ------------- ---------------- openvpn_vtun10_1 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev,CN=Easy-RSA CA,OU=VyOS Networks Test CA 1,O=VyOS Networks,L=Poway,ST=California,C=US 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev 2025-12-01 07:44:58 2035-11-29 07:44:58 No N/A openvpn_vtun11_1 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev,CN=Easy-RSA CA,OU=VyOS Networks Test CA 1,O=VyOS Networks,L=Poway,ST=California,C=US 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev 2025-12-01 07:44:58 2035-11-29 07:44:58 No openvpn_vtun10_1 openvpn_vtun12_1 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev,CN=Easy-RSA CA,OU=VyOS Networks Test CA 1,O=VyOS Networks,L=Poway,ST=California,C=US 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev 2025-12-01 07:44:58 2035-11-29 07:44:58 No openvpn_vtun10_1 openvpn_vtun20_1 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev,CN=Easy-RSA CA,OU=VyOS Networks Test CA 2,O=VyOS Networks,L=Poway,ST=California,C=US 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev 2025-12-01 07:53:19 2035-11-29 07:53:19 No N/A openvpn_vtun21_1 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev,CN=Easy-RSA CA,OU=VyOS Networks Test CA 2,O=VyOS Networks,L=Poway,ST=California,C=US 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev 2025-12-01 07:53:19 2035-11-29 07:53:19 No openvpn_vtun20_1 openvpn_vtun22_1 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev,CN=Easy-RSA CA,OU=VyOS Networks Test CA 2,O=VyOS Networks,L=Poway,ST=California,C=US 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev 2025-12-01 07:53:19 2035-11-29 07:53:19 No openvpn_vtun20_1
Dec 1 2025
Dec 1 2025
c-po added a project to T7738: Improper OpenVPN certificates migration from 1.3 to 1.4: VyOS 1.4 Sagitta (1.4.4).
c-po changed the status of T7738: Improper OpenVPN certificates migration from 1.3 to 1.4 from Open to In progress.
Nov 30 2025
Nov 30 2025
sarthurdev added a subtask for T7926: Refactor and improve geoip handling: T5405: Add VRF support for "update geoip".
sarthurdev changed the status of T5746: Firewall extend GeoIP match ASN, a subtask of T7926: Refactor and improve geoip handling, from Open to In progress.
sarthurdev added a subtask for T7926: Refactor and improve geoip handling: T5746: Firewall extend GeoIP match ASN.
Nov 28 2025
Nov 28 2025
c-po moved T8039: snmp: trap target broken with SNMPv3 from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
dmbaturin added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
This comment in ipaddrcheck explains why I disallowed all-zero host part addresses: https://github.com/vyos/ipaddrcheck/blob/current/src/ipaddrcheck_functions.c#L337-L346
Viacheslav changed the status of T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part from Confirmed to In progress.
sarthurdev changed the status of T6768: GeoIP database update fails without a clear error when a system name server is not configured, a subtask of T7926: Refactor and improve geoip handling, from Open to In progress.
Nov 27 2025
Nov 27 2025
c-po moved T8039: snmp: trap target broken with SNMPv3 from Need Triage to Completed on the VyOS Rolling board.
c-po moved T8038: xml: cleanup double CLI properties in NAT from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
c-po moved T8038: xml: cleanup double CLI properties in NAT from Need Triage to Completed on the VyOS Rolling board.
Nov 26 2025
Nov 26 2025
c-po moved T8035: Update Linux kernel to 6.6.117 from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
Viacheslav added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
For dummy it works because it has the prefix /128 and it is allowed/validated https://github.com/vyos/ipaddrcheck/blob/c34294b7a18072c7bd4eaf8ec0f433bb374fad5c/src/ipaddrcheck.c#L577
Nov 25 2025
Nov 25 2025
c-po moved T8023: bond: missing validation of member interface MTU from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.