[ANNOUNCE] WireGuard Snapshot `0.0.20181115` Available

Jason A. Donenfeld Jason at zx2c4.com
Thu Nov 15 21:10:33 CET 2018


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello,

A new snapshot, `0.0.20181115`, has been tagged in the git repository.

Please note that this snapshot is, like the rest of the project at this point
in time, experimental, and does not consitute a real release that would be
considered secure and bug-free. WireGuard is generally thought to be fairly
stable, and most likely will not crash your computer (though it may).
However, as this is a pre-release snapshot, it comes with no guarantees, and
its security is not yet to be depended on; it is not applicable for CVEs.

With all that said, if you'd like to test this snapshot out, there are a
few relevant changes.

== Changes ==

  * Zinc no longer ships generated assembly code. Rather, we now
    bundle in the original perlasm generator for it. The primary purpose
    of this snapshot is to get testing of this.
  * Clarify the peer removal logic and make lifetimes more precise.
  * Use READ_ONCE for is_valid and is_dead.
  * No need to use atomic when the recounter is mutex protected.
  * Fix up macros and annotations in allowedips.
  * Increment drop counter when staged packets are dropped.
  * Use static constants instead of enums for 64-bit values in selftest.
  * Mark large constants as ULL in poly1305-donna64.
  * Fix sparse warnings in allowedips debugging code.
  * Do not use wg_peer_get_maybe_zero in timer callbacks, since we now can
    carefully control the lifetime of these functions and ensure they never
    execute after dropping the last reference.
  * Cleanup hashing in ratelimiter.
  * Do not guard timer removals, since del_timer is always okay.
  * We now check for PM_AUTOSLEEP, which makes the clear*on-suspend decision a
    bit more general.
  * Set csum_level to ~0, since the poly1305 authenticator certainly means
    that no data was modified in transit.
  * Use CHECKSUM_PARTIAL check for skb_checksum_help instead of
    skb_checksum_setup check.
  * wg.8: specify that wg(8) shows runtime info too
  * wg.8: AllowedIPs isn't actually required
  * keygen-html: add missing glue macro
  * wg-quick: android: do not choke on empty allowed-ips

This snapshot contains commits from: Jason A. Donenfeld, Samuel Neves, and 
Andrejs Hanins.

As always, the source is available at https://git.zx2c4.com/WireGuard/ and
information about the project is available at https://www.wireguard.com/ .

This snapshot is available in compressed tarball form here:
  https://git.zx2c4.com/WireGuard/snapshot/WireGuard-0.0.20181115.tar.xz
  SHA2-256: 11292c7e86fce6fb0d9fd170389d2afc609bda963a7faf1fd713e11c2af53085
  BLAKE2b-256: a49d76514c73f7c901a8fc1e75dc0f561f60d9ff16a8b5a879d92bc2ea89b29b

A PGP signature of that file decompressed is available here:
  https://git.zx2c4.com/WireGuard/snapshot/WireGuard-0.0.20181115.tar.asc
  Signing key: AB9942E6D4A4CFC3412620A749FC7012A5DE03AE

If you're a snapshot package maintainer, please bump your package version. If
you're a user, the WireGuard team welcomes any and all feedback on this latest
snapshot.

Finally, WireGuard development thrives on donations. By popular demand, we
have a webpage for this: https://www.wireguard.com/donations/

Thank you,
Jason Donenfeld


-----BEGIN PGP SIGNATURE-----
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=vTRZ
-----END PGP SIGNATURE-----


More information about the WireGuard mailing list