Feed All Stories

All Stories
Use Results
Edit Query
Hide Query

Tue, Oct 6

Viacheslav changed the status of T9403: image: add system image does not preserve ownership of /config entries from Open to In progress.

Tue, Oct 6, 2:45 PM · VyOS Rolling

natali-rs1985 closed T8999: openvpn: misleading "no openvpn shared-secrets in PKI" error for a dangling auth-key/crypt-key reference as Resolved.

Tue, Oct 6, 2:34 PM · VyOS Rolling

Viacheslav triaged T9404: bgp: with 'default local-pref 100' configured, every FRR commit re-processes all routes received from every BGP peer as Normal priority.

Tue, Oct 6, 2:27 PM · VyOS Rolling

Viacheslav added a subtask for T6302: The root task for bugs and improvements related to commit time and boot: T9404: bgp: with 'default local-pref 100' configured, every FRR commit re-processes all routes received from every BGP peer.

Tue, Oct 6, 2:27 PM · VyOS Rolling, Bugs

Viacheslav added a parent task for T9404: bgp: with 'default local-pref 100' configured, every FRR commit re-processes all routes received from every BGP peer: T6302: The root task for bugs and improvements related to commit time and boot.

Tue, Oct 6, 2:27 PM · VyOS Rolling

a.kudientsov added a comment to T9404: bgp: with 'default local-pref 100' configured, every FRR commit re-processes all routes received from every BGP peer.

https://github.com/vyos/vyos-1x/pull/5536

Tue, Oct 6, 10:35 AM · VyOS Rolling

a.kudientsov updated the task description for T9404: bgp: with 'default local-pref 100' configured, every FRR commit re-processes all routes received from every BGP peer.

Tue, Oct 6, 10:03 AM · VyOS Rolling

a.kudientsov changed the status of T9404: bgp: with 'default local-pref 100' configured, every FRR commit re-processes all routes received from every BGP peer from Open to In progress.

Tue, Oct 6, 9:38 AM · VyOS Rolling

a.kudientsov created T9404: bgp: with 'default local-pref 100' configured, every FRR commit re-processes all routes received from every BGP peer.

Tue, Oct 6, 9:31 AM · VyOS Rolling

jbsky created T9403: image: add system image does not preserve ownership of /config entries.

Tue, Oct 6, 8:53 AM · VyOS Rolling

Mon, Oct 5

c-po added a comment to T9402: smoketest: harden QEMU install test against GRUB and installer timeouts.

https://github.com/vyos/vyos-build/pull/1319

Mon, Oct 5, 6:55 PM · VyOS Rolling

c-po claimed T9402: smoketest: harden QEMU install test against GRUB and installer timeouts.

Mon, Oct 5, 6:55 PM · VyOS Rolling

c-po created T9402: smoketest: harden QEMU install test against GRUB and installer timeouts.

Mon, Oct 5, 6:35 PM · VyOS Rolling

a.kudientsov changed the status of T9397: vyos1x-config: parsing a multi-value leaf is quadratic in its number of values from Open to In progress.

Mon, Oct 5, 5:25 PM · VyOS Rolling

a.kudientsov added a comment to T9397: vyos1x-config: parsing a multi-value leaf is quadratic in its number of values.

https://github.com/vyos/vyos1x-config/pull/97

Mon, Oct 5, 5:25 PM · VyOS Rolling

Viacheslav changed the subtype of T9386: openvpn: reject AEAD data-ciphers-fallback with shared-secret-key from "Task" to "Bug".

Mon, Oct 5, 3:17 PM · VyOS Rolling

Viacheslav changed the status of T9370: openvpn: add support for cipher 'chacha-poly' in the CLI from Open to In progress.

Mon, Oct 5, 3:14 PM · VyOS Rolling

Viacheslav changed the subtype of T9370: openvpn: add support for cipher 'chacha-poly' in the CLI from "Task" to "Feature Request".

Mon, Oct 5, 3:14 PM · VyOS Rolling

Viacheslav closed T9371: webproxy: typo "!ocal-block-url-" in squidGuard.conf.j2 as Resolved.

Mon, Oct 5, 3:12 PM · VyOS Rolling

Viacheslav closed T8908: openNHRP: Auth token leak via Error Indication Authentication Extension as Resolved.

Mon, Oct 5, 3:03 PM · VyOS Rolling

Viacheslav closed T8860: OpenNHRP: OOB Read/Write via invalid NHRP Extension Type as Resolved.

Mon, Oct 5, 3:02 PM · VyOS Rolling

Viacheslav closed T9041: openNHRP: state poisoning via Error Indication auth bypass as Resolved.

Mon, Oct 5, 3:02 PM · VyOS Rolling

Viacheslav changed the visibility for T8908: openNHRP: Auth token leak via Error Indication Authentication Extension.

Mon, Oct 5, 3:01 PM · VyOS Rolling

Viacheslav changed the visibility for T8860: OpenNHRP: OOB Read/Write via invalid NHRP Extension Type.

Mon, Oct 5, 3:01 PM · VyOS Rolling

Viacheslav changed the visibility for T9041: openNHRP: state poisoning via Error Indication auth bypass.

Mon, Oct 5, 3:01 PM · VyOS Rolling

Viacheslav closed T9363: openvpn: site2site failure-count is not rendered properly as Resolved.

Mon, Oct 5, 2:38 PM · VyOS Rolling

Viacheslav closed T9345: BGP: Unsupported address families in named VRFs bypass configuration validation as Resolved.

Mon, Oct 5, 2:37 PM · VyOS Rolling

Viacheslav closed T9319: VXLAN: expose the Group Policy extension through a gbp CLI node as Resolved.

Mon, Oct 5, 2:35 PM · VyOS Rolling

Viacheslav added a comment to T9352: HAproxy: Enable transparent proxing.

Is it a requested feature?
https://www.haproxy.com/documentation/haproxy-configuration-tutorials/proxying-essentials/client-ip-preservation/transparent-proxying/

Mon, Oct 5, 2:33 PM · VyOS Rolling

Viacheslav triaged T9401: container: tmpfs on an existing non-root image directory is no longer writable since T9024 (crun → runc 1.1.5) as Normal priority.

Mon, Oct 5, 2:17 PM · VyOS Rolling

Viacheslav closed T9320: VPN StrongSwan add IPsec IKEv1 deprecation warning as Resolved.

Mon, Oct 5, 2:15 PM · VyOS Rolling

jbsky created T9401: container: tmpfs on an existing non-root image directory is no longer writable since T9024 (crun → runc 1.1.5).

Mon, Oct 5, 2:15 PM · VyOS Rolling

Viacheslav closed T9183: Every log message is recorded twice: rsyslog loads imuxsock and imjournal while journald forwards to syslog as Resolved.

Mon, Oct 5, 2:03 PM · VyOS Rolling

Viacheslav changed the subtype of T9394: policy: Route-map deletion check misses nested BGP VPN/VRF references from "Task" to "Bug".

Mon, Oct 5, 1:59 PM · VyOS Rolling

Viacheslav triaged T9322: is_intf_addr_assigned() has no input validation and builds its netns command as a shell string as Normal priority.

Mon, Oct 5, 1:34 PM · VyOS Rolling

Viacheslav added a comment to T9243: VPP VLAN interface keeps A/D when it's not disabled.

PR replacement https://github.com/vyos/vyos-vpp-patches/pull/59

Mon, Oct 5, 1:22 PM · VyOS Rolling

Viacheslav triaged T9339: ipsec: allow per-proposal dh-group in esp-group, mirroring ike-group as Normal priority.

Mon, Oct 5, 12:53 PM · VyOS Rolling

Viacheslav triaged T9346: The migration from 1.3.5 to 1.4 or 1.5 fails if policy prefix-list name contains dot as High priority.

Mon, Oct 5, 12:38 PM · VyOS Rolling

Viacheslav closed T9355: blackbox-exporter: ICMP probes always fail ("socket: operation not permitted") — service runs unprivileged without CAP_NET_RAW as Resolved.

Fixed in the T9002

Mon, Oct 5, 12:36 PM · VyOS Rolling

Viacheslav triaged T9358: IPsec site-to-site (connection-type initiate): tunnel stays down after peer answers NO_PROPOSAL_CHOSEN — no automatic retry despite keyingtries = 0 as High priority.

Mon, Oct 5, 12:29 PM · VyOS Rolling

Viacheslav triaged T9359: VTI (xfrm) interfaces always report operstate UNKNOWN — Prometheus `node_network_up` is 0 for every VTI even when the tunnel is up as Normal priority.

Mon, Oct 5, 12:25 PM · VyOS Rolling

Viacheslav triaged T9366: FRR routes get out of sync with PPPoE server as Normal priority.

Mon, Oct 5, 12:21 PM · VyOS Rolling

Viacheslav triaged T9368: frr: commit silently skips the FRR reload when a DHCP lease event collides with it as Normal priority.

Mon, Oct 5, 12:17 PM · VyOS Rolling

Viacheslav triaged T9369: Add timezone as variable for containers (podman) as Wishlist priority.

Mon, Oct 5, 12:13 PM · VyOS Rolling

Viacheslav triaged T9372: webproxy: several url-filtering options are accepted by the CLI but never used as Normal priority.

Mon, Oct 5, 12:12 PM · VyOS Rolling

Viacheslav added a comment to T9373: Ansible repositories maintenance, October, 2026.

The task summary and use case are wrong.

Mon, Oct 5, 12:12 PM · VyOS Ansible Collection

Viacheslav added a subtask for T6302: The root task for bugs and improvements related to commit time and boot: T9374: vyos1x-config: config parsing is cubic in the number of entries in one list.

Mon, Oct 5, 12:10 PM · VyOS Rolling, Bugs

Viacheslav added a parent task for T9374: vyos1x-config: config parsing is cubic in the number of entries in one list: T6302: The root task for bugs and improvements related to commit time and boot.

Mon, Oct 5, 12:10 PM · VyOS Rolling

Viacheslav changed the status of T9374: vyos1x-config: config parsing is cubic in the number of entries in one list from Open to In progress.

Mon, Oct 5, 12:10 PM · VyOS Rolling

Viacheslav added a subtask for T6302: The root task for bugs and improvements related to commit time and boot: T9375: vyos1x-config: duplicate-children check re-sorts the list on every step.

Mon, Oct 5, 12:06 PM · VyOS Rolling, Bugs

Viacheslav added a parent task for T9375: vyos1x-config: duplicate-children check re-sorts the list on every step: T6302: The root task for bugs and improvements related to commit time and boot.

Mon, Oct 5, 12:06 PM · VyOS Rolling

Viacheslav changed the status of T9375: vyos1x-config: duplicate-children check re-sorts the list on every step from Open to In progress.

Mon, Oct 5, 12:06 PM · VyOS Rolling

Viacheslav changed the status of T9376: vyatta-cfg: boot and load are quadratic in the number of values of a tag node, a subtask of T6302: The root task for bugs and improvements related to commit time and boot, from Open to In progress.

Mon, Oct 5, 12:00 PM · VyOS Rolling, Bugs

Viacheslav changed the status of T9376: vyatta-cfg: boot and load are quadratic in the number of values of a tag node from Open to In progress.

Mon, Oct 5, 12:00 PM · VyOS Rolling

Viacheslav added a subtask for T6302: The root task for bugs and improvements related to commit time and boot: T9376: vyatta-cfg: boot and load are quadratic in the number of values of a tag node.

Mon, Oct 5, 11:59 AM · VyOS Rolling, Bugs

Viacheslav added a parent task for T9376: vyatta-cfg: boot and load are quadratic in the number of values of a tag node: T6302: The root task for bugs and improvements related to commit time and boot.

Mon, Oct 5, 11:59 AM · VyOS Rolling

Viacheslav changed the status of T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs, a subtask of T6302: The root task for bugs and improvements related to commit time and boot, from Open to In progress.

Mon, Oct 5, 11:55 AM · VyOS Rolling, Bugs

Viacheslav changed the status of T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs from Open to In progress.

Mon, Oct 5, 11:55 AM · VyOS Rolling

Viacheslav added a subtask for T6302: The root task for bugs and improvements related to commit time and boot: T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs.

Mon, Oct 5, 11:52 AM · VyOS Rolling, Bugs

Viacheslav added a parent task for T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs: T6302: The root task for bugs and improvements related to commit time and boot.

Mon, Oct 5, 11:52 AM · VyOS Rolling

Viacheslav triaged T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs as Normal priority.

Mon, Oct 5, 11:50 AM · VyOS Rolling

Viacheslav added a parent task for T9379: policy: prefix-list duplicate check is quadratic: T6302: The root task for bugs and improvements related to commit time and boot.

Mon, Oct 5, 11:49 AM · VyOS Rolling

Viacheslav added a subtask for T6302: The root task for bugs and improvements related to commit time and boot: T9379: policy: prefix-list duplicate check is quadratic.

Mon, Oct 5, 11:49 AM · VyOS Rolling, Bugs

Viacheslav closed T9379: policy: prefix-list duplicate check is quadratic as Resolved.

Mon, Oct 5, 11:48 AM · VyOS Rolling

Viacheslav triaged T9380: `qos policy cake` without `bandwidth` is silently applied as `unlimited` and causes packet loss as Normal priority.

Mon, Oct 5, 11:46 AM · VyOS Rolling

Viacheslav triaged T9381: Suricata on pre-SSE4.2 CPUs dies with SIGILL and enters a restart loop as Normal priority.

Mon, Oct 5, 11:45 AM · VyOS Rolling

Viacheslav closed T9382: PPPoE server default LCP echo settings (10s interval x 3 failures = 30s) cause spurious session teardown as Invalid.

You can add documentation without a task number.
As this value is configurable, I do not see any problem here.

Mon, Oct 5, 11:44 AM · VyOS Rolling

Viacheslav closed T9383: Default `/var/log/messages` rotation keeps only ~24h, making intermittent faults undiagnosable as Invalid.

This option is configurable.
I'm not seeing any bugs here at the moment.
Reopen PR with the minimal set of commands to reproduce if you configure log rotation, and something does not work.

Mon, Oct 5, 11:37 AM · VyOS Rolling

Viacheslav closed T9384: `show pppoe-server sessions` uptime format is ambiguous (`1.06:16:20` vs `15:42:11`) as Wontfix.

This behavior has always been in the upstream, and many users are familiar with this format. So it is not a question of the op-mode scripts that we use.
For parsers, the uptime-raw format probably should be used. https://github.com/accel-ppp/accel-ppp-ng/blob/1210a0b84b7c22837676571cae42522d6f265873/accel-pppd/cli/show_sessions.c#L513
I do not see any bugs here, and I am closing the task.

Mon, Oct 5, 11:29 AM · VyOS Rolling

Viacheslav triaged T9387: cloud-init: add strict mode for vyos_config_commands as Wishlist priority.

Mon, Oct 5, 11:15 AM · VyOS Rolling

Viacheslav triaged T9388: wwan: address dhcp/dhcpv6/autoconf never get an address from a static QMI bearer as Normal priority.

Mon, Oct 5, 11:12 AM · VyOS Rolling

Viacheslav triaged T9399: config-mgmt: the post-commit hook builds the full config twice to write one archive copy as Normal priority.

Mon, Oct 5, 11:09 AM · VyOS Rolling

Viacheslav closed T9323: Fix spurious CI errors as Resolved.

Mon, Oct 5, 11:08 AM · VyOS Rolling

asklymenko created T9400: Update APT repo keys to use SHA256 or higher.

Mon, Oct 5, 11:01 AM · VyOS Rolling

a.kudientsov added a comment to T9399: config-mgmt: the post-commit hook builds the full config twice to write one archive copy.

https://github.com/vyos/vyos-1x/pull/5533

Mon, Oct 5, 10:21 AM · VyOS Rolling

Viacheslav closed T9338: mpls inter-as - l3vpn-multi-domain-switching as Resolved.

Mon, Oct 5, 9:59 AM · VyOS Rolling

sarthurdev closed T9392: Enable '-k' behaviour for keeping objects of kernel builds by default as Resolved.

Mon, Oct 5, 9:50 AM · VyOS Rolling

sarthurdev closed T9129: Migrate podman to systemd quadlets as Resolved.

Mon, Oct 5, 9:50 AM · VyOS Rolling

sarthurdev closed T9129: Migrate podman to systemd quadlets, a subtask of T7557: Use Debian trixie as a build base for Docker and the VyOS image, as Resolved.

Mon, Oct 5, 9:50 AM · VyOS Rolling

a.kudientsov created T9399: config-mgmt: the post-commit hook builds the full config twice to write one archive copy.

Mon, Oct 5, 9:48 AM · VyOS Rolling

Viacheslav triaged T9389: dhcp-interface static routes (VRF and default) not restored after FRR daemons restart (watchfrr/crash) as Normal priority.

Mon, Oct 5, 9:48 AM · VyOS Rolling

Viacheslav triaged T9395: pppoe: client commit fails with "could not lock candidate DS" and IPv6 default route missing from FRR configuration as Normal priority.

Mon, Oct 5, 9:38 AM · VyOS Rolling

Viacheslav triaged T9397: vyos1x-config: parsing a multi-value leaf is quadratic in its number of values as Normal priority.

Mon, Oct 5, 9:33 AM · VyOS Rolling

Viacheslav triaged T9398: service ssh trusted-user-ca only supports RSA CAs as Normal priority.

Mon, Oct 5, 9:29 AM · VyOS Rolling

Viacheslav closed T8464: Accel-PPP remote DoS - Case: Missing Service-name tag in PPPoE PADR as Resolved.

Mon, Oct 5, 9:10 AM · VyOS Rolling

Viacheslav closed T8473: Accel-PPP remote DoS - Case: Multiple Rapid-commit options in DHCPv6 SOLICIT msg as Resolved.

Mon, Oct 5, 9:10 AM · VyOS Rolling

Viacheslav closed T8474: Accel-PPP remote DoS - Case: Bad AFTR-Name option in DHCPv6 SOLICIT as Resolved.

Mon, Oct 5, 9:10 AM · VyOS Rolling

Viacheslav closed T8475: Accel-PPP remote DoS - Case: crafted DHCPv6 Relay-forward packet with multiple (>HOP_COUNT_LIMIT) nested relay layers as Resolved.

Mon, Oct 5, 9:10 AM · VyOS Rolling

Viacheslav closed T8526: Accel-PPP: Missing RADIUS Response Authenticator Verification as Resolved.

Mon, Oct 5, 9:09 AM · VyOS Rolling

Viacheslav closed T8543: Accel-PPP: parse_framed_route stack buffer overflow via RADIUS Framed-Route in Access-Accept message as Resolved.

Mon, Oct 5, 9:09 AM · VyOS Rolling

Viacheslav closed T8545: Accel-PPP: Unexpected validation failure for correct Response Authenticator (RADIUS Accounting-Response message) as Resolved.

Mon, Oct 5, 9:09 AM · VyOS Rolling

Viacheslav closed T8549: Accel-PPP: DHCPv6 Status Code option causes accel-pppd crash via OOB read in print_status() as Resolved.

Mon, Oct 5, 9:09 AM · VyOS Rolling

Viacheslav closed T8550: Accel-PPP: SSTP zero-length packet causes infinite CPU loop (pre-auth remote DoS) as Resolved.

Mon, Oct 5, 9:09 AM · VyOS Rolling

Viacheslav closed T8611: Accel-PPP: stack buffer overflow via oversized RADIUS Accel-VRF-Name as Resolved.

Mon, Oct 5, 9:08 AM · VyOS Rolling

Viacheslav closed T8825: Accel-PPP: Crash via oversized Host-Uniq tag leading to buffer overflow as Resolved.

Mon, Oct 5, 9:08 AM · VyOS Rolling

Viacheslav closed T8830: Accel-PPP: Unvalidated PPP header length in control protocol response handlers causes heap information disclosure as Resolved.

Mon, Oct 5, 9:08 AM · VyOS Rolling

Viacheslav changed the visibility for T8464: Accel-PPP remote DoS - Case: Missing Service-name tag in PPPoE PADR.

Mon, Oct 5, 9:00 AM · VyOS Rolling

Viacheslav changed the visibility for T8473: Accel-PPP remote DoS - Case: Multiple Rapid-commit options in DHCPv6 SOLICIT msg.

Mon, Oct 5, 9:00 AM · VyOS Rolling

Viacheslav changed the visibility for T8474: Accel-PPP remote DoS - Case: Bad AFTR-Name option in DHCPv6 SOLICIT.

Mon, Oct 5, 9:00 AM · VyOS Rolling

Viacheslav changed the visibility for T8475: Accel-PPP remote DoS - Case: crafted DHCPv6 Relay-forward packet with multiple (>HOP_COUNT_LIMIT) nested relay layers.

Mon, Oct 5, 8:59 AM · VyOS Rolling