This release fixes issues for SREs watching stability and regressions.
Published 2d
Dashboards & Home Pages
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
bitcoin
bitcoin-node
lightning-node
p2p
personal-server
privacy-enhancing-technologies
+1 more
self-hosted
Affected surfaces
auth
Summary
AI summaryFixed IPv6 delegation routing and restored HTTP→HTTPS redirect on all public IPv4 addresses.
Full changelog
What's Changed
Fixed
- IPv6 delegation now works when the WAN interface holds the delegated block
itself. Some providers configure the delegated range directly on the WAN
interface at its exact size (DigitalOcean assigns its /124 this way), which
left the kernel with two equally-specific routes for the block — WAN and
tunnel — and the WAN won. Traffic toward device addresses, including replies
to connections devices opened, exited the WAN and was lost, so devices had
IPv6 addresses but no connectivity. The tunnel now installs an explicit host
route per device address, which always takes precedence. Routed prefixes,
and on-link blocks configured at a shorter length than the delegated prefix,
were unaffected. - Port 80 is the HTTP→HTTPS redirect on every public IPv4. Upgrading
re-enables the redirect on every public IPv4 (clearing any per-address
opt-outs) and removes any published forward that occupies port 80, so a plain
http://request always bounces tohttps://. Republish port 80 to a device
afterward if you need it there — turn the redirect off for that address first.
start-tunnel packages Checksums
SHA-256
5b566fe289698ac788df58728d598cb9887d2d08a970b7c3b422dfbdca899291 start-tunnel-1.2.1-66c33c6_aarch64.deb
a5586e0a2d2efffc7491744e1902b888864e4efc3a5af37f1377db1b975c4967 start-tunnel-1.2.1-66c33c6_riscv64.deb
332501a4ed6ba627ebf7ac389c0c202b5175aa82c5e4916a91da2476619f54ec start-tunnel-1.2.1-66c33c6_x86_64.deb
BLAKE-3
811ac855808c8992e02fe65ff02503068a860fd276cdfcf653d5dafcc9442703 start-tunnel-1.2.1-66c33c6_aarch64.deb
586a451fbb049d75d819ccddb114ccd6d1e909f2f54f87589c2ab5b70909630d start-tunnel-1.2.1-66c33c6_riscv64.deb
8bc3538b94fd4f7d3e7084d6483061f78e08baed2bab26057e77fba0437c94db start-tunnel-1.2.1-66c33c6_x86_64.deb
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About StartOS
Browser-based, graphical Operating System (OS) that makes running a personal server as easy as running a personal computer.
Related context
Related tools
Earlier breaking changes
- vstart-sdk/v2.0.4 'setupMain' callback now accepts any DaemonBuildable rather than requiring a Daemons.
- vstart-sdk/v2.0.4 `Daemons.dynamic` now takes `effects` and returns a `DaemonReconciler` instead of replacing `main`.
- v0.4.0-beta.9 Previous backups incompatible with v0.4.0; create fresh backup after updating.
Beta — feedback welcome: [email protected]