This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+1 more
Summary
AI summaryBare public IP and named domains can now share one external port with fallback handling.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
A bare public IP and named domains can now share one external port. A bare public IP and named domains can now share one external port. Source: llm_adapter@2026-07-20 Confidence: medium |
— |
Full changelog
What's Changed
Fixed
- A bare public IP and named domains can now share one external port. When a
connected device publishes both a hostname-less forward and one or more SNI
hostnames on the same external port, the hostname-less forward now acts as the
fallback: a connection whose TLS SNI matches a named route reaches that route's
device, and everything else — a bare-IP client, or an unmatched or absent SNI —
reaches the fallback device. The two used to conflict, so whichever was
requested second was rejected.
start-tunnel packages Checksums
SHA-256
b0a9ac2029766a82007a248831aeaf726b23a0eab352bd9d9c8969af9a0551c6 start-tunnel-1.1.2-7d3092c_aarch64.deb
c1f4be0aaad862c417b6a19c12c16f425344e5e82ae02ffc88b6ef2d2ade4fed start-tunnel-1.1.2-7d3092c_riscv64.deb
4444b36a9713f119af24069947e27219caa035e45389ac754e747b3769f0d40b start-tunnel-1.1.2-7d3092c_x86_64.deb
BLAKE-3
d667e486b69e34b650c069f0b902ce9f0de64ef456b25cf583f9d4b12d53d58d start-tunnel-1.1.2-7d3092c_aarch64.deb
8d4849a912c10b5fe7a66d22f35fb130b2c6a003f9e1ae9b508efaf1c7145f92 start-tunnel-1.1.2-7d3092c_riscv64.deb
3fd971357ae6266b54e3094ec197de1a57233646ead199c35365c856ac8d56cd start-tunnel-1.1.2-7d3092c_x86_64.deb
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About StartOS
Browser-based, graphical Operating System (OS) that makes running a personal server as easy as running a personal computer.
Related context
Related tools
Earlier breaking changes
- vstart-sdk/v2.0.4 'setupMain' callback now accepts any DaemonBuildable rather than requiring a Daemons.
- vstart-sdk/v2.0.4 `Daemons.dynamic` now takes `effects` and returns a `DaemonReconciler` instead of replacing `main`.
- v0.4.0-beta.9 Previous backups incompatible with v0.4.0; create fresh backup after updating.
Beta — feedback welcome: [email protected]