WireGuard Snapshot `0.0.20190905` Available

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello,

A new snapshot, 0.0.20190905, has been tagged in the git repository.

Please note that this snapshot is, like the rest of the project at this point in time, experimental, and does not constitute a real release that would be considered secure and bug-free. WireGuard is generally thought to be fairly stable, and most likely will not crash your computer (though it may). However, as this is a pre-release snapshot, it comes with no guarantees, and its security is not yet to be depended on; it is not applicable for CVEs.

With all that said, if you'd like to test this snapshot out, there are a few relevant changes.

== Changes ==

* compat: define conversion constants for ancient kernels
* compat: support running in OpenVZ environments
* compat: do not run bc on clean target
* compat: account for android-4.9 backport of addr_gen_mode
* compat: work around ubuntu breakage

Lots of compat work. Of particular note is that Ubuntu 16.04 screwed up a backport, which broke WireGuard. Their kernel team is aware of the issue, but due to bureaucratic constraints, they can't release a new kernel for ~7 weeks, so we're releasing a new version instead.

* wg-quick: android: refactor and add incoming allow rules

Android battery savers also limit incoming traffic, so we open this up to WireGuard.

* netlink: enforce that unused bits of flags are zero

This enforcement means we can use these bits later.

* noise: immediately rekey all peers after changing device private key

It should now be possible to change private keys and then immediately re-handshake, without loosing incoming packets.

* netlink: skip peers with invalid keys

We already had this for some cases but not for the invalid case.

* Kbuild: account for upstream configuration maze changes

This should allow inserting into the build system of mainline kernels for folks using the jury-rig scripts.

* wg-quick: openbsd: fix alternate routing table syntax

Syntax bug, which should now allow for multiple routing table-based routing on OpenBSD.

* wg-quick: linux: don't fail down when using systemd-resolved

This prevents systemd-resolved->resolvconf systems to use wg-quick.

* Makefile: allow specifying kernel release

It is now possible to build for a kernel different from the running one.

* tools: windows: enforce named pipe ownership and use protected prefix

Security hardening enhancements for the Windows tools port.

This snapshot contains commits from: Jason A. Donenfeld, Ronan Pigott, Nathan Chancellor, Mikk Mar, and Ankur Kothari.

As always, the source is available at https://git.zx2c4.com/WireGuard/ and information about the project is available at https://www.wireguard.com/ .

This snapshot is available in compressed tarball form here:
https://git.zx2c4.com/WireGuard/snapshot/WireGuard-0.0.20190905.tar.xz
SHA2-256: 78767ceeb5286beaa851145f072d920a340a9f1b771a2943b8efd638cee1a8f6
BLAKE2b-256: 2cb58ed55b4261257b0dcfca58a3e73bc5ea8eb660855e0bbb0639b893d4aa2e

A PGP signature of that file decompressed is available here:
https://git.zx2c4.com/WireGuard/snapshot/WireGuard-0.0.20190905.tar.asc
Signing key: AB9942E6D4A4CFC3412620A749FC7012A5DE03AE

If you're a snapshot package maintainer, please bump your package version. If you're a user, the WireGuard team welcomes any and all feedback on this latest snapshot.

Finally, WireGuard development thrives on donations. By popular demand, we have a webpage for this: https://www.wireguard.com/donations/

Thank you,
Jason Donenfeld

-----BEGIN PGP SIGNATURE-----

iQJEBAEBCAAuFiEEq5lC5tSkz8NBJiCnSfxwEqXeA64FAl1xi1wQHGphc29uQHp4 MmM0LmNvbQAKCRBJ/HASpd4DrnN9D/sHHEJmmQaJZ4RszJjDydUzq8wJ6SliFT0E JiuDTWyZQld7IRiCAAPmcgH9Xv783icLUQNKcO6JRAV0rTcmUmV4N6iuT1LKeNIj KrG44SxuAOSKSQacsJHE+jU4Tbn2MqGztw1f9NwUCOzTg/TfivERTG8+Xi5MP0c6 clkHF6I8aTlV30JeqjmbpbSWYnnYJo5k3mMAY7lPZ4ddiWQTfYm3gBRbDu1cdwjX IHJ0ZtGvnwrb16/OTwxcPkE0lZiV7WLghHmXJjPbN6V0diHUIyvNddPceN1gxOeK HbI646KtceDBOGlWA+z6qF27W4PVw29fRtfAtUVDsPXNDRhYvGdnjG1p7ReUamW4 KKuHJHfvgJURy++AXV9PUj6V0MtHANX6bWLjVDKRg+DIHPIU5iATF4Cz6vp9jcOh r3mJ3iA6XJE/0PSmqM1jbbB0Tb6dIGGXZgymMt4H3Uf0HYROQRAD8PZdl5Ii/d26 1lydevz1TiUpO6ADcYq9PYngSVP4McR8EM/eCkBL+dY3RTlx0/lMemKR992FkTyq 7TutFLfSa0FUJvkk1LsEQvLUKKpfkDiGd+/7v/k6DaIBSkA91kBiTdXNkyJpPnJS KWlH6dz7QZdVZVxdbZacHeFYvtqaa2+YaDyPJiibByBuwK0+g8lPQnTg3wuFjMIo FW5aLIHbeg==
=vikk
-----END PGP SIGNATURE-----
_______________________________________________
WireGuard mailing list
[email protected]
https://lists.zx2c4.com/mailman/listinfo/wireguard