[ANNOUNCE] wireguard-linux-compat v1.0.20211208 released
Jason A. Donenfeld
Jason at zx2c4.com
Wed Dec 8 15:20:37 UTC 2021
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hello,
A new version, v1.0.20211208, of the backported WireGuard kernel module for
3.10 <= Linux <= 5.5.y has been tagged in the git repository.
== Changes ==
* compat: account for latest c8s backports
* compat: update for RHEL 8.5
We now support RHEL 8.5 and C8S.
* compat: account for grsecurity backports and changes
* crypto: curve25519-x86_64: solve register constraints with reserved registers
Better compatibility with recent grsecurity kernels.
* netns: actually test for routing loops
* main: rename 'mod_init' & 'mod_exit' functions to be module-specific
* device: reset peer src endpoint when netns exits
* receive: use ring buffer for incoming handshakes
* receive: drop handshakes if queue lock is contended
* ratelimiter: use kvcalloc() instead of kvzalloc()
* compat: siphash: use _unaligned version by default
Upstream commits from this merge:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cbd92e7d74314e10a90d12a8f18f6fc66be4fb16
* compat: udp_tunnel: don't take reference to non-init namespace
This is an old bug unearthed by the routing loop test case added in this
cycle. It turns out that for kernels ≤3.16, interfaces weren't being deleted
when namespaces exited, due to improper namespace handling for kernel sockets
in the udp_tunnel backport.
This release contains commits from: Jason A. Donenfeld, Mathias Krause, Randy
Dunlap, Peter Georg, Gustavo A. R. Silva, and Arnd Bergmann.
As always, the source is available at https://git.zx2c4.com/wireguard-linux-compat/
and information about the project is available at https://www.wireguard.com/ .
This version is available in compressed tarball form here:
https://git.zx2c4.com/wireguard-linux-compat/snapshot/wireguard-linux-compat-1.0.20211208.tar.xz
SHA2-256: c0e607138a17daac656f508d8e63ea3737b5221fa5d9288191ddeb099f5a3b92
A PGP signature of that file decompressed is available here:
https://git.zx2c4.com/wireguard-linux-compat/snapshot/wireguard-linux-compat-1.0.20211208.tar.asc
Signing key: AB9942E6D4A4CFC3412620A749FC7012A5DE03AE
Remember to unxz the tarball before verifying the signature.
If you're a package maintainer, please bump your package version. If you're a
user, the WireGuard team welcomes any and all feedback on this latest version.
Finally, WireGuard development thrives on donations. By popular demand, we
have a webpage for this: https://www.wireguard.com/donations/
Thank you,
Jason Donenfeld
-----BEGIN PGP SIGNATURE-----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=vx+c
-----END PGP SIGNATURE-----
More information about the WireGuard
mailing list