<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="9">
<package pkgid="46f0b7f6dfd4ffb4a97536666d10c74cf8b72d34ca48919121c089bc35025cae" name="wireguard" arch="src">
  <version epoch="0" ver="1.0.20200520" rel="1.1"/>
  <changelog author="mardnh@gmx.de" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="mardnh@gmx.de" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="mardnh@gmx.de" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="mardnh@gmx.de" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="mardnh@gmx.de" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="mardnh@gmx.de" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="mardnh@gmx.de" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="mardnh@gmx.de" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="mardnh@gmx.de" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="mardnh@gmx.de" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="msuchanek@suse.de" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="mardnh@gmx.de" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
  <changelog author="mardnh@gmx.de" date="1585742400">- Update to version 1.0.20200401
  * compat: queueing: skb_reset_redirect change has been
    backported to 5.[45]
  * qemu: bump default kernel to 5.5.14</changelog>
  <changelog author="mardnh@gmx.de" date="1586865600">- Update to version 1.0.20200413
  * compat: support latest suse 15.1 and 15.2
  * compat: support RHEL 7.8's faulty siphash backport
  * compat: error out if bc is missing
  * compat: backport hsiphash_1u32 for tests
- Drop not longer needed patches:
  * wireguard-fix-leap151.patch
  * wireguard-fix-leap152.patch
- Add BR: bc</changelog>
  <changelog author="mardnh@gmx.de" date="1587988800">- Update to version 1.0.20200426
  * crypto: do not export symbols
  * compat: include sch_generic.h header for skb_reset_tc
  * compat: import latest fixes for ptr_ring
  * compat: don't assume READ_ONCE barriers on old kernels
  * compat: kvmalloc_array is not required anyway
  * queueing: cleanup ptr_ring in error path of packet_queue_init
  * main: mark as in-tree
    Now that we're upstream, there's no need to set the taint flag.
  * compat: prefix icmp[v6]_ndo_send with __compat</changelog>
  <changelog author="mardnh@gmx.de" date="1588248000">- Update to version 1.0.20200429
  * receive: use tunnel helpers for decapsulating ECN markings
  * compat: ip6_dst_lookup_flow was backported to 3.16.83
  * compat: ip6_dst_lookup_flow was backported to 4.19.119</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.20200506
  * compat: timeconst.h is a generated artifact
  * qemu: loop entropy adding until getrandom doesn't block
  * compat: detect Debian's backport of ip6_dst_lookup_flow into
    4.19.118
  * compat: use bash instead of bc for HZ--&gt;USEC calculation
  * qemu: use normal kernel stack size on ppc64
  * socket: remove errant restriction on looping to self
  * send: cond_resched() when processing tx ringbuffers
  * compat: Ubuntu 19.10 and 18.04-hwe backported
    skb_reset_redirect
  * selftests: initalize ipv6 members to NULL to squelch clang
    warning
  * send/receive: use explicit unlikely branch instead of
    implicit coalescing</changelog>
  <changelog author="mardnh@gmx.de" date="1590062400">- Update to version 1.0.20200520
  * qemu: use newer iproute2 for gcc-10
  * qemu: add -fcommon for compiling ping with gcc-10
  * noise: read preshared key while taking lock
  * noise: separate receive counter from send counter
  * compat: support RHEL 8 as 8.2, drop 8.1 support
  * compat: support CentOS 8 explicitly
  * compat: RHEL7 backported the skb hash renamings
  * compat: backport renamed/missing skb hash members
  * compat: ip6_dst_lookup_flow was backported to 4.14, 4.9,
    and 4.4</changelog>
</package>
<package pkgid="d982cda03e39f5fd96f492aa16337bf9e6fd0607708350ea5bee05f3b2500137" name="wireguard" arch="x86_64">
  <version epoch="0" ver="1.0.20200520" rel="1.1"/>
  <changelog author="mardnh@gmx.de" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="mardnh@gmx.de" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="mardnh@gmx.de" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="mardnh@gmx.de" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="mardnh@gmx.de" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="mardnh@gmx.de" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="mardnh@gmx.de" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="mardnh@gmx.de" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="mardnh@gmx.de" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="mardnh@gmx.de" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="msuchanek@suse.de" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="mardnh@gmx.de" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
  <changelog author="mardnh@gmx.de" date="1585742400">- Update to version 1.0.20200401
  * compat: queueing: skb_reset_redirect change has been
    backported to 5.[45]
  * qemu: bump default kernel to 5.5.14</changelog>
  <changelog author="mardnh@gmx.de" date="1586865600">- Update to version 1.0.20200413
  * compat: support latest suse 15.1 and 15.2
  * compat: support RHEL 7.8's faulty siphash backport
  * compat: error out if bc is missing
  * compat: backport hsiphash_1u32 for tests
- Drop not longer needed patches:
  * wireguard-fix-leap151.patch
  * wireguard-fix-leap152.patch
- Add BR: bc</changelog>
  <changelog author="mardnh@gmx.de" date="1587988800">- Update to version 1.0.20200426
  * crypto: do not export symbols
  * compat: include sch_generic.h header for skb_reset_tc
  * compat: import latest fixes for ptr_ring
  * compat: don't assume READ_ONCE barriers on old kernels
  * compat: kvmalloc_array is not required anyway
  * queueing: cleanup ptr_ring in error path of packet_queue_init
  * main: mark as in-tree
    Now that we're upstream, there's no need to set the taint flag.
  * compat: prefix icmp[v6]_ndo_send with __compat</changelog>
  <changelog author="mardnh@gmx.de" date="1588248000">- Update to version 1.0.20200429
  * receive: use tunnel helpers for decapsulating ECN markings
  * compat: ip6_dst_lookup_flow was backported to 3.16.83
  * compat: ip6_dst_lookup_flow was backported to 4.19.119</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.20200506
  * compat: timeconst.h is a generated artifact
  * qemu: loop entropy adding until getrandom doesn't block
  * compat: detect Debian's backport of ip6_dst_lookup_flow into
    4.19.118
  * compat: use bash instead of bc for HZ--&gt;USEC calculation
  * qemu: use normal kernel stack size on ppc64
  * socket: remove errant restriction on looping to self
  * send: cond_resched() when processing tx ringbuffers
  * compat: Ubuntu 19.10 and 18.04-hwe backported
    skb_reset_redirect
  * selftests: initalize ipv6 members to NULL to squelch clang
    warning
  * send/receive: use explicit unlikely branch instead of
    implicit coalescing</changelog>
  <changelog author="mardnh@gmx.de" date="1590062400">- Update to version 1.0.20200520
  * qemu: use newer iproute2 for gcc-10
  * qemu: add -fcommon for compiling ping with gcc-10
  * noise: read preshared key while taking lock
  * noise: separate receive counter from send counter
  * compat: support RHEL 8 as 8.2, drop 8.1 support
  * compat: support CentOS 8 explicitly
  * compat: RHEL7 backported the skb hash renamings
  * compat: backport renamed/missing skb hash members
  * compat: ip6_dst_lookup_flow was backported to 4.14, 4.9,
    and 4.4</changelog>
</package>
<package pkgid="0d2934e4fb71e21c52f151a654b893a922786b924efc04c78aedd316b1239a6e" name="wireguard-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.20200520" rel="1.1"/>
  <changelog author="mardnh@gmx.de" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="mardnh@gmx.de" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="mardnh@gmx.de" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="mardnh@gmx.de" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="mardnh@gmx.de" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="mardnh@gmx.de" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="mardnh@gmx.de" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="mardnh@gmx.de" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="mardnh@gmx.de" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="mardnh@gmx.de" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="msuchanek@suse.de" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="mardnh@gmx.de" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
  <changelog author="mardnh@gmx.de" date="1585742400">- Update to version 1.0.20200401
  * compat: queueing: skb_reset_redirect change has been
    backported to 5.[45]
  * qemu: bump default kernel to 5.5.14</changelog>
  <changelog author="mardnh@gmx.de" date="1586865600">- Update to version 1.0.20200413
  * compat: support latest suse 15.1 and 15.2
  * compat: support RHEL 7.8's faulty siphash backport
  * compat: error out if bc is missing
  * compat: backport hsiphash_1u32 for tests
- Drop not longer needed patches:
  * wireguard-fix-leap151.patch
  * wireguard-fix-leap152.patch
- Add BR: bc</changelog>
  <changelog author="mardnh@gmx.de" date="1587988800">- Update to version 1.0.20200426
  * crypto: do not export symbols
  * compat: include sch_generic.h header for skb_reset_tc
  * compat: import latest fixes for ptr_ring
  * compat: don't assume READ_ONCE barriers on old kernels
  * compat: kvmalloc_array is not required anyway
  * queueing: cleanup ptr_ring in error path of packet_queue_init
  * main: mark as in-tree
    Now that we're upstream, there's no need to set the taint flag.
  * compat: prefix icmp[v6]_ndo_send with __compat</changelog>
  <changelog author="mardnh@gmx.de" date="1588248000">- Update to version 1.0.20200429
  * receive: use tunnel helpers for decapsulating ECN markings
  * compat: ip6_dst_lookup_flow was backported to 3.16.83
  * compat: ip6_dst_lookup_flow was backported to 4.19.119</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.20200506
  * compat: timeconst.h is a generated artifact
  * qemu: loop entropy adding until getrandom doesn't block
  * compat: detect Debian's backport of ip6_dst_lookup_flow into
    4.19.118
  * compat: use bash instead of bc for HZ--&gt;USEC calculation
  * qemu: use normal kernel stack size on ppc64
  * socket: remove errant restriction on looping to self
  * send: cond_resched() when processing tx ringbuffers
  * compat: Ubuntu 19.10 and 18.04-hwe backported
    skb_reset_redirect
  * selftests: initalize ipv6 members to NULL to squelch clang
    warning
  * send/receive: use explicit unlikely branch instead of
    implicit coalescing</changelog>
  <changelog author="mardnh@gmx.de" date="1590062400">- Update to version 1.0.20200520
  * qemu: use newer iproute2 for gcc-10
  * qemu: add -fcommon for compiling ping with gcc-10
  * noise: read preshared key while taking lock
  * noise: separate receive counter from send counter
  * compat: support RHEL 8 as 8.2, drop 8.1 support
  * compat: support CentOS 8 explicitly
  * compat: RHEL7 backported the skb hash renamings
  * compat: backport renamed/missing skb hash members
  * compat: ip6_dst_lookup_flow was backported to 4.14, 4.9,
    and 4.4</changelog>
</package>
<package pkgid="061b1fe1d48e8d8a0b310c94108ccd22f12e41eb05f571c551e7871122cf301f" name="wireguard-kmp-default" arch="x86_64">
  <version epoch="0" ver="1.0.20200520_k4.4.73_5" rel="1.1"/>
  <changelog author="mardnh@gmx.de" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="mardnh@gmx.de" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="mardnh@gmx.de" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="mardnh@gmx.de" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="mardnh@gmx.de" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="mardnh@gmx.de" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="mardnh@gmx.de" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="mardnh@gmx.de" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="mardnh@gmx.de" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="mardnh@gmx.de" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="msuchanek@suse.de" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="mardnh@gmx.de" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
  <changelog author="mardnh@gmx.de" date="1585742400">- Update to version 1.0.20200401
  * compat: queueing: skb_reset_redirect change has been
    backported to 5.[45]
  * qemu: bump default kernel to 5.5.14</changelog>
  <changelog author="mardnh@gmx.de" date="1586865600">- Update to version 1.0.20200413
  * compat: support latest suse 15.1 and 15.2
  * compat: support RHEL 7.8's faulty siphash backport
  * compat: error out if bc is missing
  * compat: backport hsiphash_1u32 for tests
- Drop not longer needed patches:
  * wireguard-fix-leap151.patch
  * wireguard-fix-leap152.patch
- Add BR: bc</changelog>
  <changelog author="mardnh@gmx.de" date="1587988800">- Update to version 1.0.20200426
  * crypto: do not export symbols
  * compat: include sch_generic.h header for skb_reset_tc
  * compat: import latest fixes for ptr_ring
  * compat: don't assume READ_ONCE barriers on old kernels
  * compat: kvmalloc_array is not required anyway
  * queueing: cleanup ptr_ring in error path of packet_queue_init
  * main: mark as in-tree
    Now that we're upstream, there's no need to set the taint flag.
  * compat: prefix icmp[v6]_ndo_send with __compat</changelog>
  <changelog author="mardnh@gmx.de" date="1588248000">- Update to version 1.0.20200429
  * receive: use tunnel helpers for decapsulating ECN markings
  * compat: ip6_dst_lookup_flow was backported to 3.16.83
  * compat: ip6_dst_lookup_flow was backported to 4.19.119</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.20200506
  * compat: timeconst.h is a generated artifact
  * qemu: loop entropy adding until getrandom doesn't block
  * compat: detect Debian's backport of ip6_dst_lookup_flow into
    4.19.118
  * compat: use bash instead of bc for HZ--&gt;USEC calculation
  * qemu: use normal kernel stack size on ppc64
  * socket: remove errant restriction on looping to self
  * send: cond_resched() when processing tx ringbuffers
  * compat: Ubuntu 19.10 and 18.04-hwe backported
    skb_reset_redirect
  * selftests: initalize ipv6 members to NULL to squelch clang
    warning
  * send/receive: use explicit unlikely branch instead of
    implicit coalescing</changelog>
  <changelog author="mardnh@gmx.de" date="1590062400">- Update to version 1.0.20200520
  * qemu: use newer iproute2 for gcc-10
  * qemu: add -fcommon for compiling ping with gcc-10
  * noise: read preshared key while taking lock
  * noise: separate receive counter from send counter
  * compat: support RHEL 8 as 8.2, drop 8.1 support
  * compat: support CentOS 8 explicitly
  * compat: RHEL7 backported the skb hash renamings
  * compat: backport renamed/missing skb hash members
  * compat: ip6_dst_lookup_flow was backported to 4.14, 4.9,
    and 4.4</changelog>
</package>
<package pkgid="20a2b0b9b3c7c61d1f1ae0f5ed0dfa939c62d9edf9e8c5eb37c231cc1ef05af8" name="wireguard-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.20200520_k4.4.73_5" rel="1.1"/>
  <changelog author="mardnh@gmx.de" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="mardnh@gmx.de" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="mardnh@gmx.de" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="mardnh@gmx.de" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="mardnh@gmx.de" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="mardnh@gmx.de" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="mardnh@gmx.de" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="mardnh@gmx.de" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="mardnh@gmx.de" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="mardnh@gmx.de" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="msuchanek@suse.de" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="mardnh@gmx.de" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
  <changelog author="mardnh@gmx.de" date="1585742400">- Update to version 1.0.20200401
  * compat: queueing: skb_reset_redirect change has been
    backported to 5.[45]
  * qemu: bump default kernel to 5.5.14</changelog>
  <changelog author="mardnh@gmx.de" date="1586865600">- Update to version 1.0.20200413
  * compat: support latest suse 15.1 and 15.2
  * compat: support RHEL 7.8's faulty siphash backport
  * compat: error out if bc is missing
  * compat: backport hsiphash_1u32 for tests
- Drop not longer needed patches:
  * wireguard-fix-leap151.patch
  * wireguard-fix-leap152.patch
- Add BR: bc</changelog>
  <changelog author="mardnh@gmx.de" date="1587988800">- Update to version 1.0.20200426
  * crypto: do not export symbols
  * compat: include sch_generic.h header for skb_reset_tc
  * compat: import latest fixes for ptr_ring
  * compat: don't assume READ_ONCE barriers on old kernels
  * compat: kvmalloc_array is not required anyway
  * queueing: cleanup ptr_ring in error path of packet_queue_init
  * main: mark as in-tree
    Now that we're upstream, there's no need to set the taint flag.
  * compat: prefix icmp[v6]_ndo_send with __compat</changelog>
  <changelog author="mardnh@gmx.de" date="1588248000">- Update to version 1.0.20200429
  * receive: use tunnel helpers for decapsulating ECN markings
  * compat: ip6_dst_lookup_flow was backported to 3.16.83
  * compat: ip6_dst_lookup_flow was backported to 4.19.119</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.20200506
  * compat: timeconst.h is a generated artifact
  * qemu: loop entropy adding until getrandom doesn't block
  * compat: detect Debian's backport of ip6_dst_lookup_flow into
    4.19.118
  * compat: use bash instead of bc for HZ--&gt;USEC calculation
  * qemu: use normal kernel stack size on ppc64
  * socket: remove errant restriction on looping to self
  * send: cond_resched() when processing tx ringbuffers
  * compat: Ubuntu 19.10 and 18.04-hwe backported
    skb_reset_redirect
  * selftests: initalize ipv6 members to NULL to squelch clang
    warning
  * send/receive: use explicit unlikely branch instead of
    implicit coalescing</changelog>
  <changelog author="mardnh@gmx.de" date="1590062400">- Update to version 1.0.20200520
  * qemu: use newer iproute2 for gcc-10
  * qemu: add -fcommon for compiling ping with gcc-10
  * noise: read preshared key while taking lock
  * noise: separate receive counter from send counter
  * compat: support RHEL 8 as 8.2, drop 8.1 support
  * compat: support CentOS 8 explicitly
  * compat: RHEL7 backported the skb hash renamings
  * compat: backport renamed/missing skb hash members
  * compat: ip6_dst_lookup_flow was backported to 4.14, 4.9,
    and 4.4</changelog>
</package>
<package pkgid="2c7807ee31309acc25726a20d92814548bd743af34b2707d798616a6cb7c96b1" name="wireguard-tools" arch="src">
  <version epoch="0" ver="1.0.20260223" rel="51.1"/>
  <changelog author="mardnh@gmx.de" date="1584792000">- Update to version 1.0.20200319
  * netlink: initialize mostly unused field
  * curve25519: squelch warnings on clang
  * man: fix grammar in wg(8) and wg-quick(8)
  * man: backlink wg-quick(8) in wg(8)
  * man: add a warning to the SaveConfig description
  * wincompat: use string_list instead of inflatable_buffer</changelog>
  <changelog author="mardnh@gmx.de" date="1589198400">- Update to version 1.0.20200510
  * ipc: add support for openbsd kernel implementation
  * ipc: cleanup openbsd support
  * wg-quick: add support for openbsd kernel implementation
  * wg-quick: cleanup openbsd support
  * wg-quick: support dns search domains
  * Makefile: simplify silent cleaning
  * git: add gitattributes so tarball doesn't have gitignore files
  * terminal: specialize color_mode to stdout only
  * highlighter: insist on 256-bit keys, not 257-bit or 258-bit
  * wg-quick: android: support application whitelist
  * systemd: add wg-quick.target
- Remove patch (not longer needed):
  * wireguard-fix-systemd-service.patch
- Remove source file (fixed upstream)
  * wireguard.target
    This functionality is now provided by wg-quick.target</changelog>
  <changelog author="mardnh@gmx.de" date="1589457600">- Update to version 1.0.20200513
  * Makefile: remember to install all systemd units
  * ipc: openbsd: switch to array ioctl interface</changelog>
  <changelog author="mardnh@gmx.de" date="1598097600">- Update to version 1.0.20200820
  * ipc: split into separate files per-platform
  * wincompat: fold random into genkey
  * systemd: add reload target to systemd unit
  * man: wg-quick: use syncconf instead of addconf for strip example
  * pubkey: isblank is a subset of isspace
  * ctype: use non-locale-specific ctype.h
  * wg-quick: wait on process substitutions</changelog>
  <changelog author="mardnh@gmx.de" date="1598529600">- Udpate to version 1.0.20200827
  * wg-quick: android: use iproute2 to bring up interface instead
    of ndc
  * Revert "wg-quick: wait on process substitutions"</changelog>
  <changelog author="mardnh@gmx.de" date="1614081600">- Update to version 1.0.20210223
  * embeddable-wg-library: sync latest from netlink.h
  * completion: add help and syncconf completions
  * sticky-sockets: do not use SO_REUSEADDR
  * man: LOG_LEVEL variables changed name
  * ipc: do not use fscanf with trailing \n
  * ipc: read trailing responses after set operation</changelog>
  <changelog author="mardnh@gmx.de" date="1615809600">- Update to version 1.0.20210315
  * Makefile: fix version indicator
  * wireguard-tools: const correctness
  * wireguard-tools: drag in headers for prototypes
  * ipc: uniformly ignore preshared keys that are zero</changelog>
  <changelog author="mardnh@gmx.de" date="1619352000">- Update to version 1.0.20210424
  * wg-quick: kill route monitor when loop terminates</changelog>
  <changelog author="mardnh@gmx.de" date="1632657600">- Update to version 1.0.20210914
  * no relevant changes for Linux systems</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1633089600">- remove world-readable permissions from /etc/wireguard boo#1191224</changelog>
  <changelog author="jsegitz@suse.com" date="1641384000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_wg-quick@.service.patch</changelog>
  <changelog author="dheidler@suse.de" date="1645099200">- Support systemd-resolved split-dns setup
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1645531200">- Drop harden_wg-quick@.service.patch. The currrent logic for setting
  DNS is fiddling massively with the system. This is currently not
  compatible with these settings (bsc#1196096)</changelog>
  <changelog author="kukuk@suse.com" date="1660564800">- Don't hard require systemd, it's not a hard dependency</changelog>
  <changelog author="dheidler@suse.de" date="1661947200">- Support multiple DNS search domains
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1697803200">- Update WireGuard.keyring with latest copy from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="mardnh@gmx.de" date="1750248000">- Update to version 1.0.20250521
  * config: handle strdup failure.
  * wg-quick: linux: add 'dev' to 'ip link add' to avoid keyword
    conflicts.
  * ipc: add stub for allowedips flags on other platforms.
  * ipc: linux: support incremental allowed ips updates.
  * ipc: linux: enforce IFNAMSIZ limit.
  * man: set private key in PreUp rather than PostUp.
  * wg-quick: run PreUp hook after creating interface.
  * show: fix show all endpoints output.
  * show: apply const to right part of pointer.
  * wg-quick: linux: prevent traffic from momentarily leaking into
    tunnel.
  * reresolve-dns: use $EPOCHSECONDS instead of $(date +%s).
  * embeddable-wg-library: add named wg_endpoint union.
  * ipc: use more clever PnP enumerator.</changelog>
  <changelog author="mardnh@gmx.de" date="1772884800">- Update to version 1.0.20260223
  * syncconf: account for persistent keepalive removed from config
    file.
  * config: preserve const correctness.
  * wg-quick@.service: add deps on wg-quick.target.
  * wg-quick: linux: do not unnecessarily set sysctl.
  * wg-quick: use addconf instead of setconf.
  * wg-quick: linux: deal with resolvconf migration more gracefully.
  * wg-quick: pass on # comments to {Pre,Post}{Up,Down}.
  * syncconf: account for psks removed from config file.
  * wg-quick: linux: use smallest mtu, not largest.</changelog>
  <changelog author="rfrohl@suse.com" date="1781784000">- Remove selinux specific code from dns hatchet, as it allows for a
  cleaner handling in the selinux policy (bsc#1243148)
  adding Revert-dns-hatchet-apply-resolv.conf-s-selinux-conte.patch</changelog>
</package>
<package pkgid="2bbcba73b640a3d05b342cac7415117af3d5c7c8921eb8a89472ea5aeac1388e" name="wireguard-tools" arch="x86_64">
  <version epoch="0" ver="1.0.20260223" rel="51.1"/>
  <changelog author="mardnh@gmx.de" date="1584792000">- Update to version 1.0.20200319
  * netlink: initialize mostly unused field
  * curve25519: squelch warnings on clang
  * man: fix grammar in wg(8) and wg-quick(8)
  * man: backlink wg-quick(8) in wg(8)
  * man: add a warning to the SaveConfig description
  * wincompat: use string_list instead of inflatable_buffer</changelog>
  <changelog author="mardnh@gmx.de" date="1589198400">- Update to version 1.0.20200510
  * ipc: add support for openbsd kernel implementation
  * ipc: cleanup openbsd support
  * wg-quick: add support for openbsd kernel implementation
  * wg-quick: cleanup openbsd support
  * wg-quick: support dns search domains
  * Makefile: simplify silent cleaning
  * git: add gitattributes so tarball doesn't have gitignore files
  * terminal: specialize color_mode to stdout only
  * highlighter: insist on 256-bit keys, not 257-bit or 258-bit
  * wg-quick: android: support application whitelist
  * systemd: add wg-quick.target
- Remove patch (not longer needed):
  * wireguard-fix-systemd-service.patch
- Remove source file (fixed upstream)
  * wireguard.target
    This functionality is now provided by wg-quick.target</changelog>
  <changelog author="mardnh@gmx.de" date="1589457600">- Update to version 1.0.20200513
  * Makefile: remember to install all systemd units
  * ipc: openbsd: switch to array ioctl interface</changelog>
  <changelog author="mardnh@gmx.de" date="1598097600">- Update to version 1.0.20200820
  * ipc: split into separate files per-platform
  * wincompat: fold random into genkey
  * systemd: add reload target to systemd unit
  * man: wg-quick: use syncconf instead of addconf for strip example
  * pubkey: isblank is a subset of isspace
  * ctype: use non-locale-specific ctype.h
  * wg-quick: wait on process substitutions</changelog>
  <changelog author="mardnh@gmx.de" date="1598529600">- Udpate to version 1.0.20200827
  * wg-quick: android: use iproute2 to bring up interface instead
    of ndc
  * Revert "wg-quick: wait on process substitutions"</changelog>
  <changelog author="mardnh@gmx.de" date="1614081600">- Update to version 1.0.20210223
  * embeddable-wg-library: sync latest from netlink.h
  * completion: add help and syncconf completions
  * sticky-sockets: do not use SO_REUSEADDR
  * man: LOG_LEVEL variables changed name
  * ipc: do not use fscanf with trailing \n
  * ipc: read trailing responses after set operation</changelog>
  <changelog author="mardnh@gmx.de" date="1615809600">- Update to version 1.0.20210315
  * Makefile: fix version indicator
  * wireguard-tools: const correctness
  * wireguard-tools: drag in headers for prototypes
  * ipc: uniformly ignore preshared keys that are zero</changelog>
  <changelog author="mardnh@gmx.de" date="1619352000">- Update to version 1.0.20210424
  * wg-quick: kill route monitor when loop terminates</changelog>
  <changelog author="mardnh@gmx.de" date="1632657600">- Update to version 1.0.20210914
  * no relevant changes for Linux systems</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1633089600">- remove world-readable permissions from /etc/wireguard boo#1191224</changelog>
  <changelog author="jsegitz@suse.com" date="1641384000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_wg-quick@.service.patch</changelog>
  <changelog author="dheidler@suse.de" date="1645099200">- Support systemd-resolved split-dns setup
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1645531200">- Drop harden_wg-quick@.service.patch. The currrent logic for setting
  DNS is fiddling massively with the system. This is currently not
  compatible with these settings (bsc#1196096)</changelog>
  <changelog author="kukuk@suse.com" date="1660564800">- Don't hard require systemd, it's not a hard dependency</changelog>
  <changelog author="dheidler@suse.de" date="1661947200">- Support multiple DNS search domains
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1697803200">- Update WireGuard.keyring with latest copy from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="mardnh@gmx.de" date="1750248000">- Update to version 1.0.20250521
  * config: handle strdup failure.
  * wg-quick: linux: add 'dev' to 'ip link add' to avoid keyword
    conflicts.
  * ipc: add stub for allowedips flags on other platforms.
  * ipc: linux: support incremental allowed ips updates.
  * ipc: linux: enforce IFNAMSIZ limit.
  * man: set private key in PreUp rather than PostUp.
  * wg-quick: run PreUp hook after creating interface.
  * show: fix show all endpoints output.
  * show: apply const to right part of pointer.
  * wg-quick: linux: prevent traffic from momentarily leaking into
    tunnel.
  * reresolve-dns: use $EPOCHSECONDS instead of $(date +%s).
  * embeddable-wg-library: add named wg_endpoint union.
  * ipc: use more clever PnP enumerator.</changelog>
  <changelog author="mardnh@gmx.de" date="1772884800">- Update to version 1.0.20260223
  * syncconf: account for persistent keepalive removed from config
    file.
  * config: preserve const correctness.
  * wg-quick@.service: add deps on wg-quick.target.
  * wg-quick: linux: do not unnecessarily set sysctl.
  * wg-quick: use addconf instead of setconf.
  * wg-quick: linux: deal with resolvconf migration more gracefully.
  * wg-quick: pass on # comments to {Pre,Post}{Up,Down}.
  * syncconf: account for psks removed from config file.
  * wg-quick: linux: use smallest mtu, not largest.</changelog>
  <changelog author="rfrohl@suse.com" date="1781784000">- Remove selinux specific code from dns hatchet, as it allows for a
  cleaner handling in the selinux policy (bsc#1243148)
  adding Revert-dns-hatchet-apply-resolv.conf-s-selinux-conte.patch</changelog>
</package>
<package pkgid="00547d82fa23759697dbdc6a8d037112aa03fe0d1d1927d8918f6effbc21f554" name="wireguard-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.20260223" rel="51.1"/>
  <changelog author="mardnh@gmx.de" date="1584792000">- Update to version 1.0.20200319
  * netlink: initialize mostly unused field
  * curve25519: squelch warnings on clang
  * man: fix grammar in wg(8) and wg-quick(8)
  * man: backlink wg-quick(8) in wg(8)
  * man: add a warning to the SaveConfig description
  * wincompat: use string_list instead of inflatable_buffer</changelog>
  <changelog author="mardnh@gmx.de" date="1589198400">- Update to version 1.0.20200510
  * ipc: add support for openbsd kernel implementation
  * ipc: cleanup openbsd support
  * wg-quick: add support for openbsd kernel implementation
  * wg-quick: cleanup openbsd support
  * wg-quick: support dns search domains
  * Makefile: simplify silent cleaning
  * git: add gitattributes so tarball doesn't have gitignore files
  * terminal: specialize color_mode to stdout only
  * highlighter: insist on 256-bit keys, not 257-bit or 258-bit
  * wg-quick: android: support application whitelist
  * systemd: add wg-quick.target
- Remove patch (not longer needed):
  * wireguard-fix-systemd-service.patch
- Remove source file (fixed upstream)
  * wireguard.target
    This functionality is now provided by wg-quick.target</changelog>
  <changelog author="mardnh@gmx.de" date="1589457600">- Update to version 1.0.20200513
  * Makefile: remember to install all systemd units
  * ipc: openbsd: switch to array ioctl interface</changelog>
  <changelog author="mardnh@gmx.de" date="1598097600">- Update to version 1.0.20200820
  * ipc: split into separate files per-platform
  * wincompat: fold random into genkey
  * systemd: add reload target to systemd unit
  * man: wg-quick: use syncconf instead of addconf for strip example
  * pubkey: isblank is a subset of isspace
  * ctype: use non-locale-specific ctype.h
  * wg-quick: wait on process substitutions</changelog>
  <changelog author="mardnh@gmx.de" date="1598529600">- Udpate to version 1.0.20200827
  * wg-quick: android: use iproute2 to bring up interface instead
    of ndc
  * Revert "wg-quick: wait on process substitutions"</changelog>
  <changelog author="mardnh@gmx.de" date="1614081600">- Update to version 1.0.20210223
  * embeddable-wg-library: sync latest from netlink.h
  * completion: add help and syncconf completions
  * sticky-sockets: do not use SO_REUSEADDR
  * man: LOG_LEVEL variables changed name
  * ipc: do not use fscanf with trailing \n
  * ipc: read trailing responses after set operation</changelog>
  <changelog author="mardnh@gmx.de" date="1615809600">- Update to version 1.0.20210315
  * Makefile: fix version indicator
  * wireguard-tools: const correctness
  * wireguard-tools: drag in headers for prototypes
  * ipc: uniformly ignore preshared keys that are zero</changelog>
  <changelog author="mardnh@gmx.de" date="1619352000">- Update to version 1.0.20210424
  * wg-quick: kill route monitor when loop terminates</changelog>
  <changelog author="mardnh@gmx.de" date="1632657600">- Update to version 1.0.20210914
  * no relevant changes for Linux systems</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1633089600">- remove world-readable permissions from /etc/wireguard boo#1191224</changelog>
  <changelog author="jsegitz@suse.com" date="1641384000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_wg-quick@.service.patch</changelog>
  <changelog author="dheidler@suse.de" date="1645099200">- Support systemd-resolved split-dns setup
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1645531200">- Drop harden_wg-quick@.service.patch. The currrent logic for setting
  DNS is fiddling massively with the system. This is currently not
  compatible with these settings (bsc#1196096)</changelog>
  <changelog author="kukuk@suse.com" date="1660564800">- Don't hard require systemd, it's not a hard dependency</changelog>
  <changelog author="dheidler@suse.de" date="1661947200">- Support multiple DNS search domains
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1697803200">- Update WireGuard.keyring with latest copy from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="mardnh@gmx.de" date="1750248000">- Update to version 1.0.20250521
  * config: handle strdup failure.
  * wg-quick: linux: add 'dev' to 'ip link add' to avoid keyword
    conflicts.
  * ipc: add stub for allowedips flags on other platforms.
  * ipc: linux: support incremental allowed ips updates.
  * ipc: linux: enforce IFNAMSIZ limit.
  * man: set private key in PreUp rather than PostUp.
  * wg-quick: run PreUp hook after creating interface.
  * show: fix show all endpoints output.
  * show: apply const to right part of pointer.
  * wg-quick: linux: prevent traffic from momentarily leaking into
    tunnel.
  * reresolve-dns: use $EPOCHSECONDS instead of $(date +%s).
  * embeddable-wg-library: add named wg_endpoint union.
  * ipc: use more clever PnP enumerator.</changelog>
  <changelog author="mardnh@gmx.de" date="1772884800">- Update to version 1.0.20260223
  * syncconf: account for persistent keepalive removed from config
    file.
  * config: preserve const correctness.
  * wg-quick@.service: add deps on wg-quick.target.
  * wg-quick: linux: do not unnecessarily set sysctl.
  * wg-quick: use addconf instead of setconf.
  * wg-quick: linux: deal with resolvconf migration more gracefully.
  * wg-quick: pass on # comments to {Pre,Post}{Up,Down}.
  * syncconf: account for psks removed from config file.
  * wg-quick: linux: use smallest mtu, not largest.</changelog>
  <changelog author="rfrohl@suse.com" date="1781784000">- Remove selinux specific code from dns hatchet, as it allows for a
  cleaner handling in the selinux policy (bsc#1243148)
  adding Revert-dns-hatchet-apply-resolv.conf-s-selinux-conte.patch</changelog>
</package>
<package pkgid="9f965ba2d59effba4db3bd6fd8793ea5b95f6a3c4ae9ae1d0d0adfb1321560b6" name="wireguard-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.20260223" rel="51.1"/>
  <changelog author="mardnh@gmx.de" date="1584792000">- Update to version 1.0.20200319
  * netlink: initialize mostly unused field
  * curve25519: squelch warnings on clang
  * man: fix grammar in wg(8) and wg-quick(8)
  * man: backlink wg-quick(8) in wg(8)
  * man: add a warning to the SaveConfig description
  * wincompat: use string_list instead of inflatable_buffer</changelog>
  <changelog author="mardnh@gmx.de" date="1589198400">- Update to version 1.0.20200510
  * ipc: add support for openbsd kernel implementation
  * ipc: cleanup openbsd support
  * wg-quick: add support for openbsd kernel implementation
  * wg-quick: cleanup openbsd support
  * wg-quick: support dns search domains
  * Makefile: simplify silent cleaning
  * git: add gitattributes so tarball doesn't have gitignore files
  * terminal: specialize color_mode to stdout only
  * highlighter: insist on 256-bit keys, not 257-bit or 258-bit
  * wg-quick: android: support application whitelist
  * systemd: add wg-quick.target
- Remove patch (not longer needed):
  * wireguard-fix-systemd-service.patch
- Remove source file (fixed upstream)
  * wireguard.target
    This functionality is now provided by wg-quick.target</changelog>
  <changelog author="mardnh@gmx.de" date="1589457600">- Update to version 1.0.20200513
  * Makefile: remember to install all systemd units
  * ipc: openbsd: switch to array ioctl interface</changelog>
  <changelog author="mardnh@gmx.de" date="1598097600">- Update to version 1.0.20200820
  * ipc: split into separate files per-platform
  * wincompat: fold random into genkey
  * systemd: add reload target to systemd unit
  * man: wg-quick: use syncconf instead of addconf for strip example
  * pubkey: isblank is a subset of isspace
  * ctype: use non-locale-specific ctype.h
  * wg-quick: wait on process substitutions</changelog>
  <changelog author="mardnh@gmx.de" date="1598529600">- Udpate to version 1.0.20200827
  * wg-quick: android: use iproute2 to bring up interface instead
    of ndc
  * Revert "wg-quick: wait on process substitutions"</changelog>
  <changelog author="mardnh@gmx.de" date="1614081600">- Update to version 1.0.20210223
  * embeddable-wg-library: sync latest from netlink.h
  * completion: add help and syncconf completions
  * sticky-sockets: do not use SO_REUSEADDR
  * man: LOG_LEVEL variables changed name
  * ipc: do not use fscanf with trailing \n
  * ipc: read trailing responses after set operation</changelog>
  <changelog author="mardnh@gmx.de" date="1615809600">- Update to version 1.0.20210315
  * Makefile: fix version indicator
  * wireguard-tools: const correctness
  * wireguard-tools: drag in headers for prototypes
  * ipc: uniformly ignore preshared keys that are zero</changelog>
  <changelog author="mardnh@gmx.de" date="1619352000">- Update to version 1.0.20210424
  * wg-quick: kill route monitor when loop terminates</changelog>
  <changelog author="mardnh@gmx.de" date="1632657600">- Update to version 1.0.20210914
  * no relevant changes for Linux systems</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1633089600">- remove world-readable permissions from /etc/wireguard boo#1191224</changelog>
  <changelog author="jsegitz@suse.com" date="1641384000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_wg-quick@.service.patch</changelog>
  <changelog author="dheidler@suse.de" date="1645099200">- Support systemd-resolved split-dns setup
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1645531200">- Drop harden_wg-quick@.service.patch. The currrent logic for setting
  DNS is fiddling massively with the system. This is currently not
  compatible with these settings (bsc#1196096)</changelog>
  <changelog author="kukuk@suse.com" date="1660564800">- Don't hard require systemd, it's not a hard dependency</changelog>
  <changelog author="dheidler@suse.de" date="1661947200">- Support multiple DNS search domains
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1697803200">- Update WireGuard.keyring with latest copy from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="mardnh@gmx.de" date="1750248000">- Update to version 1.0.20250521
  * config: handle strdup failure.
  * wg-quick: linux: add 'dev' to 'ip link add' to avoid keyword
    conflicts.
  * ipc: add stub for allowedips flags on other platforms.
  * ipc: linux: support incremental allowed ips updates.
  * ipc: linux: enforce IFNAMSIZ limit.
  * man: set private key in PreUp rather than PostUp.
  * wg-quick: run PreUp hook after creating interface.
  * show: fix show all endpoints output.
  * show: apply const to right part of pointer.
  * wg-quick: linux: prevent traffic from momentarily leaking into
    tunnel.
  * reresolve-dns: use $EPOCHSECONDS instead of $(date +%s).
  * embeddable-wg-library: add named wg_endpoint union.
  * ipc: use more clever PnP enumerator.</changelog>
  <changelog author="mardnh@gmx.de" date="1772884800">- Update to version 1.0.20260223
  * syncconf: account for persistent keepalive removed from config
    file.
  * config: preserve const correctness.
  * wg-quick@.service: add deps on wg-quick.target.
  * wg-quick: linux: do not unnecessarily set sysctl.
  * wg-quick: use addconf instead of setconf.
  * wg-quick: linux: deal with resolvconf migration more gracefully.
  * wg-quick: pass on # comments to {Pre,Post}{Up,Down}.
  * syncconf: account for psks removed from config file.
  * wg-quick: linux: use smallest mtu, not largest.</changelog>
  <changelog author="rfrohl@suse.com" date="1781784000">- Remove selinux specific code from dns hatchet, as it allows for a
  cleaner handling in the selinux policy (bsc#1243148)
  adding Revert-dns-hatchet-apply-resolv.conf-s-selinux-conte.patch</changelog>
</package>
</otherdata>