VyOS - Blog

CVE-2024-6387 (regreSSHion)

daniil@sentrium.io (Daniil Baturin) — Mon, 01 Jul 2024 10:24:00 GMT

Hello, Community!

Today Qualys's security team has disclosed a remotely exploitable vulnerability in OpenSSH server. It was assigned CVE-2024-6387 number and nicknamed "regreSSHion" because its cause is an accidental removal of code that fixed a much earlier vulnerability back in 2006. It affects OpenSSH versions older than 4.4p1 and versions between 8.5p1 and 9.8p1. VyOS 1.3.8 includes OpenSSH 7.9p1 and thus isn't vulnerable. VyOS 1.4.0 includes 9.2p1 and will need a patch to remain secure.

Introducing VyOS Stream — a next step in the VyOS project evolution

daniil@sentrium.io (Daniil Baturin) — Thu, 27 Jun 2024 18:29:02 GMT

Hello, Community!

Historically, we had two types of branches — rolling (current) and LTS branches. When we started working on a new LTS release, its branch would be branched off directly from the current one, but it wouldn’t be frozen for experimental changes until very late in the development process. Only when the upcoming LTS release came to a full freeze would any new features be limited to occasional, knowingly safe backports.
However, that approach created significant problems, both technical and social. Now, we are going to present our solution to both.

New book by Daniil Baturin: Linux for System Administrators

yuriy@sentrium.io (Yuriy Andamasov) — Fri, 24 Nov 2023 16:20:57 GMT

Hello, Community!

Many people from our generation, including myself and VyOS maintainers and contributors, learned about Linux from books. At the time, there wasn't much else. Now, there's loads and loads of information on the Internet, and experienced admins can easily find what they are looking for in seconds. But for beginners, a book where they can read about all the basics is still a great start.

But what book can we recommend them to read?

VyOS 1.3.2 LTS release

daniil@sentrium.io (Daniil Baturin) — Wed, 07 Sep 2022 15:34:23 GMT

Hello, community!

VyOS 1.3.2 LTS release is now available for subscribers to download and for everyone to build. It features over a dozen improvements and about fifty fixes for bugs and other issues. Among them is a command to remove DHCP leases, IP pools and multiplier options in BRAS features, and more. Read on for details!

Images for labs, geeks and other non-production use

daniil@sentrium.io (Daniil Baturin) — Tue, 12 May 2020 16:33:34 GMT

You might have noticed Patreon and BuyMeACoffee donate buttons. We introduced them silently, and we are happy to see people donating just because they want to support the project. However, there are benefits for those who donates—you asked us for a new way to contribute and get access to LTS images, and now it's here.

VyOS Foundation Announcement

yuriy@sentrium.io (Yuriy Andamasov) — Sun, 10 May 2020 20:30:00 GMT

As you may already know, the VyOS project was started as a response to the cancellation of Vyatta Core, an open-source version of Vyatta that we used and loved. We have succeeded in this and seven years later we have a truly open-source network OS that people rely on. VyOS team is grateful to our customers and contributors who work together with us, and of course to all maintainers of open source software that VyOS is built upon.

VyOS 1.2.0-beta1 release

daniil@sentrium.io (Daniil Baturin) — Thu, 19 Nov 2015 01:35:03 GMT

It’s been a long time since the time we made a new major release. A combination of factors including technical problems with the code, uncertainty about what would be right thing to do, and “life happening” to all of the maintainers at once was holding us back. Anyway, as maintainers we should make releases rather than excuses, so here’s the release. Better late than never.

CVE-2015-5366, 1.1.6 maintenance release, and the new public key

daniil@sentrium.io (Daniil Baturin) — Mon, 17 Aug 2015 15:37:30 GMT

1.1.6 maintenance release is available for download from the primary server (mirrors are still syncing up).

VyOS to be rewritten in VisualBasic.Net

daniil@sentrium.io (Daniil Baturin) — Wed, 01 Apr 2015 08:38:26 GMT

Many people were excited to hear that the core of the .Net framework is is now open source.

SNMP OID and sysDescr change in lithium

daniil@sentrium.io (Daniil Baturin) — Tue, 17 Feb 2015 09:39:14 GMT

The current stable release still uses old Vyatta OID (30803) and “Vyatta VyOS 1.x.x” in sysDescr. This makes SNMP tools recognize it as Vyatta, which doesn’t have a negative effect since we preserve backwards compatibility with Vyatta Core, but it’s still incorrect and should be fixed.

SO3Group organization and repo restructuring

daniil@sentrium.io (Daniil Baturin) — Tue, 03 Feb 2015 02:52:58 GMT

You may notice that github.com/SO3Group organization is gone. There is nothing horrible going on, I just merged it with github.com/vyos organization for convenience.

1.1.3 maintenance release

daniil@sentrium.io (Daniil Baturin) — Wed, 28 Jan 2015 15:26:00 GMT

1.1.3 maintenance release is available for download (mirrors are syncing up).

New mirrors in Australia and Canada

daniil@sentrium.io (Daniil Baturin) — Tue, 30 Dec 2014 02:18:31 GMT

Our community members setup two new mirrors, one in Australia maintained by Shane Short and another one in Canada maintained by Jeremy Sayres.

New mirrors in Poland and the US

daniil@sentrium.io (Daniil Baturin) — Thu, 11 Dec 2014 09:48:54 GMT

Our community members setup two new mirrors. One is in Poland (http://mirror.chmuri.net) maintained by Karol Chmurzyński. Another one is in the USA (http://mirror.tuxhelp.org/vyos/), maintained by Chris Wadge.

1.1.1 maintenance release

daniil@sentrium.io (Daniil Baturin) — Sun, 07 Dec 2014 22:37:02 GMT

1.1.1 release images are available for download (mirrors are syncing up now).

VyOS 1.1.0 is available on AWS marketplace

daniil@sentrium.io (Daniil Baturin) — Fri, 21 Nov 2014 21:14:56 GMT

Here: https://aws.amazon.com/marketplace/pp/B00JK5UPF6

VyOS got a PEN

daniil@sentrium.io (Daniil Baturin) — Wed, 29 Oct 2014 08:04:45 GMT

IANA processed our PEN application and assigned 44641 to us. You can see it in the PEN registry.

Lithium branch

daniil@sentrium.io (Daniil Baturin) — Sat, 25 Oct 2014 15:09:49 GMT

This weekend I’ll be setting up the branch for the new release, which will be called (what else?) lithium.

VyOS 1.0.5 is available on the AWS marketplace

daniil@sentrium.io (Daniil Baturin) — Tue, 14 Oct 2014 04:29:38 GMT

Amazon Web Services team updated the VyOS AMI marketplace listing with the 1.0.5 security release.

Helium is frozen

daniil@sentrium.io (Daniil Baturin) — Wed, 08 Oct 2014 14:11:19 GMT

Helium branch is now frozen. If you have any code you want to merge, please wait until we set up a new branch.

Build scripts use development repos by default now

daniil@sentrium.io (Daniil Baturin) — Mon, 30 Jun 2014 10:50:29 GMT

We’ve made a change in the ISO build scripts so they use the development repos, dev.packages.vyos.net, as package source by default. The development repos are automatically populated by the CI server, so you always get the most recent packages.

New nightly builds location and CI server

daniil@sentrium.io (Daniil Baturin) — Sat, 28 Jun 2014 10:47:44 GMT

Thanks to Kim Hagen, we now have a continuous integration server (Jenkins-based): http://ci.vyos.net.

1.0.3 maintenance release

daniil@sentrium.io (Daniil Baturin) — Fri, 09 May 2014 19:32:00 GMT

New and improved VyOS 1.0.3 is here!

VyOS 1.0.2 in Amazon Web Services Marketplace

daniil@sentrium.io (Daniil Baturin) — Sat, 12 Apr 2014 00:36:57 GMT

VyOS AMI is now available from the AWS marketplace.

VyOS Japan user group

daniil@sentrium.io (Daniil Baturin) — Thu, 03 Apr 2014 15:48:26 GMT

VyOS users from Japan have founded the first VyOS user group in the world. Group coordinator Yuya Kusakabe (who contributed L2TPv3 CLI lately) will announce it at Japan Vyatta Users group meeting tomorrow.

VyOS Subscription Edition was a joke

daniil@sentrium.io (Daniil Baturin) — Wed, 02 Apr 2014 00:28:04 GMT

April Fools Day is almost over in the western hemisphere, so in case anyone took VyOS Subscription Edition seriously, it was a joke.

Introducing VyOS Subscription Edition

daniil@sentrium.io (Daniil Baturin) — Tue, 01 Apr 2014 15:30:10 GMT

The free community VyOS software is an open source network operating system providing advanced IPv4 and IPv6 routing, stateful firewalling, IPSec and SSL OpenVPN, and more.

CLI configuration templates documentation draft

daniil@sentrium.io (Daniil Baturin) — Fri, 14 Mar 2014 09:08:25 GMT

VyOS command line interface is defined in so called “templates”. Until now people had to learn template syntax from the source code of existing packages. To make it easier to start modifying or adding commands, I wrote a template syntax reference (or rather a draft of it): http://vyos.net/wiki/Configuration_mode_templates.

GNUTLS-SA-2014-2

daniil@sentrium.io (Daniil Baturin) — Wed, 05 Mar 2014 20:08:15 GMT

In a nutshell: nothing really uses it in VyOS so we think it’s not enough to trigger maintenance release.

Helium is fully buildable

daniil@sentrium.io (Daniil Baturin) — Wed, 05 Mar 2014 15:12:24 GMT

Helium, the branch that will become the next major release, is now buildable for both i386 and amd64. Nightly builds are operational too, you can get latest images from http://builds.vyos.net/iso/development/helium/.

Helium for i386 is buildable

daniil@sentrium.io (Daniil Baturin) — Tue, 04 Mar 2014 04:05:44 GMT

Twitter users, please read the whole post.

Infrastructure changes: new mirror in Japan

daniil@sentrium.io (Daniil Baturin) — Sat, 15 Feb 2014 13:08:40 GMT

Kohei Takahashi from the WIDE project set up a mirror in Tsukuba, Japan: http://ftp.tsukuba.wide.ad.jp/software/vyos/. It’s been added to the mirrors page and the load balancer.

Virtual Appliances | Solution Exchange

daniil@sentrium.io (Daniil Baturin) — Tue, 04 Feb 2014 17:20:53 GMT

Virtual Appliances | Solution Exchange

1.0.2 maintenance release

daniil@sentrium.io (Daniil Baturin) — Tue, 04 Feb 2014 07:39:00 GMT

Two serious bugs, both inherited from VC6.6, were found by our community members, which triggered this release.

Public forum test: http://forum.vyos.net

daniil@sentrium.io (Daniil Baturin) — Thu, 23 Jan 2014 20:11:53 GMT

Looks like some people already started using the test forum, so probably it’s time to announce it to wider audience.

1.0.1 maintenance release

daniil@sentrium.io (Daniil Baturin) — Sun, 19 Jan 2014 06:23:11 GMT

Some more or less nasty bugs were found in 1.0.0 (thanks to everyone who reported and suggested fixes), so it’s time to release an update.

iproute2 cheat sheet

daniil@sentrium.io (Daniil Baturin) — Sun, 05 Jan 2014 17:55:09 GMT

http://baturin.org/docs/iproute2

Infrastructure changes: new mirrors in Bulgaria and Ukraine

daniil@sentrium.io (Daniil Baturin) — Fri, 27 Dec 2013 21:46:48 GMT

We’ve got two mirrors in Eastern Europe lately. One in Bulgaria, hosted by Hristo Bogdanov (http://0.bg.mirrors.vyos.net) and one in Ukraine, hosted by Alexey Blinkov (http://0.ua.mirrors.vyos.net). Both are in the load balancer now.

1.0.0 release

daniil@sentrium.io (Daniil Baturin) — Sun, 22 Dec 2013 19:12:00 GMT

Winter holidays are coming, and it’s time for gifts. As our gift to the community we roll out the first VyOS release, 1.0.0 (hydrogen).

Introducing semantic versioning

daniil@sentrium.io (Daniil Baturin) — Sun, 22 Dec 2013 05:49:26 GMT

For release images we are going to use so called “semantic versioning”. This system was invented to make software version handy for both visual evaluation and automated comparison.

Infrastructure changes: new mirror in the UK

daniil@sentrium.io (Daniil Baturin) — Thu, 19 Dec 2013 02:25:16 GMT

OpenITC provided us with a UK mirror. Its address is http://0.uk.mirrors.vyos.net and it’s been added to the load balancer. Thanks, Sean!

Infrastructure changes: new mirror in load balancer

daniil@sentrium.io (Daniil Baturin) — Wed, 18 Dec 2013 14:38:47 GMT

Sebastien Crammate from Nixus Networks (Spain) was actually the first one to setup a mirror, but I forgot to announce it. The mirror is: http://mirrors.nixus.es/vyos/

Infrastructure changes digest: new nightly builds location and new mirrors

daniil@sentrium.io (Daniil Baturin) — Mon, 16 Dec 2013 22:17:00 GMT

First, nightly builds were moved to separate location: http://builds.vyos.net/. This is done to naturally exclude them from mirrorring, as they are of little value and hardly worth mirroring. Now if you mirror rsync://packages.vyos.net/vyos, you get only repos and release images. Of course, no one prevents you from mirroring nightly builds too, if you want it (rsync://packages.vyos.net/vyos-builds).

git digest #8: webproxy LDAP auth and op mode enhancements

daniil@sentrium.io (Daniil Baturin) — Mon, 02 Dec 2013 12:58:04 GMT

First, I integrated the patches for webproxy LDAP authentication. Some documentation on the commands can be found here: http://vyos.net/wiki/Web_proxy_LDAP_authentication. ActiveDirectory example from the original message:

ISC DHCP 4.1.8

daniil@sentrium.io (Daniil Baturin) — Fri, 29 Nov 2013 16:04:32 GMT

We updated ISC DHCP to 4.1.8. Thanks to Mihail Vasiliev for merging it into the original vyatta code.

New repository layout

daniil@sentrium.io (Daniil Baturin) — Fri, 29 Nov 2013 15:59:18 GMT

Ok, seems to work now.

git digest #7

daniil@sentrium.io (Daniil Baturin) — Sat, 16 Nov 2013 20:33:14 GMT

First, now it’s possible to run VyOS commands from scripts. I added the “script-template” written by jsouthworth and me a while ago and already used in EdgeOS. Some docs: http://vyos.net/wiki/Command_scripting.

rsync

daniil@sentrium.io (Daniil Baturin) — Sat, 16 Nov 2013 16:49:10 GMT

packages.vyos.net now supports rsync to simplify mirroring.

Autobuild

daniil@sentrium.io (Daniil Baturin) — Fri, 15 Nov 2013 19:52:21 GMT

I’ve setup minimal autobuild. It can build and upload images already, but not packages yet, jobs for rebuilding packages if there were changes in git is work in progress.

VyOS now works with XenServer

daniil@sentrium.io (Daniil Baturin) — Mon, 11 Nov 2013 18:42:00 GMT

Image: i386-virt.