[ANNOUNCE] wireguard-tools v1.0.20250521 released

Jason A. Donenfeld Jason at zx2c4.com
Tue May 20 23:21:55 UTC 2025


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello,

A new version, v1.0.20250521, of wireguard-tools has been tagged in the git
repository, containing various required userspace utilities, such as the
wg(8) and wg-quick(8) commands and documentation.

== Changes ==

  * ipc: use more clever PnP enumerator
  * embeddable-wg-library: add named wg_endpoint union
  * reresolve-dns: use $EPOCHSECONDS instead of $(date +%s)
  * wg-quick: android: use right regex for host-vs-IP
  * global: dual license core files as MIT for FreeBSD
  * wg-quick: linux: prevent traffic from momentarily leaking into tunnel
  * ipc: freebsd: move if_wg path to reflect new in-tree location
  * show: apply const to right part of pointer
  * ipc: freebsd: avoid leaking memory in kernel_get_device()
  * ipc: freebsd: NULL out some freed memory in kernel_set_device()
  * show: fix show all endpoints output
  * man: set private key in PreUp rather than PostUp
  * ipc: linux: enforce IFNAMSIZ limit
  * ipc: freebsd: use AF_LOCAL for the control socket
  * wg-quick: linux: add 'dev' to 'ip link add' to avoid keyword conflicts
  * config: handle strdup failure
  
  * wg-quick: run PreUp hook after creating interface
  
  This makes PreUp actually useful.
  
  * ipc: linux: support incremental allowed ips updates
  * ipc: add stub for allowedips flags on other platforms
  
  These two are neat and worth mentioning. Soon it will be possible to run:
  
    # wg set wg0 peer ... allowed-ips +1.2.3.4/32,-2.4.6.8/32
  
  in order to add and remove allowedips without first clearing all of them.
  

This release contains commits from: Jason A. Donenfeld, Kyle Evans, 
TriangleSnake, Tom Yan, Mikael Magnusson, Jordan Rife, Ilia Shipitsin, Dmitry 
Selivanov, and Daniel Gröber.

As always, the source is available at https://git.zx2c4.com/wireguard-tools/ and
information about the project is available at https://www.wireguard.com/ .

This release is available in compressed tarball form here:
  https://git.zx2c4.com/wireguard-tools/snapshot/wireguard-tools-1.0.20250521.tar.xz
  SHA2-256: b6f2628b85b1b23cc06517ec9c74f82d52c4cdbd020f3dd2f00c972a1782950e

A PGP signature of that file decompressed is available here:
  https://git.zx2c4.com/wireguard-tools/snapshot/wireguard-tools-1.0.20250521.tar.asc
  Signing key: AB9942E6D4A4CFC3412620A749FC7012A5DE03AE
  Remember to unxz the tarball before verifying the signature.

If you're a package maintainer, please bump your package version. If you're a
user, the WireGuard team welcomes any and all feedback on this latest version.

Finally, WireGuard development thrives on donations. By popular demand, we
have a webpage for this: https://www.wireguard.com/donations/

Thank you,
Jason Donenfeld


-----BEGIN PGP SIGNATURE-----

iQJEBAEBCAAuFiEEq5lC5tSkz8NBJiCnSfxwEqXeA64FAmgtDoIQHGphc29uQHp4
MmM0LmNvbQAKCRBJ/HASpd4DrqIuEACLc6L9YTFeIdMux9b4z2D7EiiX2+7+skp5
S0fEh07EelPTbPFPbLswvogyJrOK7SWXfLdeHgPSSxBFH95OZUhdnorM8XfOC5ST
VmMktVy9UZwxmrCVDd401rXRdZpkv4Dfob9iDU7McOcLoV+QnugEofljRuQbQExy
LB7e99hj06TP8eFBsQydfxv8OGSHu9H61ypVHCESZFFheFCfcJWjo8OzQu+CuhFl
fIklPiiAQL3ZQQA+v7r6wm93QuYwyQKfwNUC4F0quwwDMtWpgKs2hXRxMa93fZ3W
f2GlemJVWO5bj7VQKf6qZpILkCOLeIXPvAi8PIZX5QOvX2Yon88KiCw2caZqrm67
XWoqD75c1xZX78wHR0xniyAi5w12Hzpcnci7mBm7RBNBDN15ZQY01V5t4H6VulM2
uOUGspm/rcK1tCYDFV9DWAFon6881JJllXOe30n/dBsE0mNL2r4k5R5qCNxbWMmB
vp1qP6Thu3XO1vLo42A5EmJEbu04blCSVi3BKfby/21VTzCbrgufvv3JKAauTFEz
mmNwP1OW927/4C0aypkxUSkAv8aOwfrC+VWX5UAiFm9Zirc1nBgGFGjxZDQ+biV5
FT4zoEfqQQJ2pwZQq2leNKiFQE7pIcbvmY1O7LB1WXA92Ba4pGk7m1fP0Q8jLl7L
YBEORDlgig==
=de0O
-----END PGP SIGNATURE-----


More information about the WireGuard mailing list