Hello community,
here is the log from the commit of package wireguard.13661 for
openSUSE:Leap:15.1:Update checked in at 2020-08-12 10:45:31
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.1:Update/wireguard.13661 (Old)
and /work/SRC/openSUSE:Leap:15.1:Update/.wireguard.13661.new.3399 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "wireguard.13661"
Wed Aug 12 10:45:31 2020 rev:1 rq:825131 version:1.0.20200729
Changes:
--------
New Changes file:
--- /dev/null 2020-08-06 00:20:10.149648038 +0200
+++
/work/SRC/openSUSE:Leap:15.1:Update/.wireguard.13661.new.3399/wireguard.changes
2020-08-12 10:45:57.520465488 +0200
@@ -0,0 +1,4003 @@
+-------------------------------------------------------------------
+Wed Jul 29 19:43:12 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 1.0.20200729
+ * compat: rhel 8.3 beta removed nf_nat_core.h
+ * compat: ipv6_dst_lookup_flow was ported to rhel 7.9 beta
+ * compat: allow override of depmod basedir
+ * compat: add missing headers for ip_tunnel_parse_protocol
+
+-------------------------------------------------------------------
+Mon Jul 13 19:03:55 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 1.0.20200712
+ * receive: account for napi_gro_receive never returning GRO_DROP
+ * compat: rhel 8.3 backported skb_reset_redirect
+ * compat: SUSE 15.1 is the final SUSE we need to support
+ * queueing: make use of ip_tunnel_parse_protocol
+ * compat: backport ip_tunnel_parse_protocol and
+ ip_tunnel_header_ops
+
+-------------------------------------------------------------------
+Wed Jun 24 16:08:00 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 1.0.20200623
+ * compat: drop centos 8.1 support as 8.2 is now out
+ * Kbuild: remove -fvisibility=hidden from cflags
+ * noise: do not assign initiation time in if condition
+ * device: avoid circular netns references
+ * netns: workaround bad 5.2.y backport
+
+-------------------------------------------------------------------
+Sat Jun 13 12:13:16 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 1.0.20200611
+ * Our qemu test suite can now handle more kernels and more
+ compilers. Scroll
+ * compat: widen breadth of integer constants
+ * compat: widen breadth of memzero_explicit backport
+ * compat: backport skb_scrub_packet to 3.11
+ * compat: widen breadth of prandom_u32_max backport
+ * compat: narrow the breadth of iptunnel_xmit backport
+ * compat: backport iptunnel_xmit to 3.11
+ * compat: ubuntu appears to have backported ipv6_dst_lookup_flow
+ * compat: bionic-hwe-5.0/disco kernel backported
+ skb_reset_redirect and ipv6 flow
+ * compat: remove stale suse support
+ WireGuard is now part of SUSE 15.2, and the older series is no
+ longer supported by SUSE. This means we only need to support
+ SUSE 15.1.
+
+-------------------------------------------------------------------
+Thu May 21 06:36:14 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 1.0.20200520
+ * qemu: use newer iproute2 for gcc-10
+ * qemu: add -fcommon for compiling ping with gcc-10
+ * noise: read preshared key while taking lock
+ * noise: separate receive counter from send counter
+ * compat: support RHEL 8 as 8.2, drop 8.1 support
+ * compat: support CentOS 8 explicitly
+ * compat: RHEL7 backported the skb hash renamings
+ * compat: backport renamed/missing skb hash members
+ * compat: ip6_dst_lookup_flow was backported to 4.14, 4.9,
+ and 4.4
+
+-------------------------------------------------------------------
+Thu May 7 06:06:22 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 1.0.20200506
+ * compat: timeconst.h is a generated artifact
+ * qemu: loop entropy adding until getrandom doesn't block
+ * compat: detect Debian's backport of ip6_dst_lookup_flow into
+ 4.19.118
+ * compat: use bash instead of bc for HZ-->USEC calculation
+ * qemu: use normal kernel stack size on ppc64
+ * socket: remove errant restriction on looping to self
+ * send: cond_resched() when processing tx ringbuffers
+ * compat: Ubuntu 19.10 and 18.04-hwe backported
+ skb_reset_redirect
+ * selftests: initalize ipv6 members to NULL to squelch clang
+ warning
+ * send/receive: use explicit unlikely branch instead of
+ implicit coalescing
+
+-------------------------------------------------------------------
+Thu Apr 30 13:27:21 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 1.0.20200429
+ * receive: use tunnel helpers for decapsulating ECN markings
+ * compat: ip6_dst_lookup_flow was backported to 3.16.83
+ * compat: ip6_dst_lookup_flow was backported to 4.19.119
+
+-------------------------------------------------------------------
+Mon Apr 27 06:34:21 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 1.0.20200426
+ * crypto: do not export symbols
+ * compat: include sch_generic.h header for skb_reset_tc
+ * compat: import latest fixes for ptr_ring
+ * compat: don't assume READ_ONCE barriers on old kernels
+ * compat: kvmalloc_array is not required anyway
+ * queueing: cleanup ptr_ring in error path of packet_queue_init
+ * main: mark as in-tree
+ Now that we're upstream, there's no need to set the taint flag.
+ * compat: prefix icmp[v6]_ndo_send with __compat
+
+-------------------------------------------------------------------
+Tue Apr 14 10:31:56 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 1.0.20200413
+ * compat: support latest suse 15.1 and 15.2
+ * compat: support RHEL 7.8's faulty siphash backport
+ * compat: error out if bc is missing
+ * compat: backport hsiphash_1u32 for tests
+- Drop not longer needed patches:
+ * wireguard-fix-leap151.patch
+ * wireguard-fix-leap152.patch
+- Add BR: bc
+
+-------------------------------------------------------------------
+Wed Apr 1 19:18:55 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 1.0.20200401
+ * compat: queueing: skb_reset_redirect change has been
+ backported to 5.[45]
+ * qemu: bump default kernel to 5.5.14
+
+-------------------------------------------------------------------
+Tue Mar 31 19:29:33 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 1.0.20200330
+ * queueing: backport skb_reset_redirect change from 5.6
+
+-------------------------------------------------------------------
+Sat Mar 21 13:55:07 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 0.0.20200318
+ * compat: RHEL 7 backported skb_ensure_writable()
+ * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
+ * curve25519-x86_64: avoid use of r12
+ * wireguard: queueing: account for skb->protocol==0
+ * receive: remove dead code from default packet type case
+ * noise: error out precomputed DH during handshake rather than
+ config
+ * send: use normaler alignment formula from upstream
+
+-------------------------------------------------------------------
+Thu Mar 5 19:49:50 UTC 2020 - Michal Suchanek <[email protected]>
+
+- Fix build on openSUSE 15.2
+ + wireguard-fix-leap152.patch
+
+-------------------------------------------------------------------
+Wed Feb 26 12:28:36 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 0.0.20200215
+ * send: cleanup skb padding calculation
+ * socket: remove useless synchronize_net
+
+-------------------------------------------------------------------
+Fri Feb 14 16:08:24 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 0.0.20200214
+ * chacha20poly1305: defensively protect against large inputs
+ * netns: ensure that icmp src address is correct with nat
+ * receive: reset last_under_load to zero
+ * send: account for mtu=0 devices
+
+-------------------------------------------------------------------
+Wed Feb 5 20:35:15 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 0.0.20200205
+ * allowedips: remove previously added list item when OOM fail
+ * noise: reject peers with low order public keys
+ * netns: ensure non-addition of peers with failed precomputation
+ * netns: tie socket waiting to target pid
+
+-------------------------------------------------------------------
+Tue Jan 28 16:28:49 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 0.0.20200128
+ * qemu: bump kernel
+ * compat: refuse to build on >= 5.6
+ * compat: account for frankenzinc being in 5.5
+
+-------------------------------------------------------------------
+Tue Jan 21 21:55:21 UTC 2020 - Martin Hauke <[email protected]>
+
+- Update to version 0.0.20200121
+ * Makefile: strip prefixed v from version.h
+ * device: skb_list_walk_safe moved upstream
+ * curve25519: x86_64: replace with formally verified
+ implementation
+
+-------------------------------------------------------------------
+Mon Jan 20 21:11:23 UTC 2020 - Martin Hauke <[email protected]>
+
++++ 3806 more lines (skipped)
++++ between /dev/null
++++ and
/work/SRC/openSUSE:Leap:15.1:Update/.wireguard.13661.new.3399/wireguard.changes
New:
----
WireGuard.keyring
wireguard-kmp-preamble
wireguard-linux-compat-1.0.20200729.tar.asc
wireguard-linux-compat-1.0.20200729.tar.xz
wireguard.changes
wireguard.spec
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ wireguard.spec ++++++
#
# spec file for package wireguard
#
# Copyright (c) 2020 SUSE LLC
# Copyright (c) 2017-2020, Martin Hauke <[email protected]>
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
Name: wireguard
Version: 1.0.20200729
Release: 0
Summary: Fast, modern, secure kernel VPN tunnel
License: GPL-2.0-only
Group: Productivity/Networking/Security
URL: https://www.wireguard.com/
Source:
https://git.zx2c4.com/wireguard-linux-compat/snapshot/wireguard-linux-compat-%{version}.tar.xz
Source1:
https://git.zx2c4.com/wireguard-linux-compat/snapshot/wireguard-linux-compat-%{version}.tar.asc
Source2: wireguard-kmp-preamble
Source99:
https://www.zx2c4.com/keys/AB9942E6D4A4CFC3412620A749FC7012A5DE03AE.asc#/WireGuard.keyring
BuildRequires: %{kernel_module_package_buildreqs}
BuildRequires: bc
# disable flavors xen,desktop,pae,pv
%kernel_module_package -p wireguard-kmp-preamble
%description
WireGuard is a novel VPN that runs inside the Linux Kernel and uses
state-of-the-art cryptography (the "Noise" protocol). It aims to be
faster, simpler, leaner, and more useful than IPSec, while avoiding
the massive headache. It intends to be considerably more performant
than OpenVPN. WireGuard is designed as a general purpose VPN for
running on embedded interfaces and super computers alike, fit for
many different circumstances. It runs over UDP.
%prep
%setup -q -n wireguard-linux-compat-%{version}
cd src
set -- *
mkdir source
mv "$@" source/
mkdir obj
%build
cd src
for flavor in %{flavors_to_build}; do
cp -r source obj/$flavor
make V=1 -C %{kernel_source $flavor} modules M=$PWD/obj/$flavor
%{?_smp_mflags}
done
%install
cd src
export INSTALL_MOD_PATH=%{buildroot}
for flavor in %{flavors_to_build}; do
make V=1 -C %{kernel_source $flavor} modules_install M=$PWD/obj/$flavor
done
%files
%license COPYING
%doc README.md
%changelog
++++++ wireguard-kmp-preamble ++++++
Enhances: kernel-%1
Requires: kernel-%1
Supplements: packageand(kernel-%1:%name)
