- Update version to 1.18.3
  * Support outbound_fwmark in server side to split outbound tunnel
  * Default build for *-windows-* targets includes sswinservice
  * local-fakedns: Add a basic implementation of Fake-DNS, which will
    allocate IPs from pool for DNS queries. This experimental feature
    could be useful when using local-tun, local-redir or other features
    that could only receive IP destinations, the domain name that is
    resolved by the Fake-DNS will be translated from IP back to domain
    name when connecting to the remote
  * Add launchd_udp_socket_name, launchd_tcp_socket_name to basic config format
  * local-tun: Support tun_interface_destination configuration key
  * Default logging framework changed to tracing-subscriber
  * local: socks local server will support SOCKS5, SOCKS4a, HTTP proxy
    protocols when local-http, local-socks4 features are enabled
  * local: Support setting udp_mtu in configuration file to actively reject
    packet.size > MTU
  * Fix bugs
- Add fix-boo-1223239.patch, fix CVE-2024-32650 boo#1223239

- Set permissions as 640 for /etc/shadowsocks (boo#1216372)

• Files Changed
• Browse Source

- Update version to 1.17.1
  * Trust-DNS is rebranded to Hickory-DNS
  * Support DNS-over-H3 (Try with configuration "dns": "google_h3" 
    and compile with feature "dns-over-h3")
  * Allow configuring local-dns client cache size
  * local-tun supports Windows with Wintun
  * Upgrade hyper
  * Fix bugs

- Fix boo#1216372 and boo#1216373, run systemd service as a dedicated user and group

- Update version to 1.16.2
  * Fix bugs
- Update vendor, fix boo#1215658 CVE-2023-42811

- Update constraints for riscv64

- Add Recommends for shadowsocks-v2ray-plugin
- Update systemd services

- Update version to 1.15.3
  * local-tun: Support tun_interface_destination for configuring Tun 
    device's destination address
  * Support outbound_fwmark, outbound_user_cookie, outbound_bind_interface
    and outbound_bind_addr in configuration file
  * AEAD-2022 protoco
  * SIP002 Extended Format: Allowing unencoded user-info in URL
  * Manager standalone mode support bypassing ACL files
  * Allow sslocal run without any servers, which will bypass all connections
    and packets

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source