VyOS image build scripts (mirror of https://github.com/vyos/vyos-build.git) https://git.amelek.net/vyos/vyos-build.git/atom?h=current 2026-05-23T17:54:51+00:00 2026-05-23T17:54:51+00:00 Christian Breunig christian@breunig.cc 2026-05-23T17:54:51+00:00 urn:sha1:dc194b8f6275f55d812e316dcb55cd8f57056cf1 The Kernel 6.18.33 now has an upstream fix for the fragnesia vulnerability 2026-05-15T20:05:43+00:00 Christian Breunig christian@breunig.cc 2026-05-15T20:05:43+00:00 urn:sha1:2d8bf69fb933b11ffc543121f9b0a9b461b6dc1e This fixes the LPE https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn 2026-05-13T12:47:36+00:00 John Estabrook jestabro@vyos.io 2026-05-13T12:47:36+00:00 urn:sha1:1423a3d7ad2cca1eee7fe8dc3db10e2ac07077e2 serial: T8844: fix default config injection leading to invalid boot console 2026-05-12T14:28:58+00:00 Christian Breunig christian@breunig.cc 2026-05-11T15:45:51+00:00 urn:sha1:7396eeadc74c026b84d615f1e92952af98d4b241 With all the latest serial interface changes - and the resulting patching of the default configuration based on the build flavor - the serial console was always injected by a helper named write-config-file-value.py, even if the console_type was set to tty instead of ttyS or ttyAMA. This was a pending issue in the rolling tests for the PROXMOX flavor. It is applicable to every other flavor using tty as default console. 2026-05-12T04:07:48+00:00 Christian Breunig christian@breunig.cc 2026-05-12T04:07:48+00:00 urn:sha1:d98030b937e45adc600a542edcf892ef2fa86ab3 Kernel: T6847: update Intel Out-Of-Tree drivers for IGB, IXGBE, I40e, ICE and IAVF 2026-05-11T18:40:33+00:00 Christian Breunig christian@breunig.cc 2026-05-11T18:40:33+00:00 urn:sha1:9693d9ce059d74a10603b9558acd96f05041e04a Stable kernels with Hyunwoo Kim's patch [1] for the second vulnerability CVE-2026-43500 reported with Dirty Frag and Copy Fail 2. 1: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=aa54b1d27fe0c2b78e664a34fd0fdf7cd1960d71 2026-05-08T20:44:08+00:00 Christian Breunig christian@breunig.cc 2026-05-08T20:38:39+00:00 urn:sha1:f3a221bf83c58f43059386f00237e0f00818de25 The Intel iavf driver (formerly i40evf) is the Linux virtual function driver for modern Intel Ethernet adapters supporting SR-IOV, including the X700/E800 series. Renamed to iavf to support future devices, it replaced i40evf entirely by 2019. The driver facilitates high-performance networking in virtualized environments. This commit contains custom patches to make the driver build. 2026-05-08T20:42:37+00:00 Christian Breunig christian@breunig.cc 2026-05-07T14:59:22+00:00 urn:sha1:adc9b031da6c71d393e4c8320a48f0056b6110a8 The current version of the Intel ice driver does not compile with a recent LTS Kernel due to missing internal Kernel API adjustments in the Intel driver. This commit contains custom patches to make the driver build. 2026-05-08T20:42:37+00:00 Christian Breunig christian@breunig.cc 2026-05-07T14:58:35+00:00 urn:sha1:6b962b7043b26260500e98d882e3ee1c165627c2 The current version of the Intel i40e driver does not compile with a recent LTS Kernel due to missing internal Kernel API adjustments in the Intel driver. This commit contains custom patches to make the driver build. 2026-05-08T17:16:30+00:00 Christian Breunig christian@breunig.cc 2026-05-08T17:14:33+00:00 urn:sha1:e142ecb996bdbc43688aad683e4312e38fa2bee1 These kernels contain a partial fix for the Dirty Frag [1] and Copy Fail 2 [2] security flaws. 1: https://github.com/V4bel/dirtyfrag#dirty-frag-universal-linux-lpe 2: https://www.openwall.com/lists/oss-security/2026/05/07/12