VyOS Platform Blog

CVE-2019-11477 (TCP SACK panic) and an Intel i40e driver issue

Recently discovered vulnerability in the Linux kernel's TCP selective acknowledgement processing code potentially allows a remote attacker to cause a kernel panic with a specially ...

The "operator" level is proved insecure and will be removed in the next releases

11/01/18 20:37 By: Daniil Baturin

The operator level in VyOS is a legacy feature that was inherited from the forked Vyatta Core code. It was always relatively obscure, and I don't think anyone really trusted its ...

On security of GRE/IPsec scenarios

04/27/18 15:33 By: Daniil Baturin

As we've already discussed, there are many ways to setup GRE (or something else) over IPsec and they all have their advantages and disadvantages. Recently an issue was brought to ...

The meltdown and spectre vulnerabilities

01/04/18 23:39 By: Daniil Baturin

Everyone is talking about the meltdown and the spectre vulnerabilities now. If you are late to the party, read https://meltdownattack.com/ Of course we are aware of it and took ...

Update on the AWS SSH key fetching issue

10/22/17 7:48 By: Daniil Baturin

We have fixed the issue with key fetching and submitted the updated AMI for review. It passed the automated scan, but manual review and deployment to the marketplace will take ...