<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="38">
<package pkgid="7f4adaa3569673bd5c0f1e4e24c011954ffbe90802e69b9f422906d4d276c8ccffc076c20ee50ee7c081b807c46598cd504887fc76622da170ad4e8a0e232748" name="NetworkManager-wireguard" arch="aarch64">
  <version epoch="0" ver="0.0+git.1539544477.a52cc41" rel="1.19"/>
  <changelog author="Duncan Mac-Vicar P. &lt;dmacvicar@suse.de&gt;" date="1541678400">- Initial package</changelog>
</package>
<package pkgid="36b7120942da373fd0b51bf2d6f4e5401bb73b4f5deea92189c27c443de329f33c002b3dd1241c33a62c1ca4c7261ec638dc6bc6b2ffd497d4603a31755f9b2b" name="NetworkManager-wireguard" arch="armv7hl">
  <version epoch="0" ver="0.0+git.1539544477.a52cc41" rel="1.19"/>
  <changelog author="Duncan Mac-Vicar P. &lt;dmacvicar@suse.de&gt;" date="1541678400">- Initial package</changelog>
</package>
<package pkgid="0eb5deecac6916f272929c322b7fdb3cb5902079cd4cb293a9e2bab39aa3202266b0f9d2eb956a3f353129df2d3a33f1bb3cb5a39f925f2e4c04f15192169bd3" name="NetworkManager-wireguard" arch="src">
  <version epoch="0" ver="0.0+git.1539544477.a52cc41" rel="1.19"/>
  <changelog author="Duncan Mac-Vicar P. &lt;dmacvicar@suse.de&gt;" date="1541678400">- Initial package</changelog>
</package>
<package pkgid="a6301480c80487cd1c5f8b7fd44d04c02f48899a43fbef81cafe8dcba357dd7026572b64ab152dca65c82dddb8cf3e999adb2eca7ce769f61dc7e9dfbd942c91" name="NetworkManager-wireguard-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.0+git.1539544477.a52cc41" rel="1.19"/>
  <changelog author="Duncan Mac-Vicar P. &lt;dmacvicar@suse.de&gt;" date="1541678400">- Initial package</changelog>
</package>
<package pkgid="a28af7006b18871fc3d3a1173419c30b02257689f3366f908005653f35b654211ae184c5f3145e56c7d82f23619bdca8a783d5030ba1b3b08d9ff282d42ff93e" name="NetworkManager-wireguard-debuginfo" arch="armv7hl">
  <version epoch="0" ver="0.0+git.1539544477.a52cc41" rel="1.19"/>
  <changelog author="Duncan Mac-Vicar P. &lt;dmacvicar@suse.de&gt;" date="1541678400">- Initial package</changelog>
</package>
<package pkgid="09cba360368a280d648c15be7f41b7de93067bd06a73a17239b03a69f84d971553ce3c860fca138522715f6f40f9d3f6d6361bdfb130d222fbc40ffb8c92e8f5" name="NetworkManager-wireguard-debugsource" arch="aarch64">
  <version epoch="0" ver="0.0+git.1539544477.a52cc41" rel="1.19"/>
  <changelog author="Duncan Mac-Vicar P. &lt;dmacvicar@suse.de&gt;" date="1541678400">- Initial package</changelog>
</package>
<package pkgid="5dfb010722c07b554351028a65ac81ea402ebc12edb76078725a9ef303344f1db4bdd65a3bb0c37c67186139aceaf152c78dc9d60eafbf029891e4c4f7676b37" name="NetworkManager-wireguard-debugsource" arch="armv7hl">
  <version epoch="0" ver="0.0+git.1539544477.a52cc41" rel="1.19"/>
  <changelog author="Duncan Mac-Vicar P. &lt;dmacvicar@suse.de&gt;" date="1541678400">- Initial package</changelog>
</package>
<package pkgid="ebfb32d7dfd56b02eb7417f839f262bf96a1209fc29dd9bcdcdb912e598e76d5777e01f422a5453125d93a57bedfff6c99fc4783c21a35cec0674b1bbde69d36" name="NetworkManager-wireguard-gnome" arch="aarch64">
  <version epoch="0" ver="0.0+git.1539544477.a52cc41" rel="1.19"/>
  <changelog author="Duncan Mac-Vicar P. &lt;dmacvicar@suse.de&gt;" date="1541678400">- Initial package</changelog>
</package>
<package pkgid="ac0f111fe33dccbc82997760f94951999d1da631b57dc6b28544b073cf02a3c4d7334449723a374acee11bfb8cb6509e4922ccee118ea231dbf1ec256540c658" name="NetworkManager-wireguard-gnome" arch="armv7hl">
  <version epoch="0" ver="0.0+git.1539544477.a52cc41" rel="1.19"/>
  <changelog author="Duncan Mac-Vicar P. &lt;dmacvicar@suse.de&gt;" date="1541678400">- Initial package</changelog>
</package>
<package pkgid="58bd3f3d5bbf6e9da16b6167c4b6b6cdfb84b02cb0a167365e11d750c0d590c9d8298685a5cd17f89cb0d7a009188e6d8b648e243aec78848d74b8c37ed246c9" name="NetworkManager-wireguard-gnome-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.0+git.1539544477.a52cc41" rel="1.19"/>
  <changelog author="Duncan Mac-Vicar P. &lt;dmacvicar@suse.de&gt;" date="1541678400">- Initial package</changelog>
</package>
<package pkgid="788da855c5546b4be85eb0e25b1e85ff7550c7641da6b1f9a4b60a37dede7438176cb8b434852afab240040d3de99af503359376ed2729e68872f09389bd2f0e" name="NetworkManager-wireguard-gnome-debuginfo" arch="armv7hl">
  <version epoch="0" ver="0.0+git.1539544477.a52cc41" rel="1.19"/>
  <changelog author="Duncan Mac-Vicar P. &lt;dmacvicar@suse.de&gt;" date="1541678400">- Initial package</changelog>
</package>
<package pkgid="7886f0a2a5839a1b25f55f85c5421261bc507b1ba369687906f4874b3b1a05f0de9bee1f10e2b851b3ffe312801214adf3091a9a06951733f4b9ab5354f6fcca" name="wg-info" arch="noarch">
  <version epoch="0" ver="20240702.9b5c479" rel="5.11"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1687521600">- Initial Packaging</changelog>
  <changelog author="dheidler@suse.de" date="1719921600">- Update to version 20240702.9b5c479:
  * Fix regex escaping</changelog>
</package>
<package pkgid="e8297da7b44c1b5540d8806af2055f2d0620f731471f86c75b82a12937b8db48627b23bd4e966266d4afcffe483bdbfb7c92b0c5bc4dfef83b6b1391f0a620d3" name="wg-info" arch="src">
  <version epoch="0" ver="20240702.9b5c479" rel="5.11"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1687521600">- Initial Packaging</changelog>
  <changelog author="dheidler@suse.de" date="1719921600">- Update to version 20240702.9b5c479:
  * Fix regex escaping</changelog>
</package>
<package pkgid="b0baf31539cd50734accddbe9ac2fccecdcb8883345a709c0a1667808ab70c02e662dd29e577ae9f530b68d6dc09d0c4d52942896ecb51d0c4ecb1cc41917bd2" name="wireguard" arch="aarch64">
  <version epoch="0" ver="1.0.20200330" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="9e4b846659e17f68773d05e516975585662d836e1db09e4e1b35f7bc542d2840ddb8b308022f27510e530ab55d05a10951dbf3ba3c2b081a8b650a711eff3e33" name="wireguard" arch="armv7hl">
  <version epoch="0" ver="1.0.20200330" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="aa34c993196fc71a02ecbbdaae90ff3f211608cfe22b1d27eb2ade287c905328823d1ad4d2cf4bb7a6cdcac05a71e539b2be209b8e44d5fd4fea6b274f2980f5" name="wireguard" arch="src">
  <version epoch="0" ver="1.0.20200330" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="013f678dc80476ba8802568876d33c66b90b539e124012bd5547d57acc7b6d991552f537f742a10324f796fb9158b85e1a874e7c5dfe1f1c02864bbd93bd3625" name="wireguard-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.20200330" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="4c0fa8ccea28d5354475bef637cc271897ae6dffdd95d7104bbe689e948d0a1782ad6de316a0a46962df8f4f7a45a64de4092fb673b6af24372f2b6b8e79122d" name="wireguard-debugsource" arch="armv7hl">
  <version epoch="0" ver="1.0.20200330" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="a283f0940767ed52609335fd615b5373fec405b8bdc99af35d3b1d3a94fd004b60eccb26c00eba6ec132af812a67d1aa841c88fb12c5828c6e2b07e1429a4c66" name="wireguard-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="1.0.20200330_k5.5.13_1" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="07881d419d325de5f467799cecebf676441cba12e07aecf79b16ab4bc6a20c37add7f57158b2b1af8c7ca149adf2856e0bf56ae2654becd93fce3acb09a16e1a" name="wireguard-kmp-64kb-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.20200330_k5.5.13_1" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="489e3b864c920e1854c04398d0eb58b8e978b4677e4e9290566d96410857d95974afa8f4101a5e9cb419f8681de0c0981e52e41c0be2f2d9db3ce9f80e687838" name="wireguard-kmp-default" arch="aarch64">
  <version epoch="0" ver="1.0.20200330_k5.5.13_1" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="78be1678eb3bf76c594c75992aac87e75871b732e8bd2c83d4cc34d4b398357114bdf9d98f7de665e82aed5d4d16d3ef5c57bbed5e86efd7a449851d54243729" name="wireguard-kmp-default" arch="armv7hl">
  <version epoch="0" ver="1.0.20200330_k5.5.13_1" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="84dc0d8dcc105e8d4bc231766400fcb050ae34b8dd728cfbbdc28de1e638c2cf3d0eca934e894974d640b3b454d12e586cef82faedd2a48e2ea74fe941b98679" name="wireguard-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.20200330_k5.5.13_1" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="e7787aab7a5d8ec4b1eb88a7460a6ccba8b86c9bf6ce899bd75dce2fbae6d2ea1347316c222bb235cbda062ec12d53bcdb8158260872ee7b0d3c75cd7b83c19f" name="wireguard-kmp-default-debuginfo" arch="armv7hl">
  <version epoch="0" ver="1.0.20200330_k5.5.13_1" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="bbadcd7971fa2e2b76a68122d16f2344d5ad2187fbdc92d97f588baf6cc23225aa8e27f47905d43338e8e1e0e407131a40c3d0b01f48d1e1e4336791fe808b8a" name="wireguard-kmp-lpae" arch="armv7hl">
  <version epoch="0" ver="1.0.20200330_k5.5.13_1" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="1e23529d9a12f1324a8086d0a3c9eff9917c541748bb7c9c64bf744391e86b4e330d2e6bead4248f6a64592d8c53b4d593d90c59317b7f871d94b4b047f9265a" name="wireguard-kmp-lpae-debuginfo" arch="armv7hl">
  <version epoch="0" ver="1.0.20200330_k5.5.13_1" rel="38.1"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1567944000">- Update to version 0.0.20190905
  * Lots of compat work.
  * netlink: enforce that unused bits of flags are zero
  * noise: immediately rekey all peers after changing device
    private key
  * netlink: skip peers with invalid keys
  * wg-quick: linux: don't fail down when using systemd-resolved
- Update patch:
  * wireguard-remove-depmod.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568635200">- Update to version 0.0.20190913
  * compat: support newer PaX
  * compat: don't rewrite siphash when it's from compat
  * Kbuild: squelch warnings for stack limit on broken kernel configs
  * compat: support rhel/centos 7.7</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570881600">- Update to version 0.0.20191012
  * netns: add test for failing 5.3 FIB changes
  * noise: recompare stamps after taking write lock
  * netlink: allow preventing creation of new peers when updating</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264000">- Don't rename gpg signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572264001">- Drop debian packaging related files:
  * debian.tar.xz
  * wireguard.dsc</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1574856000">- Update to version 0.0.20191127
  * messages: recalculate rekey max based on a one minute flood
  * allowedips: safely dereference rcu roots
  * socket: remove redundant check of new4
  * allowedips: avoid double lock in selftest error case
  * wg-quick: linux: only touch net.ipv4 for v4
  * wg-quick: linux: filter bogus injected packets and don't
    disable rpfilter
  * reresolve-dns: remove invalid anchors on regex match
  * tools: add syncconf command</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575547200">- Update to version 0.0.20191205
  * wg-quick: linux: suppress error when finding unused table
  * wg-quick: linux: ensure postdown hooks execute
  * wg-quick: linux: have remove_iptables return true
  * wg-quick: linux: iptables-* -w is not widely supported
  * ipc: make sure userspace communication frees wgdevice</changelog>
  <changelog author="chris@computersalat.de" date="1576065600">- Update to 0.0.20191206
  * chacha20poly1305: double check the sgmiter logic with test
  * wg-quick: linux: ignore save warnings for iptables-nft
  * wg-quick: linux: suppress more warnings on weird kernels
  * wg-quick: linux: some iptables don't like empty lines
  * crypto: use new assembler macros for 5.5
  * chacha20poly1305: port to sgmitter for 5.5
  * netlink: prepare for removal of genl_family_attrbuf in 5.5
- fix changelog for 0.0.20191205</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576152000">- Update to version 0.0.20191212
  * socket: convert to ipv6_dst_lookup_flow for 5.5
  * wg-quick: linux: add support for nft and prefer it
  * wg-quick: linux: support older nft(8)
  * global: fix up spelling
  * main: remove unused include &lt;linux/version.h&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576756800">- Update to version 0.0.20191219
  * wg-quick: linux: try both iptables(8) and nft(8) on teardown
  * wg-quick: linux: use already configured addresses instead of
    in-memory
  * compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
  * tools: adjust wg.8 syntax for consistency in COMMANDS section</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521600">- Drop not longer needed patches:
  * wireguard-remove-depmod.diff
  * wireguard-fix-systemd-service.patch
- Mention wireguard-kmp-preamble in the sepc-file as source
- Package split since upstream reorganized code repositories.
  * wireguard-tools is now developed in a separate package</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579521601">- Update to version 0.0.20200105
  * socket: mark skbs as not on list when receiving via gro</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579608000">- Update to version 0.0.20200121
  * Makefile: strip prefixed v from version.h
  * device: skb_list_walk_safe moved upstream
  * curve25519: x86_64: replace with formally verified
    implementation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580212800">- Update to version 0.0.20200128
  * qemu: bump kernel
  * compat: refuse to build on &gt;= 5.6
  * compat: account for frankenzinc being in 5.5</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580904000">- Update to version 0.0.20200205
  * allowedips: remove previously added list item when OOM fail
  * noise: reject peers with low order public keys
  * netns: ensure non-addition of peers with failed precomputation
  * netns: tie socket waiting to target pid</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581681600">- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582718400">- Update to version 0.0.20200215
  * send: cleanup skb padding calculation
  * socket: remove useless synchronize_net</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1583409600">- Fix build on openSUSE 15.2
  + wireguard-fix-leap152.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 0.0.20200318
  * compat: RHEL 7 backported skb_ensure_writable()
  * compat: RHEL 8.2 backported ipv6_dst_lookup_flow
  * curve25519-x86_64: avoid use of r12
  * wireguard: queueing: account for skb-&gt;protocol==0
  * receive: remove dead code from default packet type case
  * noise: error out precomputed DH during handshake rather than
    config
  * send: use normaler alignment formula from upstream</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to version 1.0.20200330
  * queueing: backport skb_reset_redirect change from 5.6</changelog>
</package>
<package pkgid="2cac75098f6465f09484c326f3b43111ac6854b7e01b85426c5fec5c47c3466cd94d2ac5c9754652ec53dc5301dc0f7814e92f4aabe857b2d0ec6e0e5f0ee785" name="wireguard-tools" arch="aarch64">
  <version epoch="0" ver="1.0.20260223" rel="53.2"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1641384000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_wg-quick@.service.patch</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1645099200">- Support systemd-resolved split-dns setup
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1645531200">- Drop harden_wg-quick@.service.patch. The currrent logic for setting
  DNS is fiddling massively with the system. This is currently not
  compatible with these settings (bsc#1196096)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1660564800">- Don't hard require systemd, it's not a hard dependency</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1661947200">- Support multiple DNS search domains
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1697803200">- Update WireGuard.keyring with latest copy from upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1750248000">- Update to version 1.0.20250521
  * config: handle strdup failure.
  * wg-quick: linux: add 'dev' to 'ip link add' to avoid keyword
    conflicts.
  * ipc: add stub for allowedips flags on other platforms.
  * ipc: linux: support incremental allowed ips updates.
  * ipc: linux: enforce IFNAMSIZ limit.
  * man: set private key in PreUp rather than PostUp.
  * wg-quick: run PreUp hook after creating interface.
  * show: fix show all endpoints output.
  * show: apply const to right part of pointer.
  * wg-quick: linux: prevent traffic from momentarily leaking into
    tunnel.
  * reresolve-dns: use $EPOCHSECONDS instead of $(date +%s).
  * embeddable-wg-library: add named wg_endpoint union.
  * ipc: use more clever PnP enumerator.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1772884800">- Update to version 1.0.20260223
  * syncconf: account for persistent keepalive removed from config
    file.
  * config: preserve const correctness.
  * wg-quick@.service: add deps on wg-quick.target.
  * wg-quick: linux: do not unnecessarily set sysctl.
  * wg-quick: use addconf instead of setconf.
  * wg-quick: linux: deal with resolvconf migration more gracefully.
  * wg-quick: pass on # comments to {Pre,Post}{Up,Down}.
  * syncconf: account for psks removed from config file.
  * wg-quick: linux: use smallest mtu, not largest.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1781784000">- Remove selinux specific code from dns hatchet, as it allows for a
  cleaner handling in the selinux policy (bsc#1243148)
  adding Revert-dns-hatchet-apply-resolv.conf-s-selinux-conte.patch</changelog>
</package>
<package pkgid="fe69b659f33baa226d753b41416c85ac239a45c0d0a99b1a6f14ea084cd26ea4c03e13342eb2988f0b2a4ad16453355bcb0a5b86ac4d142d1c65b4a5e6980e4d" name="wireguard-tools" arch="armv7hl">
  <version epoch="0" ver="1.0.20260223" rel="53.2"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1641384000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_wg-quick@.service.patch</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1645099200">- Support systemd-resolved split-dns setup
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1645531200">- Drop harden_wg-quick@.service.patch. The currrent logic for setting
  DNS is fiddling massively with the system. This is currently not
  compatible with these settings (bsc#1196096)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1660564800">- Don't hard require systemd, it's not a hard dependency</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1661947200">- Support multiple DNS search domains
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1697803200">- Update WireGuard.keyring with latest copy from upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1750248000">- Update to version 1.0.20250521
  * config: handle strdup failure.
  * wg-quick: linux: add 'dev' to 'ip link add' to avoid keyword
    conflicts.
  * ipc: add stub for allowedips flags on other platforms.
  * ipc: linux: support incremental allowed ips updates.
  * ipc: linux: enforce IFNAMSIZ limit.
  * man: set private key in PreUp rather than PostUp.
  * wg-quick: run PreUp hook after creating interface.
  * show: fix show all endpoints output.
  * show: apply const to right part of pointer.
  * wg-quick: linux: prevent traffic from momentarily leaking into
    tunnel.
  * reresolve-dns: use $EPOCHSECONDS instead of $(date +%s).
  * embeddable-wg-library: add named wg_endpoint union.
  * ipc: use more clever PnP enumerator.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1772884800">- Update to version 1.0.20260223
  * syncconf: account for persistent keepalive removed from config
    file.
  * config: preserve const correctness.
  * wg-quick@.service: add deps on wg-quick.target.
  * wg-quick: linux: do not unnecessarily set sysctl.
  * wg-quick: use addconf instead of setconf.
  * wg-quick: linux: deal with resolvconf migration more gracefully.
  * wg-quick: pass on # comments to {Pre,Post}{Up,Down}.
  * syncconf: account for psks removed from config file.
  * wg-quick: linux: use smallest mtu, not largest.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1781784000">- Remove selinux specific code from dns hatchet, as it allows for a
  cleaner handling in the selinux policy (bsc#1243148)
  adding Revert-dns-hatchet-apply-resolv.conf-s-selinux-conte.patch</changelog>
</package>
<package pkgid="342670f541bed6dbecce95aa03a1e42d5f561e26fe5bcb1a18320215e07a4c34fedfd4eae097b3093f4c25da5851cb2a8848402b25f25dde18a23ed75450c304" name="wireguard-tools" arch="src">
  <version epoch="0" ver="1.0.20260223" rel="53.2"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1584792000">- Update to version 1.0.20200319
  * netlink: initialize mostly unused field
  * curve25519: squelch warnings on clang
  * man: fix grammar in wg(8) and wg-quick(8)
  * man: backlink wg-quick(8) in wg(8)
  * man: add a warning to the SaveConfig description
  * wincompat: use string_list instead of inflatable_buffer</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1589198400">- Update to version 1.0.20200510
  * ipc: add support for openbsd kernel implementation
  * ipc: cleanup openbsd support
  * wg-quick: add support for openbsd kernel implementation
  * wg-quick: cleanup openbsd support
  * wg-quick: support dns search domains
  * Makefile: simplify silent cleaning
  * git: add gitattributes so tarball doesn't have gitignore files
  * terminal: specialize color_mode to stdout only
  * highlighter: insist on 256-bit keys, not 257-bit or 258-bit
  * wg-quick: android: support application whitelist
  * systemd: add wg-quick.target
- Remove patch (not longer needed):
  * wireguard-fix-systemd-service.patch
- Remove source file (fixed upstream)
  * wireguard.target
    This functionality is now provided by wg-quick.target</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1589457600">- Update to version 1.0.20200513
  * Makefile: remember to install all systemd units
  * ipc: openbsd: switch to array ioctl interface</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1598097600">- Update to version 1.0.20200820
  * ipc: split into separate files per-platform
  * wincompat: fold random into genkey
  * systemd: add reload target to systemd unit
  * man: wg-quick: use syncconf instead of addconf for strip example
  * pubkey: isblank is a subset of isspace
  * ctype: use non-locale-specific ctype.h
  * wg-quick: wait on process substitutions</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1598529600">- Udpate to version 1.0.20200827
  * wg-quick: android: use iproute2 to bring up interface instead
    of ndc
  * Revert "wg-quick: wait on process substitutions"</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614081600">- Update to version 1.0.20210223
  * embeddable-wg-library: sync latest from netlink.h
  * completion: add help and syncconf completions
  * sticky-sockets: do not use SO_REUSEADDR
  * man: LOG_LEVEL variables changed name
  * ipc: do not use fscanf with trailing \n
  * ipc: read trailing responses after set operation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1615809600">- Update to version 1.0.20210315
  * Makefile: fix version indicator
  * wireguard-tools: const correctness
  * wireguard-tools: drag in headers for prototypes
  * ipc: uniformly ignore preshared keys that are zero</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1619352000">- Update to version 1.0.20210424
  * wg-quick: kill route monitor when loop terminates</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1632657600">- Update to version 1.0.20210914
  * no relevant changes for Linux systems</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1633089600">- remove world-readable permissions from /etc/wireguard boo#1191224</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1641384000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_wg-quick@.service.patch</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1645099200">- Support systemd-resolved split-dns setup
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1645531200">- Drop harden_wg-quick@.service.patch. The currrent logic for setting
  DNS is fiddling massively with the system. This is currently not
  compatible with these settings (bsc#1196096)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1660564800">- Don't hard require systemd, it's not a hard dependency</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1661947200">- Support multiple DNS search domains
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1697803200">- Update WireGuard.keyring with latest copy from upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1750248000">- Update to version 1.0.20250521
  * config: handle strdup failure.
  * wg-quick: linux: add 'dev' to 'ip link add' to avoid keyword
    conflicts.
  * ipc: add stub for allowedips flags on other platforms.
  * ipc: linux: support incremental allowed ips updates.
  * ipc: linux: enforce IFNAMSIZ limit.
  * man: set private key in PreUp rather than PostUp.
  * wg-quick: run PreUp hook after creating interface.
  * show: fix show all endpoints output.
  * show: apply const to right part of pointer.
  * wg-quick: linux: prevent traffic from momentarily leaking into
    tunnel.
  * reresolve-dns: use $EPOCHSECONDS instead of $(date +%s).
  * embeddable-wg-library: add named wg_endpoint union.
  * ipc: use more clever PnP enumerator.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1772884800">- Update to version 1.0.20260223
  * syncconf: account for persistent keepalive removed from config
    file.
  * config: preserve const correctness.
  * wg-quick@.service: add deps on wg-quick.target.
  * wg-quick: linux: do not unnecessarily set sysctl.
  * wg-quick: use addconf instead of setconf.
  * wg-quick: linux: deal with resolvconf migration more gracefully.
  * wg-quick: pass on # comments to {Pre,Post}{Up,Down}.
  * syncconf: account for psks removed from config file.
  * wg-quick: linux: use smallest mtu, not largest.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1781784000">- Remove selinux specific code from dns hatchet, as it allows for a
  cleaner handling in the selinux policy (bsc#1243148)
  adding Revert-dns-hatchet-apply-resolv.conf-s-selinux-conte.patch</changelog>
</package>
<package pkgid="8aea59cbd0db1060ae75601a1f780c950891073957355f465658a34847a0733642d0d65888d4d976b97a9a2d603d418b55ae220650fd03ed24df6970f5473b12" name="wireguard-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.20260223" rel="53.2"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1641384000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_wg-quick@.service.patch</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1645099200">- Support systemd-resolved split-dns setup
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1645531200">- Drop harden_wg-quick@.service.patch. The currrent logic for setting
  DNS is fiddling massively with the system. This is currently not
  compatible with these settings (bsc#1196096)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1660564800">- Don't hard require systemd, it's not a hard dependency</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1661947200">- Support multiple DNS search domains
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1697803200">- Update WireGuard.keyring with latest copy from upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1750248000">- Update to version 1.0.20250521
  * config: handle strdup failure.
  * wg-quick: linux: add 'dev' to 'ip link add' to avoid keyword
    conflicts.
  * ipc: add stub for allowedips flags on other platforms.
  * ipc: linux: support incremental allowed ips updates.
  * ipc: linux: enforce IFNAMSIZ limit.
  * man: set private key in PreUp rather than PostUp.
  * wg-quick: run PreUp hook after creating interface.
  * show: fix show all endpoints output.
  * show: apply const to right part of pointer.
  * wg-quick: linux: prevent traffic from momentarily leaking into
    tunnel.
  * reresolve-dns: use $EPOCHSECONDS instead of $(date +%s).
  * embeddable-wg-library: add named wg_endpoint union.
  * ipc: use more clever PnP enumerator.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1772884800">- Update to version 1.0.20260223
  * syncconf: account for persistent keepalive removed from config
    file.
  * config: preserve const correctness.
  * wg-quick@.service: add deps on wg-quick.target.
  * wg-quick: linux: do not unnecessarily set sysctl.
  * wg-quick: use addconf instead of setconf.
  * wg-quick: linux: deal with resolvconf migration more gracefully.
  * wg-quick: pass on # comments to {Pre,Post}{Up,Down}.
  * syncconf: account for psks removed from config file.
  * wg-quick: linux: use smallest mtu, not largest.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1781784000">- Remove selinux specific code from dns hatchet, as it allows for a
  cleaner handling in the selinux policy (bsc#1243148)
  adding Revert-dns-hatchet-apply-resolv.conf-s-selinux-conte.patch</changelog>
</package>
<package pkgid="7aaea98164c932310263a47d5e83c62722adb995203ce3202177c7da784ae952ee465b1216eb53313afecfbddff8be5dfd3fdc17705bb154c25b2d856fc55be2" name="wireguard-tools-debuginfo" arch="armv7hl">
  <version epoch="0" ver="1.0.20260223" rel="53.2"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1641384000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_wg-quick@.service.patch</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1645099200">- Support systemd-resolved split-dns setup
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1645531200">- Drop harden_wg-quick@.service.patch. The currrent logic for setting
  DNS is fiddling massively with the system. This is currently not
  compatible with these settings (bsc#1196096)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1660564800">- Don't hard require systemd, it's not a hard dependency</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1661947200">- Support multiple DNS search domains
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1697803200">- Update WireGuard.keyring with latest copy from upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1750248000">- Update to version 1.0.20250521
  * config: handle strdup failure.
  * wg-quick: linux: add 'dev' to 'ip link add' to avoid keyword
    conflicts.
  * ipc: add stub for allowedips flags on other platforms.
  * ipc: linux: support incremental allowed ips updates.
  * ipc: linux: enforce IFNAMSIZ limit.
  * man: set private key in PreUp rather than PostUp.
  * wg-quick: run PreUp hook after creating interface.
  * show: fix show all endpoints output.
  * show: apply const to right part of pointer.
  * wg-quick: linux: prevent traffic from momentarily leaking into
    tunnel.
  * reresolve-dns: use $EPOCHSECONDS instead of $(date +%s).
  * embeddable-wg-library: add named wg_endpoint union.
  * ipc: use more clever PnP enumerator.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1772884800">- Update to version 1.0.20260223
  * syncconf: account for persistent keepalive removed from config
    file.
  * config: preserve const correctness.
  * wg-quick@.service: add deps on wg-quick.target.
  * wg-quick: linux: do not unnecessarily set sysctl.
  * wg-quick: use addconf instead of setconf.
  * wg-quick: linux: deal with resolvconf migration more gracefully.
  * wg-quick: pass on # comments to {Pre,Post}{Up,Down}.
  * syncconf: account for psks removed from config file.
  * wg-quick: linux: use smallest mtu, not largest.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1781784000">- Remove selinux specific code from dns hatchet, as it allows for a
  cleaner handling in the selinux policy (bsc#1243148)
  adding Revert-dns-hatchet-apply-resolv.conf-s-selinux-conte.patch</changelog>
</package>
<package pkgid="d8f32d72dfa541d36b660c3eaae99e7f0844d2a955259a01f692c2064ebe6892e23a5384861150e5e4f97b5023595db197d4d210e1ad1ad26233c4f09dae908d" name="wireguard-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.20260223" rel="53.2"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1641384000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_wg-quick@.service.patch</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1645099200">- Support systemd-resolved split-dns setup
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1645531200">- Drop harden_wg-quick@.service.patch. The currrent logic for setting
  DNS is fiddling massively with the system. This is currently not
  compatible with these settings (bsc#1196096)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1660564800">- Don't hard require systemd, it's not a hard dependency</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1661947200">- Support multiple DNS search domains
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1697803200">- Update WireGuard.keyring with latest copy from upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1750248000">- Update to version 1.0.20250521
  * config: handle strdup failure.
  * wg-quick: linux: add 'dev' to 'ip link add' to avoid keyword
    conflicts.
  * ipc: add stub for allowedips flags on other platforms.
  * ipc: linux: support incremental allowed ips updates.
  * ipc: linux: enforce IFNAMSIZ limit.
  * man: set private key in PreUp rather than PostUp.
  * wg-quick: run PreUp hook after creating interface.
  * show: fix show all endpoints output.
  * show: apply const to right part of pointer.
  * wg-quick: linux: prevent traffic from momentarily leaking into
    tunnel.
  * reresolve-dns: use $EPOCHSECONDS instead of $(date +%s).
  * embeddable-wg-library: add named wg_endpoint union.
  * ipc: use more clever PnP enumerator.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1772884800">- Update to version 1.0.20260223
  * syncconf: account for persistent keepalive removed from config
    file.
  * config: preserve const correctness.
  * wg-quick@.service: add deps on wg-quick.target.
  * wg-quick: linux: do not unnecessarily set sysctl.
  * wg-quick: use addconf instead of setconf.
  * wg-quick: linux: deal with resolvconf migration more gracefully.
  * wg-quick: pass on # comments to {Pre,Post}{Up,Down}.
  * syncconf: account for psks removed from config file.
  * wg-quick: linux: use smallest mtu, not largest.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1781784000">- Remove selinux specific code from dns hatchet, as it allows for a
  cleaner handling in the selinux policy (bsc#1243148)
  adding Revert-dns-hatchet-apply-resolv.conf-s-selinux-conte.patch</changelog>
</package>
<package pkgid="360220dc7ffb1480ca405cf26bdfa650007dbdbd8962d6b102b473e9038d56abf53b868911731e64d0e1e5183643c28bb819a568633e954ba8fda2da07e0eada" name="wireguard-tools-debugsource" arch="armv7hl">
  <version epoch="0" ver="1.0.20260223" rel="53.2"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1641384000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_wg-quick@.service.patch</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1645099200">- Support systemd-resolved split-dns setup
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1645531200">- Drop harden_wg-quick@.service.patch. The currrent logic for setting
  DNS is fiddling massively with the system. This is currently not
  compatible with these settings (bsc#1196096)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1660564800">- Don't hard require systemd, it's not a hard dependency</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1661947200">- Support multiple DNS search domains
  * Support-systemd-resolved-split-dns-setup.patch</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1697803200">- Update WireGuard.keyring with latest copy from upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1750248000">- Update to version 1.0.20250521
  * config: handle strdup failure.
  * wg-quick: linux: add 'dev' to 'ip link add' to avoid keyword
    conflicts.
  * ipc: add stub for allowedips flags on other platforms.
  * ipc: linux: support incremental allowed ips updates.
  * ipc: linux: enforce IFNAMSIZ limit.
  * man: set private key in PreUp rather than PostUp.
  * wg-quick: run PreUp hook after creating interface.
  * show: fix show all endpoints output.
  * show: apply const to right part of pointer.
  * wg-quick: linux: prevent traffic from momentarily leaking into
    tunnel.
  * reresolve-dns: use $EPOCHSECONDS instead of $(date +%s).
  * embeddable-wg-library: add named wg_endpoint union.
  * ipc: use more clever PnP enumerator.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1772884800">- Update to version 1.0.20260223
  * syncconf: account for persistent keepalive removed from config
    file.
  * config: preserve const correctness.
  * wg-quick@.service: add deps on wg-quick.target.
  * wg-quick: linux: do not unnecessarily set sysctl.
  * wg-quick: use addconf instead of setconf.
  * wg-quick: linux: deal with resolvconf migration more gracefully.
  * wg-quick: pass on # comments to {Pre,Post}{Up,Down}.
  * syncconf: account for psks removed from config file.
  * wg-quick: linux: use smallest mtu, not largest.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1781784000">- Remove selinux specific code from dns hatchet, as it allows for a
  cleaner handling in the selinux policy (bsc#1243148)
  adding Revert-dns-hatchet-apply-resolv.conf-s-selinux-conte.patch</changelog>
</package>
<package pkgid="d85820138736288c37b85b9611f0c9729e0787b43860a9713ca48e411e888f64bd69c779db46871ae07eeb9b7f98393f125da89be53aa3f3592126fc8991d255" name="wiretap" arch="aarch64">
  <version epoch="0" ver="0.6.1" rel="1.26"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1722600000">- Update to version 0.4.3:
  * update gorelease workflow to latest format (#45)
  * separate server/client port args for 'add' cmd (#43)
  * Minor fixes before version release (#41)
  * Help and filename improvements (#40)
  * default port matches endpoint; documentation improvements (#39)
  * Revert "default port matches endpoint; documentation improvements"
  * default port matches endpoint; documentation improvements
  * revert file permissions
  * removed useless nodes[] addition
  * undo file perm changes; undo whitespace removal
  * status command: faster timeout and show partial data
  * Bump golang.org/x/net from 0.17.0 to 0.23.0 in /src
  * Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /src (#33)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1722945600">- Update to version 0.4.4:
  * fixed configure's outbound port behavior (#47)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1725624000">- Update to version 0.5.0:
  * Fixes for Gorelease 2.2 (#62)
  * Status error nodes (#57)
  * Server nicknames (#48)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1732622400">- Update to version 0.6.0:
  * Status improvements (#70)
  * Server Network Interface Enumeration (#69)
  * Localhost server access (#68)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1744372800">- Update to version 0.6.1:
  * fix deprecated format option
  * fix ping binary arguments for linux vs macos
- move to obs_scm
- attach the version to the binary</changelog>
</package>
<package pkgid="252539707419df3c0d4c45d00c89ffcb25665e958f1b1e8d15002939f56bc436ed8324dbd5143108c8b537bd0c6d6e37b9cb0cb224e3c32ba638ff272c1289e8" name="wiretap" arch="armv7hl">
  <version epoch="0" ver="0.6.1" rel="1.26"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1722600000">- Update to version 0.4.3:
  * update gorelease workflow to latest format (#45)
  * separate server/client port args for 'add' cmd (#43)
  * Minor fixes before version release (#41)
  * Help and filename improvements (#40)
  * default port matches endpoint; documentation improvements (#39)
  * Revert "default port matches endpoint; documentation improvements"
  * default port matches endpoint; documentation improvements
  * revert file permissions
  * removed useless nodes[] addition
  * undo file perm changes; undo whitespace removal
  * status command: faster timeout and show partial data
  * Bump golang.org/x/net from 0.17.0 to 0.23.0 in /src
  * Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /src (#33)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1722945600">- Update to version 0.4.4:
  * fixed configure's outbound port behavior (#47)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1725624000">- Update to version 0.5.0:
  * Fixes for Gorelease 2.2 (#62)
  * Status error nodes (#57)
  * Server nicknames (#48)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1732622400">- Update to version 0.6.0:
  * Status improvements (#70)
  * Server Network Interface Enumeration (#69)
  * Localhost server access (#68)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1744372800">- Update to version 0.6.1:
  * fix deprecated format option
  * fix ping binary arguments for linux vs macos
- move to obs_scm
- attach the version to the binary</changelog>
</package>
<package pkgid="57587a25fbc38d1912e0c75dc0c8c3640151cbcfa24b27e97095e708442aeca6ad9e04bd1c8f5de683ea202cc6c6e991626c8f5e8cc887f568a1168a30b7f1cf" name="wiretap" arch="src">
  <version epoch="0" ver="0.6.1" rel="1.26"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1722600000">- Update to version 0.4.3:
  * update gorelease workflow to latest format (#45)
  * separate server/client port args for 'add' cmd (#43)
  * Minor fixes before version release (#41)
  * Help and filename improvements (#40)
  * default port matches endpoint; documentation improvements (#39)
  * Revert "default port matches endpoint; documentation improvements"
  * default port matches endpoint; documentation improvements
  * revert file permissions
  * removed useless nodes[] addition
  * undo file perm changes; undo whitespace removal
  * status command: faster timeout and show partial data
  * Bump golang.org/x/net from 0.17.0 to 0.23.0 in /src
  * Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /src (#33)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1722945600">- Update to version 0.4.4:
  * fixed configure's outbound port behavior (#47)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1725624000">- Update to version 0.5.0:
  * Fixes for Gorelease 2.2 (#62)
  * Status error nodes (#57)
  * Server nicknames (#48)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1732622400">- Update to version 0.6.0:
  * Status improvements (#70)
  * Server Network Interface Enumeration (#69)
  * Localhost server access (#68)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1744372800">- Update to version 0.6.1:
  * fix deprecated format option
  * fix ping binary arguments for linux vs macos
- move to obs_scm
- attach the version to the binary</changelog>
</package>
<package pkgid="96daad10859442a46fc402010b90073da0192347236de473fa428d42e5c3bc1550286afcdb83fb2f843d4ce1e11833c8dd062c83b0c7b6789b8fca971158c1ce" name="wiretap-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.6.1" rel="1.26"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1722600000">- Update to version 0.4.3:
  * update gorelease workflow to latest format (#45)
  * separate server/client port args for 'add' cmd (#43)
  * Minor fixes before version release (#41)
  * Help and filename improvements (#40)
  * default port matches endpoint; documentation improvements (#39)
  * Revert "default port matches endpoint; documentation improvements"
  * default port matches endpoint; documentation improvements
  * revert file permissions
  * removed useless nodes[] addition
  * undo file perm changes; undo whitespace removal
  * status command: faster timeout and show partial data
  * Bump golang.org/x/net from 0.17.0 to 0.23.0 in /src
  * Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /src (#33)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1722945600">- Update to version 0.4.4:
  * fixed configure's outbound port behavior (#47)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1725624000">- Update to version 0.5.0:
  * Fixes for Gorelease 2.2 (#62)
  * Status error nodes (#57)
  * Server nicknames (#48)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1732622400">- Update to version 0.6.0:
  * Status improvements (#70)
  * Server Network Interface Enumeration (#69)
  * Localhost server access (#68)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1744372800">- Update to version 0.6.1:
  * fix deprecated format option
  * fix ping binary arguments for linux vs macos
- move to obs_scm
- attach the version to the binary</changelog>
</package>
<package pkgid="e7796c26d8df860ee3d89e630aa18964cb915bffc540a7de9753814010741c2b48d74c14e12d01ddd0a4d596691f82cf4298ba692413adff32094d1e3c6da506" name="wiretap-debuginfo" arch="armv7hl">
  <version epoch="0" ver="0.6.1" rel="1.26"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1722600000">- Update to version 0.4.3:
  * update gorelease workflow to latest format (#45)
  * separate server/client port args for 'add' cmd (#43)
  * Minor fixes before version release (#41)
  * Help and filename improvements (#40)
  * default port matches endpoint; documentation improvements (#39)
  * Revert "default port matches endpoint; documentation improvements"
  * default port matches endpoint; documentation improvements
  * revert file permissions
  * removed useless nodes[] addition
  * undo file perm changes; undo whitespace removal
  * status command: faster timeout and show partial data
  * Bump golang.org/x/net from 0.17.0 to 0.23.0 in /src
  * Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /src (#33)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1722945600">- Update to version 0.4.4:
  * fixed configure's outbound port behavior (#47)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1725624000">- Update to version 0.5.0:
  * Fixes for Gorelease 2.2 (#62)
  * Status error nodes (#57)
  * Server nicknames (#48)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1732622400">- Update to version 0.6.0:
  * Status improvements (#70)
  * Server Network Interface Enumeration (#69)
  * Localhost server access (#68)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1744372800">- Update to version 0.6.1:
  * fix deprecated format option
  * fix ping binary arguments for linux vs macos
- move to obs_scm
- attach the version to the binary</changelog>
</package>
</otherdata>