From 6732dc96da0de2d0b47ff0b895749b3832c57cc938ae12c4b317d50bd83e1ad5 Mon Sep 17 00:00:00 2001 From: Hillwood Yang Date: Fri, 22 Nov 2024 12:48:44 +0000 Subject: [PATCH 1/6] - Update version to 5.22.0 * Add packetEncoding for Hysteria * Add ECH Client Support * Add support for parsing some shadowsocks links * Add Mekya Transport * Fix bugs OBS-URL: https://build.opensuse.org/package/show/server:proxy/v2ray-core?expand=0&rev=54 --- .gitattributes | 26 +++ .gitignore | 1 + dlc.dat | 3 + geoip.dat | 3 + v2ray-core-5.16.1.tar.gz | 3 + v2ray-core-5.18.0.tar.gz | 3 + v2ray-core-5.22.0.tar.gz | 3 + v2ray-core-rpmlintrc | 2 + v2ray-core.changes | 483 +++++++++++++++++++++++++++++++++++++++ v2ray-core.spec | 134 +++++++++++ v2ray-extra.zip | 3 + v2ray.service | 30 +++ v2ray@.service | 30 +++ vendor.tar.gz | 3 + 14 files changed, 727 insertions(+) create mode 100644 .gitattributes create mode 100644 .gitignore create mode 100644 dlc.dat create mode 100644 geoip.dat create mode 100644 v2ray-core-5.16.1.tar.gz create mode 100644 v2ray-core-5.18.0.tar.gz create mode 100644 v2ray-core-5.22.0.tar.gz create mode 100644 v2ray-core-rpmlintrc create mode 100644 v2ray-core.changes create mode 100644 v2ray-core.spec create mode 100644 v2ray-extra.zip create mode 100644 v2ray.service create mode 100644 v2ray@.service create mode 100644 vendor.tar.gz diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..4f0e993 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,26 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text +## Specific LFS patterns +dlc.dat filter=lfs diff=lfs merge=lfs -text +geoip.dat filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/dlc.dat b/dlc.dat new file mode 100644 index 0000000..85ce820 --- /dev/null +++ b/dlc.dat @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:af7a202728ceab4e049eb38cba31136ef3d7eca7bf56e62fba10eaa7117820c7 +size 1783159 diff --git a/geoip.dat b/geoip.dat new file mode 100644 index 0000000..12d13b4 --- /dev/null +++ b/geoip.dat @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:da84c95fcc09bdb60334cf4ff0d26e6ff1c3d7906a9c5c91d69556a425558677 +size 9574793 diff --git a/v2ray-core-5.16.1.tar.gz b/v2ray-core-5.16.1.tar.gz new file mode 100644 index 0000000..89fd3a8 --- /dev/null +++ b/v2ray-core-5.16.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e5d61b97168ebdf6da3d672ab40abe5b22951d46997072ca1ee497a3aa47ba05 +size 1036374 diff --git a/v2ray-core-5.18.0.tar.gz b/v2ray-core-5.18.0.tar.gz new file mode 100644 index 0000000..b7b25f2 --- /dev/null +++ b/v2ray-core-5.18.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:15acf65228867d47dcab27f87af048a2f0e6ed5d347a2e68730d30ae2a3871eb +size 1064425 diff --git a/v2ray-core-5.22.0.tar.gz b/v2ray-core-5.22.0.tar.gz new file mode 100644 index 0000000..acae025 --- /dev/null +++ b/v2ray-core-5.22.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:df25a873c8f7fb30f44cb6d26b18db264dfa209df5aeb6116fc43df7157fb4b8 +size 1072762 diff --git a/v2ray-core-rpmlintrc b/v2ray-core-rpmlintrc new file mode 100644 index 0000000..bafb361 --- /dev/null +++ b/v2ray-core-rpmlintrc @@ -0,0 +1,2 @@ +# Please refer https://en.opensuse.org/openSUSE:Packaging_Go +addFilter("devel-file-in-non-devel-package") diff --git a/v2ray-core.changes b/v2ray-core.changes new file mode 100644 index 0000000..78391bc --- /dev/null +++ b/v2ray-core.changes @@ -0,0 +1,483 @@ +------------------------------------------------------------------- +Fri Nov 22 12:44:43 UTC 2024 - Hillwood Yang + +- Update version to 5.22.0 + * Add packetEncoding for Hysteria + * Add ECH Client Support + * Add support for parsing some shadowsocks links + * Add Mekya Transport + * Fix bugs + +------------------------------------------------------------------- +Fri Sep 13 12:02:49 UTC 2024 - Hillwood Yang + +- Update version to 5.18.0 + * Add timeout for http request roundtripper + * Fix ss2022 auth reader size overflow + * Add pie build mode to all binary builds + * Support "services" root config in cfgv4 + * packet_encoding for config v4 + * add MPTCP support + * Add (Experimental) Meyka Building Blocks to request Transport + * Add timeout for http request roundtripper + * Hysteria2: Add Hysteria2 Protocol + * Add AllowInsecureIfPinnedPeerCertificate option to tls security + * Add tls certChainHash command + * add support for socket activation + * Add pprof flag for debugging + * Fix bugs + +------------------------------------------------------------------- +Sun Jun 16 08:21:52 UTC 2024 - Hillwood Yang + +- Update version to 5.16.1 + * Add Keep-Alive to removed headers + +------------------------------------------------------------------- +Sun Apr 14 13:08:52 UTC 2024 - Hillwood Yang + + - Update version to 5.15.1 + * feat: RandomStrategy AliveOnly + * Improve container image tags and timestamp + * Add delay_auth_write to Socks5 Client Advanced Config + * Add MaxMin TLS version support in TLS Setting + * feat: RandomStrategy AliveOnly + * Improve container image tags and timestamp + * Fixed an encrypted traffic's malleable vulnerability that allow + integrity corruption by an attacker with a privileged network + position to silently drop segments of traffic from an encrypted + traffic stream. + * Update documents + * Fix bugs +- Update vendor, fix CVE-2024-22189 boo#1222488 + +------------------------------------------------------------------- +Sun Dec 3 08:38:20 UTC 2023 - Hillwood Yang + +- Update version to 5.12.1 + * Shadowsocks2022 Client Support + * Apply DomainStrategy to outbound target + * Add DomainStrategy to JSONv5 outbound + * Add sniffing for TUN + * Add HTTPUpgrade transport + * It is a reduced version of WebSocket Transport that can pass many + reverse proxies and CDNs without running a WebSocket protocol stack + * TUN Support + * Add uTLS support for h2 transport + * Fix bugs + +------------------------------------------------------------------- +Sun Oct 8 13:35:54 UTC 2023 - Hillwood Yang + +- Update version to 5.8.0 + * DNS over QUIC should not have "http/1.1" and "h2" ALPNs + * Migrate to quic-go v0.36.0 + * Fix: parse for the CipherType of Shadowsocks in simplified config + * Fix protocol matching in routing + * Fix CI breakage in 5.7.0 +- Build by golang 1.20, workaround build error on golang 1.21 + +------------------------------------------------------------------- +Sun Jun 25 03:13:08 UTC 2023 - opensuse-packaging + +- Drop vendor in filelist + +------------------------------------------------------------------- +Mon Jun 12 06:34:21 UTC 2023 - opensuse-packaging + +- Update version to 5.7.0 + * meek: a new transport protocol meek is added. + * HTTP Proxy Add h1SkipWaitForReply Option to HTTP Proxy Protocol + * set v2ray binary as an entrypoint in container images + * Add Integrated Container Image Building + * Skip validating on empty http host config + * Add PacketAddr support to Trojan + * DomainStrategy support for all outbounds + * Add an option to replace destination address in access log with sniffed domain + * uTLS uTLS ALPN Control + * uTLS New Security Type uTLS: TLS Client Hello imitation + * DNS Support per-client configuration + * DNS Support specifying domain matcher + * Add bind to device to Windows and Darwin + * Replace default Health Ping URL to HTTPS for burst observatory + * Implement Match and MatchAny for all MatcherGroup + * Fix bugs + +------------------------------------------------------------------- +Thu Jan 5 12:42:50 UTC 2023 - opensuse-packaging + +- Fix service command: "run" is required in v2ray 5.x + +------------------------------------------------------------------- +Thu Dec 29 14:23:37 UTC 2022 - Marguerite Su + +- Update version to 5.2.0 + * New Features + + uTLS New Security Type uTLS: TLS Client Hello imitation. + Only client without transport, or with websocket transport is + currently supported. + + DNS Support per-client configuration + + DNS Support specifying domain matcher + + Replace default Health Ping URL to HTTPS + + Implement Match and MatchAny for all MatcherGroup, IndexMatcher + * Fixes + + Fix typo in error message + + Support domain string validation + + Charset of ACAutomationMatcherGroup should accept all ASCII characters + + Fix logic of domain override + + Fix HTTP sniff + + Fix config merger fixes + + Fix selectLeastLoad() returns wrong number of nodes + + Fix(freebsd): ReadUDPMsg nil pointer + + fix: socks4/4a client handshake + + Add transport original name to listen unix + + fix Replace "math/rand" with "crypto/rand" in padding generation + + Fix remove v2ctl from debian/rules + + Fix getting shared flags for balance info command + + Fix erroneous prefix checking + + Fix json.Reader: fill output bytes as much as possible + + Guard against nil pointer dereference of (*NetworkList) + * Chores + + Add tests for idn support + + Refactor: replace netaddr package with netipx + +------------------------------------------------------------------- +Sat Dec 25 14:01:53 UTC 2021 - opensuse-packaging + +- Update version to 4.44.0 + * Fix DoS attack vulnerability in CommandSwitchAccountFactory. (@geeknik) + * Apply timeout to DNS outbound. (#1330 @nekohasekai) + +------------------------------------------------------------------- +Wed Dec 1 08:11:01 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * v2ray.service + * v2ray@.service + +------------------------------------------------------------------- +Thu Nov 11 02:55:40 UTC 2021 - opensuse-packaging + +- Update version to 4.43.0 + * Send Shadowsocks handshake with payload data if available + * Custom TCP Fast Open queue length support + * Fix Trojan fallback cannot get ALPN + * Fix QueryStrategy ignored + * Fix UDP connection transport connection terminated unnecessarily + * refactor: move from io/ioutil to io and os package + * Fix some tests to use udp.PickPort() + * Fix flaky TestVMessDynamicPort + +------------------------------------------------------------------- +Tue Sep 21 13:38:23 UTC 2021 - opensuse-packaging + +- Update to 4.42.2 + * TLS: support client certificate authentication #1169 Thanks @qq906907952 + * Socks: support 4/4a version of the socks protocol (#1269 Thanks @nekohasekai) + * DNS: add option disableFallbackIfMatch for DNS (#1270 Thanks @nekohasekai) + * DoQ(DNS over QUIC) local mode supports IP destination + (#1226 Thanks @AkinoKaede) + * Observatory will now probe outbounds in a deterministic order + (#1230 Thanks @digglife) + * DNS response will respect request type(like AAAA, A) + (#1235 Thanks @AkinoKaede) + * Fix typo in DNS log output (#1183 Thanks @rurirei) + * Fix typo in observatory log output (#1211 Thanks @ihotte) + * Fix version string not updated to match release version + * Fix IP length not deterministic (#1267 Thanks @Loyalsoldier) + * Fix HTTP outbound not respect socket config (#1264 Thanks @Vigilans) + * Fix sockopt.mark type (#1264 Thanks @Vigilans) + * Fix typo in browser forwarder error message +- Update in 4.41.1 + * VMess: Added 2 VMess experiments AuthenticatedLength and NoTerminationSignal + #940 Thanks @RPRX + * Hardening Draining connection at client side when receiving invalid data. + #940 Thanks @RPRX + * Observatory Support custom probe interval and probe URL. Thanks @nekohasekai + * Fixed connection stability issue when in h2, grpc transport. + #1059 #1058 #1056 Thanks @IRN-Kawakaze @architecturers @lijinglin3 + * Further fixed connection stability issue when in h2, grpc transport. + check https://github.com/v2fly/v2ray-core/releases/tag/v4.41.1 for more info +- Update in 4.40.1 + * DNS: support DNS over TCP. #983 Thanks @AkinoKaede + * Fix: new cert issuing is incorrectly delayed. #998 Thanks @bhoppi + +------------------------------------------------------------------- +Wed Jun 2 08:15:09 UTC 2021 - opensuse-packaging + +- Update version to 4.39.2 + * Websocket: support header based Websocket early data & its partial browser + forwarder support + * GeoData: add a memory efficient geodata decoder called memconservative for + memory-limited devices #934 #953 #964 #965 #967 #977 Thanks @Loyalsoldier @rurirei + * HTTP/2 Transport: support to set method and headers for outgoing connections + * TCP Socket Option: support to set keepalive interval on Linux operating system + #962 Thanks @therealak12 + * Fix BrowserForwarder panics with empty config (#954) Thanks @AkinoKaede + @Loyalsoldier + * Fix FakeDNS prints error with empty config (#955) Thanks @Loyalsoldier + * Fix Dual stack FakeDNS Close method (#956) Thanks @Loyalsoldier + * Fix Observatory starts with empty config & fails to close (#957) Thanks + @Loyalsoldier + * Fix Null check on alternative system dialer (#959) Thanks @rurirei + * Fixed the chain proxy support for gRPC and HTTP/2 transport + * Fixed leastping logic (#1019) Thanks @fanyiguang + * Fixed v2ctl unable to create geodata loaders (#1014) Thanks @ght99 +- Update in 4.38.3 + - FakeDNS: Added fakedns+others sniffer , based on #697 . Thanks @yuhan6665 + - TLS: A SECURITY improvement that allow the remote peer's TLS certificate + to be pinned to a known value. Document for TLS is updated + - Observatory: A component that measure the connectivity of selected outbounds + The document for Observatory is updated. + - Routing : leastPing balancing strategy is added. This strategy will select + a outbound that is alive and completed HTTPS GET request in the least time. + The document for Routing is updated. + - Fixed crashing in fake dns. #931 Thanks @IceCodeNew + - Added IPv6 pool in fake dns by default. #925 Thanks @Loyalsoldier + - Return ErrEmptyResponse for fakedns. #926 Thanks @sixg0000d + - Fixed UDP DNS connection cause crash. Thanks @nekohasekai + - Fixed two typo in comments. Thanks @U-v-U + * Multi-json support for observatory, browser forwarder. + #944 Thanks @ha-ku @AkinoKaede +- Add browserforwarder related v2ray-extra.zip + +------------------------------------------------------------------- +Thu Apr 15 06:11:12 UTC 2021 - opensuse-packaging + +- update version to 4.37.3 + * Add multiple address host support for DNS (#884 #886 #888) + * Fix geoiop & geosite load issue (#889) +- update in 4.37.2 + * Add browser forwarder support for Websocket (#818) + * Add Websocket 0-RTT early data support (#818) + * Add replay protection for Shadowsocks proxy (#777) + * Add queryStrategy option for DNS (#794) + * Add disableFallback & skipFallback option for DNS client (#864) + * Add inversed GeoIP matching (#860) + * Add grpcSettings & gunSettings to streamSettings (00879c4) @rprx + * Fix vprotogen loop dependency (#797) @Loyalsoldier @U-v-U + * Fix DNS tests timeout due to network instability (#805) @Loyalsoldier + * Remove AA header flag in DNS query (#817) @Loyalsoldier + * TProxy: cannot find IPv6 destination in redirect mode (#815) @mzz2017 + * Context: ctx initialization for core.functions (#841) @rurirei + * Set FakeDNS FakeEnable option dynamically (#879) @sixg0000d @Loyalsoldier + * Fix Websocket early data 404 bug (#859) @k79e + * Fix QUIC: disconnect due to timeout (#850) @bhoppi + * Log: remove package path prefix in logs (#840 0138017 78c1993) @kslr +- update in 4.36.2 + * Fix gRPC max delay unintentionally low (1eaec68) @xiaokangwang + * Fix core panics when zero domain/full type of rule (#786) @darsvador +- update in 4.36.1 + * Add gRPC/gun transport (#757 #783) + * Add loopback proxy (#770) + * Add a new efficient routing rule matcher MphDomainMatcher (#743) + * FakeDNS: use 198.18.0.0/15 as default FakeDNS IP pool (#779) +- update build needed golang version to 1.16 +- keep go.sum go.mod to fix build issue with 'matched no packages' +- add geo files manually since upstream removed them from source + +------------------------------------------------------------------- +Tue Mar 9 10:26:12 UTC 2021 - opensuse-packaging + +- update version to 4.35.1 + * Add support for FakeDNS (#395 #406 #696) @yuhan6665 + * Add streamSetting / transport support for outbound front proxy + * Add zero pseudo encryption for better performance VMess + * Add support to disable compatibility for legacy VMess MD5 (#596) @dyhkwong + * Add a faster and more memory-efficient routing rule matcher + HybridDomainMatcher (#587 #639) @darsvador + * Add support to disable DNS cache (#699 #705) @CalmLong + * Fix test HTTP/2 dial timeout (#570) @kslr + * Fix Trojan panic when UDP dispatcher fails to write response (#599) @maskedeken + * Fix TCP default ALPN (#716) @AkinoKaede + * Fix DNS rule index out of range (#727) @Loyalsoldier + Check https://github.com/v2fly/v2ray-core/releases/tag/v4.35.1 for more info +- update import path to github.com/v2fly/v2ray-core/v4 + +------------------------------------------------------------------- +Sat Jan 9 01:37:48 UTC 2021 - opensuse-packaging + +- update version to 4.34.0 + * Disable TLS Session Resumption by default + * Remove legacy Shadowsocks unsecure stream ciphers + * Add preliminary support for DNS over QUIC + +------------------------------------------------------------------- +Tue Dec 29 13:11:50 UTC 2020 - opensuse-packaging + +- Rename golang-github-v2ray-v2ray-core to golang-github-v2fly-v2ray-core +- Update vendor. + +------------------------------------------------------------------- +Wed Nov 25 15:31:22 UTC 2020 - opensuse-packaging + +- update to version 4.33.0 + * Remove XTLS + * API: Reflection Service Support @Vigilans + * Update to IETF QUIC draft-32 +- update in 4.32.1 + * VLESS XTLS Direct Mode ReadV Experiment + * Disable 0-RTT mechanism for HTTP/1.x outbound + * Set default alterId to 0 for VMess dynamic ports + +------------------------------------------------------------------- +Sun Nov 1 12:26:08 UTC 2020 - opensuse-packaging + +- update version to 4.32.0 + * loads JSON internally by default @forever8938 + * Refine UNIX domain socket @lucifer9 + * Fix mKCP sending window @p4gefau1t + * Fix JSON parsing dependency introduced by mutijson config @xiaokangwang + * Fix proto.go ProtoFilesUsingProtocGenGoFast on Windows @JimhHan +- other changes before this version + * Add full VLESS fallbacks support to Trojan + * Add Trojan over XTLS support @maskedeken + * Add XTLS Direct Mode + * Add XTLS support to mKCP + * Add padding to abstract UNIX domain socket in fallbacks + * Add XTLS support to DomainSocket @rprx + +------------------------------------------------------------------- +Mon Sep 28 08:35:06 UTC 2020 - opensuse-packaging + +- Update version to 4.29.0 + * Fix issue#202 + * Fix issue#203 + * Routing: Implement Route interface as the routing result of Router + * kcp: removing annoying NewAEADAESGCMBasedOnSeed hint + * Make isAEAD more efficient + * Golangci-lint: disable some plugins + * Add XTLS support + * CodeQL: do NOT run on ready for review status + +------------------------------------------------------------------- +Sat Sep 12 10:48:05 UTC 2020 - opensuse-packaging + +- Update version to 4.28.1 + * Fix incorrect IV usage which slightly reduced security + +------------------------------------------------------------------- +Fri Sep 11 08:42:39 UTC 2020 - opensuse-packaging + +- Update version to 4.28.0 + * Changes + - VMess AEAD will be used when alterId is 0. ("testsEnabled" is discarded) + * Fixes + - Fix dns tests by setting v2ray.location.asset @felixonmars + - fix abstract UDS & add PROXY protocol support to DS inbound @lucifer9 @rprx + - Systemd: prevent restart on corrupt config @DuckSoft + * Chores + - Upgrade all dependencies @rprx + - Change lint order to avoid file changes notice @Loyalsoldier + - Update geoip, geosite + +------------------------------------------------------------------- +Wed Sep 2 10:34:41 UTC 2020 - opensuse-packaging + +- Update version to 4.27.5 + * Features + - Parse X-Forwarded-For in http transport @lucifer9 + * Fix + - Fix according to staticcheck result @Loyalsoldier + - Fix: Bound check when accessing DNS server's ipIndexMap @Vigilans + - Refine code @Loyalsoldier + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 + +------------------------------------------------------------------- +Sat Aug 29 03:26:28 UTC 2020 - opensuse-packaging + +- Update version to 4.27.4 + * Features + - Dotless domain support in built-in DNS @Vigilans + - Support source port matching in routing config @Vigilans + - Make HTTP outbound 0-rtt @darhwa + - Add asset location auto search @vcptr + - Add PROXY protocol support to TCP & WebSocket inbound @lucifer9 and @rprx + - VLESS PREVIEW 1.5 @rprx + * Fixs + - Amending domain matcher with returning array of all matches @Vigilans + - Refactor DNS Server to record original rule of domain matchers @Vigilans + - New Systemd unit file @dctxmei + - Fix: logging empty rules & DNS @Loyalsoldier + - Fix a typo @dikaixu1999 + - Shadowsocks Detection defense @studentmain and @xiaokangwang + - Update Old file @Loyalsoldier + * Breaking Changes + - VLESS fallback -> fallbacks, + see https://www.v2fly.org/config/protocols/vless.html + - Route matching order changes + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 +- Update in 4.27.0 + * Feature + - VLESS PREVIEW 1.3 https://www.v2fly.org/config/protocols/vless.html + * Fix + - Shadowsocks supports cipher as None @yuhan6665 + - Add access log for Dokodemo inbound @lucifer9 + - Some typo fixes @DuckSoft + - Add Linux riscv64 release @rprx + - Fix the error of missing curl in Dockerfile @kallydev + - GitHub Actions push to docker hub @kallydev + - Optimize SO_REUSEPORT implementation @Vigilans + - DOH supports HTTP/2 @darhwa + - Apply Sockopt from inbound config to Dokodemo Tproxy's response connection + @Vigilans + * Breaking Change + - VMessAEAD has been updated and needs both client and server to be the same + version for it to work. + - Release file structure changes. + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 + +------------------------------------------------------------------- +Sun Aug 2 09:20:46 UTC 2020 - Sam Yu + +- Fix out-of-box usability + +------------------------------------------------------------------- +Fri Jul 10 14:05:15 UTC 2020 - opensuse-packaging + +- Update version to 4.26.0 + * Update Signing key + * Update geoip, geosite + * Fix bug with tag name extract + * Generate Manifest for bleeding edge release + * Adjust arm build + * Allow the use of Browser Bridge + +------------------------------------------------------------------- +Thu Jun 25 15:09:25 UTC 2020 - Jan Engelhardt + +- Update summary with something useful. Trim filler wording + from description. + +------------------------------------------------------------------- +Sun Jun 21 09:05:14 UTC 2020 - opensuse-packaging + +- Update version to 4.25.0 + * VMess's new header format experiment begins. You can now enable VMessAEAD to + be better protected. Documents EN CH are updated. See extra-VMessAEADdoc.zip + for a more detailed explanation available in both Chinese and English. + * mKCP can now be encrypted to resist recognition, address issue mentioned in + #2530 #2253 #2131. Documents EN CH are updated. + * Updated Golang tool-chain. Thanks @rprx + * LocalAddr() in UDP workers will now return correct local addr. Thanks + @zhuobixin + * Further remove the identity leakage with TLS ClientHello from #2521 thank + @darhwa + * Fix UDP stability issue in Socks5 inbound, Shadowsocks inbound, and + Dokodemo( TProxy ) inbound. This should alleviate unnecessary CPU, memory + usage, and premature disconnection issue typically triggered by playing + games, video conference, and Torrenting. See #2565 thank @JimHan75d8c5 + @xiaokangwang and Other testers @1265578519 @zhj9709 @Kylejustknows etc + * Added ARM v5 binary in the release. This should allow legacy ARM devices to + run V2Ray correctly. See #2536 + +------------------------------------------------------------------- +Sun Jun 7 02:44:52 UTC 2020 - opensuse-packaging + +- initial package for version 4.23.4 diff --git a/v2ray-core.spec b/v2ray-core.spec new file mode 100644 index 0000000..dda6673 --- /dev/null +++ b/v2ray-core.spec @@ -0,0 +1,134 @@ +# +# spec file for package v2ray-core +# +# Copyright (c) 2024 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +%define provider github +%define provider_tld com +%define project v2fly +%define repo v2ray-core +# https://github.com/v2fly/v2ray-core +%define provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo} +%define import_path github.com/v2fly/v2ray-core/v5 + +Name: v2ray-core +Version: 5.22.0 +Release: 0 +Summary: Network tools for building a computer network +License: MIT +Group: Productivity/Networking/Web/Proxy +URL: https://github.com/v2fly/v2ray-core +Source0: https://github.com/v2fly/v2ray-core/archive/v%{version}/%{name}-%{version}.tar.gz +Source1: vendor.tar.gz +Source2: v2ray.service +Source3: v2ray@.service +Source4: https://github.com/v2fly/geoip/raw/release/geoip.dat +Source5: https://github.com/v2fly/domain-list-community/raw/release/dlc.dat +Source6: https://github.com/v2fly/v2ray-core/releases/download/v%{version}/v2ray-extra.zip +Source99: %{name}-rpmlintrc +BuildRequires: fdupes +BuildRequires: golang-packaging +BuildRequires: systemd-rpm-macros +BuildRequires: unzip +BuildRequires: pkgconfig(systemd) +AutoReqProv: Off +Provides: v2ray = %{version}-%{release} +Obsoletes: v2ray < %{version}-%{release} +BuildRoot: %{_tmppath}/%{name}-%{version}-build +%{go_provides} +%{?systemd_ordering} + +%description +Project V is a set of network tools for building a computer network. +It secures network connections and protects privacy. + +%package -n golang-%{provider}-%{project}-%{repo} +Summary: Additional mobile libraries +Group: Development/Languages/Golang +BuildArch: noarch + +%description -n golang-%{provider}-%{project}-%{repo} +Project V is a set of network tools for building a computer network. +It secures network connections and protects privacy. + +This package provide source code for %{repo} + +%prep +%setup -q -a1 -a6 -n %{repo}-%{version} + +%build +export GO111MODULE=off +%goprep %{import_path} +%gobuild main... +mv %{_builddir}/go/bin/main %{_builddir}/go/bin/v2ray + +%install +%goinstall +%gosrc +rm -rf %{buildroot}%{go_contribsrcdir}/%{import_path}/vendor +%gofilelist + +install -d %{buildroot}%{_datadir}/v2ray +install -m0644 %{SOURCE4} %{buildroot}%{_datadir}/v2ray/geoip.dat +install -m0644 %{SOURCE5} %{buildroot}%{_datadir}/v2ray/geosite.dat + +install -d %{buildroot}%{_unitdir} +install -m0644 %{SOURCE2} %{buildroot}%{_unitdir}/ +install -m0644 %{SOURCE3} %{buildroot}%{_unitdir}/ + +install -d %{buildroot}%{_sysconfdir}/v2ray +install -m0644 release/config/*.json %{buildroot}%{_sysconfdir}/v2ray/ + +install -d %{buildroot}%{_sbindir}/ +ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rcv2ray + +install -d %{buildroot}%{_datadir}/v2ray/browserforwarder +install -m0644 browserforwarder/index.js %{buildroot}%{_datadir}/v2ray/browserforwarder/ +install -m0644 browserforwarder/index.html %{buildroot}%{_datadir}/v2ray/browserforwarder/ + +%fdupes %{buildroot} + +%pre +%service_add_pre v2ray.service v2ray@.service + +%post +%service_add_post v2ray.service v2ray@.service + +%preun +%service_del_preun v2ray.service v2ray@.service + +%postun +%service_del_postun v2ray.service v2ray@.service + +%files +%doc README.md +%license LICENSE +%{_bindir}/v2ray +%{_bindir}/v2api +%{_unitdir}/v2ray.service +%{_unitdir}/v2ray@.service +%dir %{_sysconfdir}/v2ray +%dir %{_datadir}/v2ray +%{_datadir}/v2ray/* +%config(noreplace) %{_sysconfdir}/v2ray/*.json +%{_sbindir}/rcv2ray +%{_datadir}/v2ray/browserforwarder/ + +%files -n golang-%{provider}-%{project}-%{repo} -f file.lst +%doc README.md +%license LICENSE + +%changelog diff --git a/v2ray-extra.zip b/v2ray-extra.zip new file mode 100644 index 0000000..1929e20 --- /dev/null +++ b/v2ray-extra.zip @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:d1327fb2956300f805a4d35357822bca91ef621f134e499fcde3d5eb1b449cf4 +size 296846 diff --git a/v2ray.service b/v2ray.service new file mode 100644 index 0000000..a0f9517 --- /dev/null +++ b/v2ray.service @@ -0,0 +1,30 @@ +[Unit] +Description=V2Ray Service +Documentation=https://www.v2fly.org/ +After=network.target nss-lookup.target + +[Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions +User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true +Environment=V2RAY_LOCATION_ASSET=/usr/share/v2ray +ExecStart=/usr/bin/v2ray run -config /etc/v2ray/config.json +Restart=on-failure +RestartPreventExitStatus=23 + +[Install] +WantedBy=multi-user.target diff --git a/v2ray@.service b/v2ray@.service new file mode 100644 index 0000000..30b9843 --- /dev/null +++ b/v2ray@.service @@ -0,0 +1,30 @@ +[Unit] +Description=V2Ray Service +Documentation=https://www.v2fly.org/ +After=network.target nss-lookup.target + +[Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions +User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true +Environment=V2RAY_LOCATION_ASSET=/usr/share/v2ray +ExecStart=/usr/bin/v2ray run -config /etc/v2ray/%i.json +Restart=on-failure +RestartPreventExitStatus=23 + +[Install] +WantedBy=multi-user.target diff --git a/vendor.tar.gz b/vendor.tar.gz new file mode 100644 index 0000000..c494c58 --- /dev/null +++ b/vendor.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2cbcccccc94656ea5f9e0f3e113d14ef813e80b403f41ac4f2763dfb3915d1b8 +size 8966960 -- 2.51.1 From ee16a4541adf99856be6fb95fe8320d4e6c8f799694b701cb3606efdabb72de3 Mon Sep 17 00:00:00 2001 From: Hillwood Yang Date: Sun, 6 Apr 2025 08:07:13 +0000 Subject: [PATCH 2/6] - Update version to 5.29.3 * Enable restricted mode load for http protocol client * Correctly implement QUIC sniffer when handling multiple initial packets * Fix unreleased cache buffer in QUIC sniffing * A temporary testing fix for the buffer corruption issue * QUIC Sniffer Restructure OBS-URL: https://build.opensuse.org/package/show/server:proxy/v2ray-core?expand=0&rev=56 --- .gitattributes | 26 +++ .gitignore | 1 + dlc.dat | 3 + geoip.dat | 3 + v2ray-core-5.16.1.tar.gz | 3 + v2ray-core-5.18.0.tar.gz | 3 + v2ray-core-5.22.0.tar.gz | 3 + v2ray-core-5.29.3.tar.gz | 3 + v2ray-core-rpmlintrc | 2 + v2ray-core.changes | 493 +++++++++++++++++++++++++++++++++++++++ v2ray-core.spec | 134 +++++++++++ v2ray-extra.zip | 3 + v2ray.service | 30 +++ v2ray@.service | 30 +++ vendor.tar.gz | 3 + 15 files changed, 740 insertions(+) create mode 100644 .gitattributes create mode 100644 .gitignore create mode 100644 dlc.dat create mode 100644 geoip.dat create mode 100644 v2ray-core-5.16.1.tar.gz create mode 100644 v2ray-core-5.18.0.tar.gz create mode 100644 v2ray-core-5.22.0.tar.gz create mode 100644 v2ray-core-5.29.3.tar.gz create mode 100644 v2ray-core-rpmlintrc create mode 100644 v2ray-core.changes create mode 100644 v2ray-core.spec create mode 100644 v2ray-extra.zip create mode 100644 v2ray.service create mode 100644 v2ray@.service create mode 100644 vendor.tar.gz diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..4f0e993 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,26 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text +## Specific LFS patterns +dlc.dat filter=lfs diff=lfs merge=lfs -text +geoip.dat filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/dlc.dat b/dlc.dat new file mode 100644 index 0000000..98a0996 --- /dev/null +++ b/dlc.dat @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:6c69c83e0d9ee39cb0674515ce1668a411b9824a1c6314291d77bc83cd0c6d56 +size 2245011 diff --git a/geoip.dat b/geoip.dat new file mode 100644 index 0000000..216f284 --- /dev/null +++ b/geoip.dat @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:735786c00694313090c5d525516463836167422b132ce293873443613b496e92 +size 21013265 diff --git a/v2ray-core-5.16.1.tar.gz b/v2ray-core-5.16.1.tar.gz new file mode 100644 index 0000000..89fd3a8 --- /dev/null +++ b/v2ray-core-5.16.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e5d61b97168ebdf6da3d672ab40abe5b22951d46997072ca1ee497a3aa47ba05 +size 1036374 diff --git a/v2ray-core-5.18.0.tar.gz b/v2ray-core-5.18.0.tar.gz new file mode 100644 index 0000000..b7b25f2 --- /dev/null +++ b/v2ray-core-5.18.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:15acf65228867d47dcab27f87af048a2f0e6ed5d347a2e68730d30ae2a3871eb +size 1064425 diff --git a/v2ray-core-5.22.0.tar.gz b/v2ray-core-5.22.0.tar.gz new file mode 100644 index 0000000..acae025 --- /dev/null +++ b/v2ray-core-5.22.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:df25a873c8f7fb30f44cb6d26b18db264dfa209df5aeb6116fc43df7157fb4b8 +size 1072762 diff --git a/v2ray-core-5.29.3.tar.gz b/v2ray-core-5.29.3.tar.gz new file mode 100644 index 0000000..6536ff4 --- /dev/null +++ b/v2ray-core-5.29.3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f2a2eb4c835a99339746eaadbb1c88b4dcd022aa6d801ca44936be36f3ed027a +size 1126423 diff --git a/v2ray-core-rpmlintrc b/v2ray-core-rpmlintrc new file mode 100644 index 0000000..bafb361 --- /dev/null +++ b/v2ray-core-rpmlintrc @@ -0,0 +1,2 @@ +# Please refer https://en.opensuse.org/openSUSE:Packaging_Go +addFilter("devel-file-in-non-devel-package") diff --git a/v2ray-core.changes b/v2ray-core.changes new file mode 100644 index 0000000..f697a83 --- /dev/null +++ b/v2ray-core.changes @@ -0,0 +1,493 @@ +------------------------------------------------------------------- +Sun Apr 6 04:47:00 UTC 2025 - Marguerite Su + +- Update version to 5.29.3 + * Enable restricted mode load for http protocol client + * Correctly implement QUIC sniffer when handling multiple initial packets + * Fix unreleased cache buffer in QUIC sniffing + * A temporary testing fix for the buffer corruption issue + * QUIC Sniffer Restructure + +------------------------------------------------------------------- +Fri Nov 22 12:44:43 UTC 2024 - Hillwood Yang + +- Update version to 5.22.0 + * Add packetEncoding for Hysteria + * Add ECH Client Support + * Add support for parsing some shadowsocks links + * Add Mekya Transport + * Fix bugs + +------------------------------------------------------------------- +Fri Sep 13 12:02:49 UTC 2024 - Hillwood Yang + +- Update version to 5.18.0 + * Add timeout for http request roundtripper + * Fix ss2022 auth reader size overflow + * Add pie build mode to all binary builds + * Support "services" root config in cfgv4 + * packet_encoding for config v4 + * add MPTCP support + * Add (Experimental) Meyka Building Blocks to request Transport + * Add timeout for http request roundtripper + * Hysteria2: Add Hysteria2 Protocol + * Add AllowInsecureIfPinnedPeerCertificate option to tls security + * Add tls certChainHash command + * add support for socket activation + * Add pprof flag for debugging + * Fix bugs + +------------------------------------------------------------------- +Sun Jun 16 08:21:52 UTC 2024 - Hillwood Yang + +- Update version to 5.16.1 + * Add Keep-Alive to removed headers + +------------------------------------------------------------------- +Sun Apr 14 13:08:52 UTC 2024 - Hillwood Yang + + - Update version to 5.15.1 + * feat: RandomStrategy AliveOnly + * Improve container image tags and timestamp + * Add delay_auth_write to Socks5 Client Advanced Config + * Add MaxMin TLS version support in TLS Setting + * feat: RandomStrategy AliveOnly + * Improve container image tags and timestamp + * Fixed an encrypted traffic's malleable vulnerability that allow + integrity corruption by an attacker with a privileged network + position to silently drop segments of traffic from an encrypted + traffic stream. + * Update documents + * Fix bugs +- Update vendor, fix CVE-2024-22189 boo#1222488 + +------------------------------------------------------------------- +Sun Dec 3 08:38:20 UTC 2023 - Hillwood Yang + +- Update version to 5.12.1 + * Shadowsocks2022 Client Support + * Apply DomainStrategy to outbound target + * Add DomainStrategy to JSONv5 outbound + * Add sniffing for TUN + * Add HTTPUpgrade transport + * It is a reduced version of WebSocket Transport that can pass many + reverse proxies and CDNs without running a WebSocket protocol stack + * TUN Support + * Add uTLS support for h2 transport + * Fix bugs + +------------------------------------------------------------------- +Sun Oct 8 13:35:54 UTC 2023 - Hillwood Yang + +- Update version to 5.8.0 + * DNS over QUIC should not have "http/1.1" and "h2" ALPNs + * Migrate to quic-go v0.36.0 + * Fix: parse for the CipherType of Shadowsocks in simplified config + * Fix protocol matching in routing + * Fix CI breakage in 5.7.0 +- Build by golang 1.20, workaround build error on golang 1.21 + +------------------------------------------------------------------- +Sun Jun 25 03:13:08 UTC 2023 - opensuse-packaging + +- Drop vendor in filelist + +------------------------------------------------------------------- +Mon Jun 12 06:34:21 UTC 2023 - opensuse-packaging + +- Update version to 5.7.0 + * meek: a new transport protocol meek is added. + * HTTP Proxy Add h1SkipWaitForReply Option to HTTP Proxy Protocol + * set v2ray binary as an entrypoint in container images + * Add Integrated Container Image Building + * Skip validating on empty http host config + * Add PacketAddr support to Trojan + * DomainStrategy support for all outbounds + * Add an option to replace destination address in access log with sniffed domain + * uTLS uTLS ALPN Control + * uTLS New Security Type uTLS: TLS Client Hello imitation + * DNS Support per-client configuration + * DNS Support specifying domain matcher + * Add bind to device to Windows and Darwin + * Replace default Health Ping URL to HTTPS for burst observatory + * Implement Match and MatchAny for all MatcherGroup + * Fix bugs + +------------------------------------------------------------------- +Thu Jan 5 12:42:50 UTC 2023 - opensuse-packaging + +- Fix service command: "run" is required in v2ray 5.x + +------------------------------------------------------------------- +Thu Dec 29 14:23:37 UTC 2022 - Marguerite Su + +- Update version to 5.2.0 + * New Features + + uTLS New Security Type uTLS: TLS Client Hello imitation. + Only client without transport, or with websocket transport is + currently supported. + + DNS Support per-client configuration + + DNS Support specifying domain matcher + + Replace default Health Ping URL to HTTPS + + Implement Match and MatchAny for all MatcherGroup, IndexMatcher + * Fixes + + Fix typo in error message + + Support domain string validation + + Charset of ACAutomationMatcherGroup should accept all ASCII characters + + Fix logic of domain override + + Fix HTTP sniff + + Fix config merger fixes + + Fix selectLeastLoad() returns wrong number of nodes + + Fix(freebsd): ReadUDPMsg nil pointer + + fix: socks4/4a client handshake + + Add transport original name to listen unix + + fix Replace "math/rand" with "crypto/rand" in padding generation + + Fix remove v2ctl from debian/rules + + Fix getting shared flags for balance info command + + Fix erroneous prefix checking + + Fix json.Reader: fill output bytes as much as possible + + Guard against nil pointer dereference of (*NetworkList) + * Chores + + Add tests for idn support + + Refactor: replace netaddr package with netipx + +------------------------------------------------------------------- +Sat Dec 25 14:01:53 UTC 2021 - opensuse-packaging + +- Update version to 4.44.0 + * Fix DoS attack vulnerability in CommandSwitchAccountFactory. (@geeknik) + * Apply timeout to DNS outbound. (#1330 @nekohasekai) + +------------------------------------------------------------------- +Wed Dec 1 08:11:01 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * v2ray.service + * v2ray@.service + +------------------------------------------------------------------- +Thu Nov 11 02:55:40 UTC 2021 - opensuse-packaging + +- Update version to 4.43.0 + * Send Shadowsocks handshake with payload data if available + * Custom TCP Fast Open queue length support + * Fix Trojan fallback cannot get ALPN + * Fix QueryStrategy ignored + * Fix UDP connection transport connection terminated unnecessarily + * refactor: move from io/ioutil to io and os package + * Fix some tests to use udp.PickPort() + * Fix flaky TestVMessDynamicPort + +------------------------------------------------------------------- +Tue Sep 21 13:38:23 UTC 2021 - opensuse-packaging + +- Update to 4.42.2 + * TLS: support client certificate authentication #1169 Thanks @qq906907952 + * Socks: support 4/4a version of the socks protocol (#1269 Thanks @nekohasekai) + * DNS: add option disableFallbackIfMatch for DNS (#1270 Thanks @nekohasekai) + * DoQ(DNS over QUIC) local mode supports IP destination + (#1226 Thanks @AkinoKaede) + * Observatory will now probe outbounds in a deterministic order + (#1230 Thanks @digglife) + * DNS response will respect request type(like AAAA, A) + (#1235 Thanks @AkinoKaede) + * Fix typo in DNS log output (#1183 Thanks @rurirei) + * Fix typo in observatory log output (#1211 Thanks @ihotte) + * Fix version string not updated to match release version + * Fix IP length not deterministic (#1267 Thanks @Loyalsoldier) + * Fix HTTP outbound not respect socket config (#1264 Thanks @Vigilans) + * Fix sockopt.mark type (#1264 Thanks @Vigilans) + * Fix typo in browser forwarder error message +- Update in 4.41.1 + * VMess: Added 2 VMess experiments AuthenticatedLength and NoTerminationSignal + #940 Thanks @RPRX + * Hardening Draining connection at client side when receiving invalid data. + #940 Thanks @RPRX + * Observatory Support custom probe interval and probe URL. Thanks @nekohasekai + * Fixed connection stability issue when in h2, grpc transport. + #1059 #1058 #1056 Thanks @IRN-Kawakaze @architecturers @lijinglin3 + * Further fixed connection stability issue when in h2, grpc transport. + check https://github.com/v2fly/v2ray-core/releases/tag/v4.41.1 for more info +- Update in 4.40.1 + * DNS: support DNS over TCP. #983 Thanks @AkinoKaede + * Fix: new cert issuing is incorrectly delayed. #998 Thanks @bhoppi + +------------------------------------------------------------------- +Wed Jun 2 08:15:09 UTC 2021 - opensuse-packaging + +- Update version to 4.39.2 + * Websocket: support header based Websocket early data & its partial browser + forwarder support + * GeoData: add a memory efficient geodata decoder called memconservative for + memory-limited devices #934 #953 #964 #965 #967 #977 Thanks @Loyalsoldier @rurirei + * HTTP/2 Transport: support to set method and headers for outgoing connections + * TCP Socket Option: support to set keepalive interval on Linux operating system + #962 Thanks @therealak12 + * Fix BrowserForwarder panics with empty config (#954) Thanks @AkinoKaede + @Loyalsoldier + * Fix FakeDNS prints error with empty config (#955) Thanks @Loyalsoldier + * Fix Dual stack FakeDNS Close method (#956) Thanks @Loyalsoldier + * Fix Observatory starts with empty config & fails to close (#957) Thanks + @Loyalsoldier + * Fix Null check on alternative system dialer (#959) Thanks @rurirei + * Fixed the chain proxy support for gRPC and HTTP/2 transport + * Fixed leastping logic (#1019) Thanks @fanyiguang + * Fixed v2ctl unable to create geodata loaders (#1014) Thanks @ght99 +- Update in 4.38.3 + - FakeDNS: Added fakedns+others sniffer , based on #697 . Thanks @yuhan6665 + - TLS: A SECURITY improvement that allow the remote peer's TLS certificate + to be pinned to a known value. Document for TLS is updated + - Observatory: A component that measure the connectivity of selected outbounds + The document for Observatory is updated. + - Routing : leastPing balancing strategy is added. This strategy will select + a outbound that is alive and completed HTTPS GET request in the least time. + The document for Routing is updated. + - Fixed crashing in fake dns. #931 Thanks @IceCodeNew + - Added IPv6 pool in fake dns by default. #925 Thanks @Loyalsoldier + - Return ErrEmptyResponse for fakedns. #926 Thanks @sixg0000d + - Fixed UDP DNS connection cause crash. Thanks @nekohasekai + - Fixed two typo in comments. Thanks @U-v-U + * Multi-json support for observatory, browser forwarder. + #944 Thanks @ha-ku @AkinoKaede +- Add browserforwarder related v2ray-extra.zip + +------------------------------------------------------------------- +Thu Apr 15 06:11:12 UTC 2021 - opensuse-packaging + +- update version to 4.37.3 + * Add multiple address host support for DNS (#884 #886 #888) + * Fix geoiop & geosite load issue (#889) +- update in 4.37.2 + * Add browser forwarder support for Websocket (#818) + * Add Websocket 0-RTT early data support (#818) + * Add replay protection for Shadowsocks proxy (#777) + * Add queryStrategy option for DNS (#794) + * Add disableFallback & skipFallback option for DNS client (#864) + * Add inversed GeoIP matching (#860) + * Add grpcSettings & gunSettings to streamSettings (00879c4) @rprx + * Fix vprotogen loop dependency (#797) @Loyalsoldier @U-v-U + * Fix DNS tests timeout due to network instability (#805) @Loyalsoldier + * Remove AA header flag in DNS query (#817) @Loyalsoldier + * TProxy: cannot find IPv6 destination in redirect mode (#815) @mzz2017 + * Context: ctx initialization for core.functions (#841) @rurirei + * Set FakeDNS FakeEnable option dynamically (#879) @sixg0000d @Loyalsoldier + * Fix Websocket early data 404 bug (#859) @k79e + * Fix QUIC: disconnect due to timeout (#850) @bhoppi + * Log: remove package path prefix in logs (#840 0138017 78c1993) @kslr +- update in 4.36.2 + * Fix gRPC max delay unintentionally low (1eaec68) @xiaokangwang + * Fix core panics when zero domain/full type of rule (#786) @darsvador +- update in 4.36.1 + * Add gRPC/gun transport (#757 #783) + * Add loopback proxy (#770) + * Add a new efficient routing rule matcher MphDomainMatcher (#743) + * FakeDNS: use 198.18.0.0/15 as default FakeDNS IP pool (#779) +- update build needed golang version to 1.16 +- keep go.sum go.mod to fix build issue with 'matched no packages' +- add geo files manually since upstream removed them from source + +------------------------------------------------------------------- +Tue Mar 9 10:26:12 UTC 2021 - opensuse-packaging + +- update version to 4.35.1 + * Add support for FakeDNS (#395 #406 #696) @yuhan6665 + * Add streamSetting / transport support for outbound front proxy + * Add zero pseudo encryption for better performance VMess + * Add support to disable compatibility for legacy VMess MD5 (#596) @dyhkwong + * Add a faster and more memory-efficient routing rule matcher + HybridDomainMatcher (#587 #639) @darsvador + * Add support to disable DNS cache (#699 #705) @CalmLong + * Fix test HTTP/2 dial timeout (#570) @kslr + * Fix Trojan panic when UDP dispatcher fails to write response (#599) @maskedeken + * Fix TCP default ALPN (#716) @AkinoKaede + * Fix DNS rule index out of range (#727) @Loyalsoldier + Check https://github.com/v2fly/v2ray-core/releases/tag/v4.35.1 for more info +- update import path to github.com/v2fly/v2ray-core/v4 + +------------------------------------------------------------------- +Sat Jan 9 01:37:48 UTC 2021 - opensuse-packaging + +- update version to 4.34.0 + * Disable TLS Session Resumption by default + * Remove legacy Shadowsocks unsecure stream ciphers + * Add preliminary support for DNS over QUIC + +------------------------------------------------------------------- +Tue Dec 29 13:11:50 UTC 2020 - opensuse-packaging + +- Rename golang-github-v2ray-v2ray-core to golang-github-v2fly-v2ray-core +- Update vendor. + +------------------------------------------------------------------- +Wed Nov 25 15:31:22 UTC 2020 - opensuse-packaging + +- update to version 4.33.0 + * Remove XTLS + * API: Reflection Service Support @Vigilans + * Update to IETF QUIC draft-32 +- update in 4.32.1 + * VLESS XTLS Direct Mode ReadV Experiment + * Disable 0-RTT mechanism for HTTP/1.x outbound + * Set default alterId to 0 for VMess dynamic ports + +------------------------------------------------------------------- +Sun Nov 1 12:26:08 UTC 2020 - opensuse-packaging + +- update version to 4.32.0 + * loads JSON internally by default @forever8938 + * Refine UNIX domain socket @lucifer9 + * Fix mKCP sending window @p4gefau1t + * Fix JSON parsing dependency introduced by mutijson config @xiaokangwang + * Fix proto.go ProtoFilesUsingProtocGenGoFast on Windows @JimhHan +- other changes before this version + * Add full VLESS fallbacks support to Trojan + * Add Trojan over XTLS support @maskedeken + * Add XTLS Direct Mode + * Add XTLS support to mKCP + * Add padding to abstract UNIX domain socket in fallbacks + * Add XTLS support to DomainSocket @rprx + +------------------------------------------------------------------- +Mon Sep 28 08:35:06 UTC 2020 - opensuse-packaging + +- Update version to 4.29.0 + * Fix issue#202 + * Fix issue#203 + * Routing: Implement Route interface as the routing result of Router + * kcp: removing annoying NewAEADAESGCMBasedOnSeed hint + * Make isAEAD more efficient + * Golangci-lint: disable some plugins + * Add XTLS support + * CodeQL: do NOT run on ready for review status + +------------------------------------------------------------------- +Sat Sep 12 10:48:05 UTC 2020 - opensuse-packaging + +- Update version to 4.28.1 + * Fix incorrect IV usage which slightly reduced security + +------------------------------------------------------------------- +Fri Sep 11 08:42:39 UTC 2020 - opensuse-packaging + +- Update version to 4.28.0 + * Changes + - VMess AEAD will be used when alterId is 0. ("testsEnabled" is discarded) + * Fixes + - Fix dns tests by setting v2ray.location.asset @felixonmars + - fix abstract UDS & add PROXY protocol support to DS inbound @lucifer9 @rprx + - Systemd: prevent restart on corrupt config @DuckSoft + * Chores + - Upgrade all dependencies @rprx + - Change lint order to avoid file changes notice @Loyalsoldier + - Update geoip, geosite + +------------------------------------------------------------------- +Wed Sep 2 10:34:41 UTC 2020 - opensuse-packaging + +- Update version to 4.27.5 + * Features + - Parse X-Forwarded-For in http transport @lucifer9 + * Fix + - Fix according to staticcheck result @Loyalsoldier + - Fix: Bound check when accessing DNS server's ipIndexMap @Vigilans + - Refine code @Loyalsoldier + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 + +------------------------------------------------------------------- +Sat Aug 29 03:26:28 UTC 2020 - opensuse-packaging + +- Update version to 4.27.4 + * Features + - Dotless domain support in built-in DNS @Vigilans + - Support source port matching in routing config @Vigilans + - Make HTTP outbound 0-rtt @darhwa + - Add asset location auto search @vcptr + - Add PROXY protocol support to TCP & WebSocket inbound @lucifer9 and @rprx + - VLESS PREVIEW 1.5 @rprx + * Fixs + - Amending domain matcher with returning array of all matches @Vigilans + - Refactor DNS Server to record original rule of domain matchers @Vigilans + - New Systemd unit file @dctxmei + - Fix: logging empty rules & DNS @Loyalsoldier + - Fix a typo @dikaixu1999 + - Shadowsocks Detection defense @studentmain and @xiaokangwang + - Update Old file @Loyalsoldier + * Breaking Changes + - VLESS fallback -> fallbacks, + see https://www.v2fly.org/config/protocols/vless.html + - Route matching order changes + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 +- Update in 4.27.0 + * Feature + - VLESS PREVIEW 1.3 https://www.v2fly.org/config/protocols/vless.html + * Fix + - Shadowsocks supports cipher as None @yuhan6665 + - Add access log for Dokodemo inbound @lucifer9 + - Some typo fixes @DuckSoft + - Add Linux riscv64 release @rprx + - Fix the error of missing curl in Dockerfile @kallydev + - GitHub Actions push to docker hub @kallydev + - Optimize SO_REUSEPORT implementation @Vigilans + - DOH supports HTTP/2 @darhwa + - Apply Sockopt from inbound config to Dokodemo Tproxy's response connection + @Vigilans + * Breaking Change + - VMessAEAD has been updated and needs both client and server to be the same + version for it to work. + - Release file structure changes. + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 + +------------------------------------------------------------------- +Sun Aug 2 09:20:46 UTC 2020 - Sam Yu + +- Fix out-of-box usability + +------------------------------------------------------------------- +Fri Jul 10 14:05:15 UTC 2020 - opensuse-packaging + +- Update version to 4.26.0 + * Update Signing key + * Update geoip, geosite + * Fix bug with tag name extract + * Generate Manifest for bleeding edge release + * Adjust arm build + * Allow the use of Browser Bridge + +------------------------------------------------------------------- +Thu Jun 25 15:09:25 UTC 2020 - Jan Engelhardt + +- Update summary with something useful. Trim filler wording + from description. + +------------------------------------------------------------------- +Sun Jun 21 09:05:14 UTC 2020 - opensuse-packaging + +- Update version to 4.25.0 + * VMess's new header format experiment begins. You can now enable VMessAEAD to + be better protected. Documents EN CH are updated. See extra-VMessAEADdoc.zip + for a more detailed explanation available in both Chinese and English. + * mKCP can now be encrypted to resist recognition, address issue mentioned in + #2530 #2253 #2131. Documents EN CH are updated. + * Updated Golang tool-chain. Thanks @rprx + * LocalAddr() in UDP workers will now return correct local addr. Thanks + @zhuobixin + * Further remove the identity leakage with TLS ClientHello from #2521 thank + @darhwa + * Fix UDP stability issue in Socks5 inbound, Shadowsocks inbound, and + Dokodemo( TProxy ) inbound. This should alleviate unnecessary CPU, memory + usage, and premature disconnection issue typically triggered by playing + games, video conference, and Torrenting. See #2565 thank @JimHan75d8c5 + @xiaokangwang and Other testers @1265578519 @zhj9709 @Kylejustknows etc + * Added ARM v5 binary in the release. This should allow legacy ARM devices to + run V2Ray correctly. See #2536 + +------------------------------------------------------------------- +Sun Jun 7 02:44:52 UTC 2020 - opensuse-packaging + +- initial package for version 4.23.4 diff --git a/v2ray-core.spec b/v2ray-core.spec new file mode 100644 index 0000000..7b26296 --- /dev/null +++ b/v2ray-core.spec @@ -0,0 +1,134 @@ +# +# spec file for package v2ray-core +# +# Copyright (c) 2025 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +%define provider github +%define provider_tld com +%define project v2fly +%define repo v2ray-core +# https://github.com/v2fly/v2ray-core +%define provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo} +%define import_path github.com/v2fly/v2ray-core/v5 + +Name: v2ray-core +Version: 5.29.3 +Release: 0 +Summary: Network tools for building a computer network +License: MIT +Group: Productivity/Networking/Web/Proxy +URL: https://github.com/v2fly/v2ray-core +Source0: https://github.com/v2fly/v2ray-core/archive/v%{version}/%{name}-%{version}.tar.gz +Source1: vendor.tar.gz +Source2: v2ray.service +Source3: v2ray@.service +Source4: https://github.com/v2fly/geoip/raw/release/geoip.dat +Source5: https://github.com/v2fly/domain-list-community/raw/release/dlc.dat +Source6: https://github.com/v2fly/v2ray-core/releases/download/v%{version}/v2ray-extra.zip +Source99: %{name}-rpmlintrc +BuildRequires: fdupes +BuildRequires: golang-packaging +BuildRequires: systemd-rpm-macros +BuildRequires: unzip +BuildRequires: pkgconfig(systemd) +AutoReqProv: Off +Provides: v2ray = %{version}-%{release} +Obsoletes: v2ray < %{version}-%{release} +BuildRoot: %{_tmppath}/%{name}-%{version}-build +%{go_provides} +%{?systemd_ordering} + +%description +Project V is a set of network tools for building a computer network. +It secures network connections and protects privacy. + +%package -n golang-%{provider}-%{project}-%{repo} +Summary: Additional mobile libraries +Group: Development/Languages/Golang +BuildArch: noarch + +%description -n golang-%{provider}-%{project}-%{repo} +Project V is a set of network tools for building a computer network. +It secures network connections and protects privacy. + +This package provide source code for %{repo} + +%prep +%setup -q -a1 -a6 -n %{repo}-%{version} + +%build +export GO111MODULE=off +%goprep %{import_path} +%gobuild main... +mv %{_builddir}/go/bin/main %{_builddir}/go/bin/v2ray + +%install +%goinstall +%gosrc +rm -rf %{buildroot}%{go_contribsrcdir}/%{import_path}/vendor +%gofilelist + +install -d %{buildroot}%{_datadir}/v2ray +install -m0644 %{SOURCE4} %{buildroot}%{_datadir}/v2ray/geoip.dat +install -m0644 %{SOURCE5} %{buildroot}%{_datadir}/v2ray/geosite.dat + +install -d %{buildroot}%{_unitdir} +install -m0644 %{SOURCE2} %{buildroot}%{_unitdir}/ +install -m0644 %{SOURCE3} %{buildroot}%{_unitdir}/ + +install -d %{buildroot}%{_sysconfdir}/v2ray +install -m0644 release/config/*.json %{buildroot}%{_sysconfdir}/v2ray/ + +install -d %{buildroot}%{_sbindir}/ +ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rcv2ray + +install -d %{buildroot}%{_datadir}/v2ray/browserforwarder +install -m0644 browserforwarder/index.js %{buildroot}%{_datadir}/v2ray/browserforwarder/ +install -m0644 browserforwarder/index.html %{buildroot}%{_datadir}/v2ray/browserforwarder/ + +%fdupes %{buildroot} + +%pre +%service_add_pre v2ray.service v2ray@.service + +%post +%service_add_post v2ray.service v2ray@.service + +%preun +%service_del_preun v2ray.service v2ray@.service + +%postun +%service_del_postun v2ray.service v2ray@.service + +%files +%doc README.md +%license LICENSE +%{_bindir}/v2ray +%{_bindir}/v2api +%{_unitdir}/v2ray.service +%{_unitdir}/v2ray@.service +%dir %{_sysconfdir}/v2ray +%dir %{_datadir}/v2ray +%{_datadir}/v2ray/* +%config(noreplace) %{_sysconfdir}/v2ray/*.json +%{_sbindir}/rcv2ray +%{_datadir}/v2ray/browserforwarder/ + +%files -n golang-%{provider}-%{project}-%{repo} -f file.lst +%doc README.md +%license LICENSE + +%changelog diff --git a/v2ray-extra.zip b/v2ray-extra.zip new file mode 100644 index 0000000..b212bbf --- /dev/null +++ b/v2ray-extra.zip @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:a4ac9ad0c16c8abaaee78bec038fb22ff6a8f448489759745dfad2af34c65659 +size 296846 diff --git a/v2ray.service b/v2ray.service new file mode 100644 index 0000000..a0f9517 --- /dev/null +++ b/v2ray.service @@ -0,0 +1,30 @@ +[Unit] +Description=V2Ray Service +Documentation=https://www.v2fly.org/ +After=network.target nss-lookup.target + +[Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions +User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true +Environment=V2RAY_LOCATION_ASSET=/usr/share/v2ray +ExecStart=/usr/bin/v2ray run -config /etc/v2ray/config.json +Restart=on-failure +RestartPreventExitStatus=23 + +[Install] +WantedBy=multi-user.target diff --git a/v2ray@.service b/v2ray@.service new file mode 100644 index 0000000..30b9843 --- /dev/null +++ b/v2ray@.service @@ -0,0 +1,30 @@ +[Unit] +Description=V2Ray Service +Documentation=https://www.v2fly.org/ +After=network.target nss-lookup.target + +[Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions +User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true +Environment=V2RAY_LOCATION_ASSET=/usr/share/v2ray +ExecStart=/usr/bin/v2ray run -config /etc/v2ray/%i.json +Restart=on-failure +RestartPreventExitStatus=23 + +[Install] +WantedBy=multi-user.target diff --git a/vendor.tar.gz b/vendor.tar.gz new file mode 100644 index 0000000..1f70025 --- /dev/null +++ b/vendor.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:a2d32abc709a49b6721aba9c0411dfedad8230479dd9cbddc8e10dbbe43044f2 +size 48291840 -- 2.51.1 From 2d09259182affcad2c5f9c8ecd369f9244b9aeb54d5cc228744e2323ee3d7ed8 Mon Sep 17 00:00:00 2001 From: Hillwood Yang Date: Sun, 4 May 2025 11:59:07 +0000 Subject: [PATCH 3/6] - Update version to 5.31.0 * Add Dns Proxy Response TTL Control * Fix call newError Base with a nil value error * Update vendor (boo#1235164) OBS-URL: https://build.opensuse.org/package/show/server:proxy/v2ray-core?expand=0&rev=58 --- .gitattributes | 26 ++ .gitignore | 1 + dlc.dat | 3 + geoip.dat | 3 + v2ray-core-5.16.1.tar.gz | 3 + v2ray-core-5.18.0.tar.gz | 3 + v2ray-core-5.22.0.tar.gz | 3 + v2ray-core-5.29.3.tar.gz | 3 + v2ray-core-5.31.0.tar.gz | 3 + v2ray-core-rpmlintrc | 2 + v2ray-core.changes | 501 +++++++++++++++++++++++++++++++++++++++ v2ray-core.spec | 134 +++++++++++ v2ray-extra.zip | 3 + v2ray.service | 30 +++ v2ray@.service | 30 +++ vendor.tar.gz | 3 + 16 files changed, 751 insertions(+) create mode 100644 .gitattributes create mode 100644 .gitignore create mode 100644 dlc.dat create mode 100644 geoip.dat create mode 100644 v2ray-core-5.16.1.tar.gz create mode 100644 v2ray-core-5.18.0.tar.gz create mode 100644 v2ray-core-5.22.0.tar.gz create mode 100644 v2ray-core-5.29.3.tar.gz create mode 100644 v2ray-core-5.31.0.tar.gz create mode 100644 v2ray-core-rpmlintrc create mode 100644 v2ray-core.changes create mode 100644 v2ray-core.spec create mode 100644 v2ray-extra.zip create mode 100644 v2ray.service create mode 100644 v2ray@.service create mode 100644 vendor.tar.gz diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..4f0e993 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,26 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text +## Specific LFS patterns +dlc.dat filter=lfs diff=lfs merge=lfs -text +geoip.dat filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/dlc.dat b/dlc.dat new file mode 100644 index 0000000..98a0996 --- /dev/null +++ b/dlc.dat @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:6c69c83e0d9ee39cb0674515ce1668a411b9824a1c6314291d77bc83cd0c6d56 +size 2245011 diff --git a/geoip.dat b/geoip.dat new file mode 100644 index 0000000..216f284 --- /dev/null +++ b/geoip.dat @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:735786c00694313090c5d525516463836167422b132ce293873443613b496e92 +size 21013265 diff --git a/v2ray-core-5.16.1.tar.gz b/v2ray-core-5.16.1.tar.gz new file mode 100644 index 0000000..89fd3a8 --- /dev/null +++ b/v2ray-core-5.16.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e5d61b97168ebdf6da3d672ab40abe5b22951d46997072ca1ee497a3aa47ba05 +size 1036374 diff --git a/v2ray-core-5.18.0.tar.gz b/v2ray-core-5.18.0.tar.gz new file mode 100644 index 0000000..b7b25f2 --- /dev/null +++ b/v2ray-core-5.18.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:15acf65228867d47dcab27f87af048a2f0e6ed5d347a2e68730d30ae2a3871eb +size 1064425 diff --git a/v2ray-core-5.22.0.tar.gz b/v2ray-core-5.22.0.tar.gz new file mode 100644 index 0000000..acae025 --- /dev/null +++ b/v2ray-core-5.22.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:df25a873c8f7fb30f44cb6d26b18db264dfa209df5aeb6116fc43df7157fb4b8 +size 1072762 diff --git a/v2ray-core-5.29.3.tar.gz b/v2ray-core-5.29.3.tar.gz new file mode 100644 index 0000000..6536ff4 --- /dev/null +++ b/v2ray-core-5.29.3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f2a2eb4c835a99339746eaadbb1c88b4dcd022aa6d801ca44936be36f3ed027a +size 1126423 diff --git a/v2ray-core-5.31.0.tar.gz b/v2ray-core-5.31.0.tar.gz new file mode 100644 index 0000000..5af59c1 --- /dev/null +++ b/v2ray-core-5.31.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:20895d4200d3b7906a3fba90690cc2e27239989acc9c31601f40f2f71827e2e5 +size 1127230 diff --git a/v2ray-core-rpmlintrc b/v2ray-core-rpmlintrc new file mode 100644 index 0000000..bafb361 --- /dev/null +++ b/v2ray-core-rpmlintrc @@ -0,0 +1,2 @@ +# Please refer https://en.opensuse.org/openSUSE:Packaging_Go +addFilter("devel-file-in-non-devel-package") diff --git a/v2ray-core.changes b/v2ray-core.changes new file mode 100644 index 0000000..cf3f678 --- /dev/null +++ b/v2ray-core.changes @@ -0,0 +1,501 @@ +------------------------------------------------------------------- +Sun May 4 08:35:24 UTC 2025 - Hillwood Yang + +- Update version to 5.31.0 + * Add Dns Proxy Response TTL Control + * Fix call newError Base with a nil value error + * Update vendor (boo#1235164) + +------------------------------------------------------------------- +Sun Apr 6 04:47:00 UTC 2025 - Marguerite Su + +- Update version to 5.29.3 + * Enable restricted mode load for http protocol client + * Correctly implement QUIC sniffer when handling multiple initial packets + * Fix unreleased cache buffer in QUIC sniffing + * A temporary testing fix for the buffer corruption issue + * QUIC Sniffer Restructure + +------------------------------------------------------------------- +Fri Nov 22 12:44:43 UTC 2024 - Hillwood Yang + +- Update version to 5.22.0 + * Add packetEncoding for Hysteria + * Add ECH Client Support + * Add support for parsing some shadowsocks links + * Add Mekya Transport + * Fix bugs + +------------------------------------------------------------------- +Fri Sep 13 12:02:49 UTC 2024 - Hillwood Yang + +- Update version to 5.18.0 + * Add timeout for http request roundtripper + * Fix ss2022 auth reader size overflow + * Add pie build mode to all binary builds + * Support "services" root config in cfgv4 + * packet_encoding for config v4 + * add MPTCP support + * Add (Experimental) Meyka Building Blocks to request Transport + * Add timeout for http request roundtripper + * Hysteria2: Add Hysteria2 Protocol + * Add AllowInsecureIfPinnedPeerCertificate option to tls security + * Add tls certChainHash command + * add support for socket activation + * Add pprof flag for debugging + * Fix bugs + +------------------------------------------------------------------- +Sun Jun 16 08:21:52 UTC 2024 - Hillwood Yang + +- Update version to 5.16.1 + * Add Keep-Alive to removed headers + +------------------------------------------------------------------- +Sun Apr 14 13:08:52 UTC 2024 - Hillwood Yang + + - Update version to 5.15.1 + * feat: RandomStrategy AliveOnly + * Improve container image tags and timestamp + * Add delay_auth_write to Socks5 Client Advanced Config + * Add MaxMin TLS version support in TLS Setting + * feat: RandomStrategy AliveOnly + * Improve container image tags and timestamp + * Fixed an encrypted traffic's malleable vulnerability that allow + integrity corruption by an attacker with a privileged network + position to silently drop segments of traffic from an encrypted + traffic stream. + * Update documents + * Fix bugs +- Update vendor, fix CVE-2024-22189 boo#1222488 + +------------------------------------------------------------------- +Sun Dec 3 08:38:20 UTC 2023 - Hillwood Yang + +- Update version to 5.12.1 + * Shadowsocks2022 Client Support + * Apply DomainStrategy to outbound target + * Add DomainStrategy to JSONv5 outbound + * Add sniffing for TUN + * Add HTTPUpgrade transport + * It is a reduced version of WebSocket Transport that can pass many + reverse proxies and CDNs without running a WebSocket protocol stack + * TUN Support + * Add uTLS support for h2 transport + * Fix bugs + +------------------------------------------------------------------- +Sun Oct 8 13:35:54 UTC 2023 - Hillwood Yang + +- Update version to 5.8.0 + * DNS over QUIC should not have "http/1.1" and "h2" ALPNs + * Migrate to quic-go v0.36.0 + * Fix: parse for the CipherType of Shadowsocks in simplified config + * Fix protocol matching in routing + * Fix CI breakage in 5.7.0 +- Build by golang 1.20, workaround build error on golang 1.21 + +------------------------------------------------------------------- +Sun Jun 25 03:13:08 UTC 2023 - opensuse-packaging + +- Drop vendor in filelist + +------------------------------------------------------------------- +Mon Jun 12 06:34:21 UTC 2023 - opensuse-packaging + +- Update version to 5.7.0 + * meek: a new transport protocol meek is added. + * HTTP Proxy Add h1SkipWaitForReply Option to HTTP Proxy Protocol + * set v2ray binary as an entrypoint in container images + * Add Integrated Container Image Building + * Skip validating on empty http host config + * Add PacketAddr support to Trojan + * DomainStrategy support for all outbounds + * Add an option to replace destination address in access log with sniffed domain + * uTLS uTLS ALPN Control + * uTLS New Security Type uTLS: TLS Client Hello imitation + * DNS Support per-client configuration + * DNS Support specifying domain matcher + * Add bind to device to Windows and Darwin + * Replace default Health Ping URL to HTTPS for burst observatory + * Implement Match and MatchAny for all MatcherGroup + * Fix bugs + +------------------------------------------------------------------- +Thu Jan 5 12:42:50 UTC 2023 - opensuse-packaging + +- Fix service command: "run" is required in v2ray 5.x + +------------------------------------------------------------------- +Thu Dec 29 14:23:37 UTC 2022 - Marguerite Su + +- Update version to 5.2.0 + * New Features + + uTLS New Security Type uTLS: TLS Client Hello imitation. + Only client without transport, or with websocket transport is + currently supported. + + DNS Support per-client configuration + + DNS Support specifying domain matcher + + Replace default Health Ping URL to HTTPS + + Implement Match and MatchAny for all MatcherGroup, IndexMatcher + * Fixes + + Fix typo in error message + + Support domain string validation + + Charset of ACAutomationMatcherGroup should accept all ASCII characters + + Fix logic of domain override + + Fix HTTP sniff + + Fix config merger fixes + + Fix selectLeastLoad() returns wrong number of nodes + + Fix(freebsd): ReadUDPMsg nil pointer + + fix: socks4/4a client handshake + + Add transport original name to listen unix + + fix Replace "math/rand" with "crypto/rand" in padding generation + + Fix remove v2ctl from debian/rules + + Fix getting shared flags for balance info command + + Fix erroneous prefix checking + + Fix json.Reader: fill output bytes as much as possible + + Guard against nil pointer dereference of (*NetworkList) + * Chores + + Add tests for idn support + + Refactor: replace netaddr package with netipx + +------------------------------------------------------------------- +Sat Dec 25 14:01:53 UTC 2021 - opensuse-packaging + +- Update version to 4.44.0 + * Fix DoS attack vulnerability in CommandSwitchAccountFactory. (@geeknik) + * Apply timeout to DNS outbound. (#1330 @nekohasekai) + +------------------------------------------------------------------- +Wed Dec 1 08:11:01 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * v2ray.service + * v2ray@.service + +------------------------------------------------------------------- +Thu Nov 11 02:55:40 UTC 2021 - opensuse-packaging + +- Update version to 4.43.0 + * Send Shadowsocks handshake with payload data if available + * Custom TCP Fast Open queue length support + * Fix Trojan fallback cannot get ALPN + * Fix QueryStrategy ignored + * Fix UDP connection transport connection terminated unnecessarily + * refactor: move from io/ioutil to io and os package + * Fix some tests to use udp.PickPort() + * Fix flaky TestVMessDynamicPort + +------------------------------------------------------------------- +Tue Sep 21 13:38:23 UTC 2021 - opensuse-packaging + +- Update to 4.42.2 + * TLS: support client certificate authentication #1169 Thanks @qq906907952 + * Socks: support 4/4a version of the socks protocol (#1269 Thanks @nekohasekai) + * DNS: add option disableFallbackIfMatch for DNS (#1270 Thanks @nekohasekai) + * DoQ(DNS over QUIC) local mode supports IP destination + (#1226 Thanks @AkinoKaede) + * Observatory will now probe outbounds in a deterministic order + (#1230 Thanks @digglife) + * DNS response will respect request type(like AAAA, A) + (#1235 Thanks @AkinoKaede) + * Fix typo in DNS log output (#1183 Thanks @rurirei) + * Fix typo in observatory log output (#1211 Thanks @ihotte) + * Fix version string not updated to match release version + * Fix IP length not deterministic (#1267 Thanks @Loyalsoldier) + * Fix HTTP outbound not respect socket config (#1264 Thanks @Vigilans) + * Fix sockopt.mark type (#1264 Thanks @Vigilans) + * Fix typo in browser forwarder error message +- Update in 4.41.1 + * VMess: Added 2 VMess experiments AuthenticatedLength and NoTerminationSignal + #940 Thanks @RPRX + * Hardening Draining connection at client side when receiving invalid data. + #940 Thanks @RPRX + * Observatory Support custom probe interval and probe URL. Thanks @nekohasekai + * Fixed connection stability issue when in h2, grpc transport. + #1059 #1058 #1056 Thanks @IRN-Kawakaze @architecturers @lijinglin3 + * Further fixed connection stability issue when in h2, grpc transport. + check https://github.com/v2fly/v2ray-core/releases/tag/v4.41.1 for more info +- Update in 4.40.1 + * DNS: support DNS over TCP. #983 Thanks @AkinoKaede + * Fix: new cert issuing is incorrectly delayed. #998 Thanks @bhoppi + +------------------------------------------------------------------- +Wed Jun 2 08:15:09 UTC 2021 - opensuse-packaging + +- Update version to 4.39.2 + * Websocket: support header based Websocket early data & its partial browser + forwarder support + * GeoData: add a memory efficient geodata decoder called memconservative for + memory-limited devices #934 #953 #964 #965 #967 #977 Thanks @Loyalsoldier @rurirei + * HTTP/2 Transport: support to set method and headers for outgoing connections + * TCP Socket Option: support to set keepalive interval on Linux operating system + #962 Thanks @therealak12 + * Fix BrowserForwarder panics with empty config (#954) Thanks @AkinoKaede + @Loyalsoldier + * Fix FakeDNS prints error with empty config (#955) Thanks @Loyalsoldier + * Fix Dual stack FakeDNS Close method (#956) Thanks @Loyalsoldier + * Fix Observatory starts with empty config & fails to close (#957) Thanks + @Loyalsoldier + * Fix Null check on alternative system dialer (#959) Thanks @rurirei + * Fixed the chain proxy support for gRPC and HTTP/2 transport + * Fixed leastping logic (#1019) Thanks @fanyiguang + * Fixed v2ctl unable to create geodata loaders (#1014) Thanks @ght99 +- Update in 4.38.3 + - FakeDNS: Added fakedns+others sniffer , based on #697 . Thanks @yuhan6665 + - TLS: A SECURITY improvement that allow the remote peer's TLS certificate + to be pinned to a known value. Document for TLS is updated + - Observatory: A component that measure the connectivity of selected outbounds + The document for Observatory is updated. + - Routing : leastPing balancing strategy is added. This strategy will select + a outbound that is alive and completed HTTPS GET request in the least time. + The document for Routing is updated. + - Fixed crashing in fake dns. #931 Thanks @IceCodeNew + - Added IPv6 pool in fake dns by default. #925 Thanks @Loyalsoldier + - Return ErrEmptyResponse for fakedns. #926 Thanks @sixg0000d + - Fixed UDP DNS connection cause crash. Thanks @nekohasekai + - Fixed two typo in comments. Thanks @U-v-U + * Multi-json support for observatory, browser forwarder. + #944 Thanks @ha-ku @AkinoKaede +- Add browserforwarder related v2ray-extra.zip + +------------------------------------------------------------------- +Thu Apr 15 06:11:12 UTC 2021 - opensuse-packaging + +- update version to 4.37.3 + * Add multiple address host support for DNS (#884 #886 #888) + * Fix geoiop & geosite load issue (#889) +- update in 4.37.2 + * Add browser forwarder support for Websocket (#818) + * Add Websocket 0-RTT early data support (#818) + * Add replay protection for Shadowsocks proxy (#777) + * Add queryStrategy option for DNS (#794) + * Add disableFallback & skipFallback option for DNS client (#864) + * Add inversed GeoIP matching (#860) + * Add grpcSettings & gunSettings to streamSettings (00879c4) @rprx + * Fix vprotogen loop dependency (#797) @Loyalsoldier @U-v-U + * Fix DNS tests timeout due to network instability (#805) @Loyalsoldier + * Remove AA header flag in DNS query (#817) @Loyalsoldier + * TProxy: cannot find IPv6 destination in redirect mode (#815) @mzz2017 + * Context: ctx initialization for core.functions (#841) @rurirei + * Set FakeDNS FakeEnable option dynamically (#879) @sixg0000d @Loyalsoldier + * Fix Websocket early data 404 bug (#859) @k79e + * Fix QUIC: disconnect due to timeout (#850) @bhoppi + * Log: remove package path prefix in logs (#840 0138017 78c1993) @kslr +- update in 4.36.2 + * Fix gRPC max delay unintentionally low (1eaec68) @xiaokangwang + * Fix core panics when zero domain/full type of rule (#786) @darsvador +- update in 4.36.1 + * Add gRPC/gun transport (#757 #783) + * Add loopback proxy (#770) + * Add a new efficient routing rule matcher MphDomainMatcher (#743) + * FakeDNS: use 198.18.0.0/15 as default FakeDNS IP pool (#779) +- update build needed golang version to 1.16 +- keep go.sum go.mod to fix build issue with 'matched no packages' +- add geo files manually since upstream removed them from source + +------------------------------------------------------------------- +Tue Mar 9 10:26:12 UTC 2021 - opensuse-packaging + +- update version to 4.35.1 + * Add support for FakeDNS (#395 #406 #696) @yuhan6665 + * Add streamSetting / transport support for outbound front proxy + * Add zero pseudo encryption for better performance VMess + * Add support to disable compatibility for legacy VMess MD5 (#596) @dyhkwong + * Add a faster and more memory-efficient routing rule matcher + HybridDomainMatcher (#587 #639) @darsvador + * Add support to disable DNS cache (#699 #705) @CalmLong + * Fix test HTTP/2 dial timeout (#570) @kslr + * Fix Trojan panic when UDP dispatcher fails to write response (#599) @maskedeken + * Fix TCP default ALPN (#716) @AkinoKaede + * Fix DNS rule index out of range (#727) @Loyalsoldier + Check https://github.com/v2fly/v2ray-core/releases/tag/v4.35.1 for more info +- update import path to github.com/v2fly/v2ray-core/v4 + +------------------------------------------------------------------- +Sat Jan 9 01:37:48 UTC 2021 - opensuse-packaging + +- update version to 4.34.0 + * Disable TLS Session Resumption by default + * Remove legacy Shadowsocks unsecure stream ciphers + * Add preliminary support for DNS over QUIC + +------------------------------------------------------------------- +Tue Dec 29 13:11:50 UTC 2020 - opensuse-packaging + +- Rename golang-github-v2ray-v2ray-core to golang-github-v2fly-v2ray-core +- Update vendor. + +------------------------------------------------------------------- +Wed Nov 25 15:31:22 UTC 2020 - opensuse-packaging + +- update to version 4.33.0 + * Remove XTLS + * API: Reflection Service Support @Vigilans + * Update to IETF QUIC draft-32 +- update in 4.32.1 + * VLESS XTLS Direct Mode ReadV Experiment + * Disable 0-RTT mechanism for HTTP/1.x outbound + * Set default alterId to 0 for VMess dynamic ports + +------------------------------------------------------------------- +Sun Nov 1 12:26:08 UTC 2020 - opensuse-packaging + +- update version to 4.32.0 + * loads JSON internally by default @forever8938 + * Refine UNIX domain socket @lucifer9 + * Fix mKCP sending window @p4gefau1t + * Fix JSON parsing dependency introduced by mutijson config @xiaokangwang + * Fix proto.go ProtoFilesUsingProtocGenGoFast on Windows @JimhHan +- other changes before this version + * Add full VLESS fallbacks support to Trojan + * Add Trojan over XTLS support @maskedeken + * Add XTLS Direct Mode + * Add XTLS support to mKCP + * Add padding to abstract UNIX domain socket in fallbacks + * Add XTLS support to DomainSocket @rprx + +------------------------------------------------------------------- +Mon Sep 28 08:35:06 UTC 2020 - opensuse-packaging + +- Update version to 4.29.0 + * Fix issue#202 + * Fix issue#203 + * Routing: Implement Route interface as the routing result of Router + * kcp: removing annoying NewAEADAESGCMBasedOnSeed hint + * Make isAEAD more efficient + * Golangci-lint: disable some plugins + * Add XTLS support + * CodeQL: do NOT run on ready for review status + +------------------------------------------------------------------- +Sat Sep 12 10:48:05 UTC 2020 - opensuse-packaging + +- Update version to 4.28.1 + * Fix incorrect IV usage which slightly reduced security + +------------------------------------------------------------------- +Fri Sep 11 08:42:39 UTC 2020 - opensuse-packaging + +- Update version to 4.28.0 + * Changes + - VMess AEAD will be used when alterId is 0. ("testsEnabled" is discarded) + * Fixes + - Fix dns tests by setting v2ray.location.asset @felixonmars + - fix abstract UDS & add PROXY protocol support to DS inbound @lucifer9 @rprx + - Systemd: prevent restart on corrupt config @DuckSoft + * Chores + - Upgrade all dependencies @rprx + - Change lint order to avoid file changes notice @Loyalsoldier + - Update geoip, geosite + +------------------------------------------------------------------- +Wed Sep 2 10:34:41 UTC 2020 - opensuse-packaging + +- Update version to 4.27.5 + * Features + - Parse X-Forwarded-For in http transport @lucifer9 + * Fix + - Fix according to staticcheck result @Loyalsoldier + - Fix: Bound check when accessing DNS server's ipIndexMap @Vigilans + - Refine code @Loyalsoldier + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 + +------------------------------------------------------------------- +Sat Aug 29 03:26:28 UTC 2020 - opensuse-packaging + +- Update version to 4.27.4 + * Features + - Dotless domain support in built-in DNS @Vigilans + - Support source port matching in routing config @Vigilans + - Make HTTP outbound 0-rtt @darhwa + - Add asset location auto search @vcptr + - Add PROXY protocol support to TCP & WebSocket inbound @lucifer9 and @rprx + - VLESS PREVIEW 1.5 @rprx + * Fixs + - Amending domain matcher with returning array of all matches @Vigilans + - Refactor DNS Server to record original rule of domain matchers @Vigilans + - New Systemd unit file @dctxmei + - Fix: logging empty rules & DNS @Loyalsoldier + - Fix a typo @dikaixu1999 + - Shadowsocks Detection defense @studentmain and @xiaokangwang + - Update Old file @Loyalsoldier + * Breaking Changes + - VLESS fallback -> fallbacks, + see https://www.v2fly.org/config/protocols/vless.html + - Route matching order changes + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 +- Update in 4.27.0 + * Feature + - VLESS PREVIEW 1.3 https://www.v2fly.org/config/protocols/vless.html + * Fix + - Shadowsocks supports cipher as None @yuhan6665 + - Add access log for Dokodemo inbound @lucifer9 + - Some typo fixes @DuckSoft + - Add Linux riscv64 release @rprx + - Fix the error of missing curl in Dockerfile @kallydev + - GitHub Actions push to docker hub @kallydev + - Optimize SO_REUSEPORT implementation @Vigilans + - DOH supports HTTP/2 @darhwa + - Apply Sockopt from inbound config to Dokodemo Tproxy's response connection + @Vigilans + * Breaking Change + - VMessAEAD has been updated and needs both client and server to be the same + version for it to work. + - Release file structure changes. + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 + +------------------------------------------------------------------- +Sun Aug 2 09:20:46 UTC 2020 - Sam Yu + +- Fix out-of-box usability + +------------------------------------------------------------------- +Fri Jul 10 14:05:15 UTC 2020 - opensuse-packaging + +- Update version to 4.26.0 + * Update Signing key + * Update geoip, geosite + * Fix bug with tag name extract + * Generate Manifest for bleeding edge release + * Adjust arm build + * Allow the use of Browser Bridge + +------------------------------------------------------------------- +Thu Jun 25 15:09:25 UTC 2020 - Jan Engelhardt + +- Update summary with something useful. Trim filler wording + from description. + +------------------------------------------------------------------- +Sun Jun 21 09:05:14 UTC 2020 - opensuse-packaging + +- Update version to 4.25.0 + * VMess's new header format experiment begins. You can now enable VMessAEAD to + be better protected. Documents EN CH are updated. See extra-VMessAEADdoc.zip + for a more detailed explanation available in both Chinese and English. + * mKCP can now be encrypted to resist recognition, address issue mentioned in + #2530 #2253 #2131. Documents EN CH are updated. + * Updated Golang tool-chain. Thanks @rprx + * LocalAddr() in UDP workers will now return correct local addr. Thanks + @zhuobixin + * Further remove the identity leakage with TLS ClientHello from #2521 thank + @darhwa + * Fix UDP stability issue in Socks5 inbound, Shadowsocks inbound, and + Dokodemo( TProxy ) inbound. This should alleviate unnecessary CPU, memory + usage, and premature disconnection issue typically triggered by playing + games, video conference, and Torrenting. See #2565 thank @JimHan75d8c5 + @xiaokangwang and Other testers @1265578519 @zhj9709 @Kylejustknows etc + * Added ARM v5 binary in the release. This should allow legacy ARM devices to + run V2Ray correctly. See #2536 + +------------------------------------------------------------------- +Sun Jun 7 02:44:52 UTC 2020 - opensuse-packaging + +- initial package for version 4.23.4 diff --git a/v2ray-core.spec b/v2ray-core.spec new file mode 100644 index 0000000..8c17931 --- /dev/null +++ b/v2ray-core.spec @@ -0,0 +1,134 @@ +# +# spec file for package v2ray-core +# +# Copyright (c) 2025 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +%define provider github +%define provider_tld com +%define project v2fly +%define repo v2ray-core +# https://github.com/v2fly/v2ray-core +%define provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo} +%define import_path github.com/v2fly/v2ray-core/v5 + +Name: v2ray-core +Version: 5.31.0 +Release: 0 +Summary: Network tools for building a computer network +License: MIT +Group: Productivity/Networking/Web/Proxy +URL: https://github.com/v2fly/v2ray-core +Source0: https://github.com/v2fly/v2ray-core/archive/v%{version}/%{name}-%{version}.tar.gz +Source1: vendor.tar.gz +Source2: v2ray.service +Source3: v2ray@.service +Source4: https://github.com/v2fly/geoip/raw/release/geoip.dat +Source5: https://github.com/v2fly/domain-list-community/raw/release/dlc.dat +Source6: https://github.com/v2fly/v2ray-core/releases/download/v%{version}/v2ray-extra.zip +Source99: %{name}-rpmlintrc +BuildRequires: fdupes +BuildRequires: golang-packaging +BuildRequires: systemd-rpm-macros +BuildRequires: unzip +BuildRequires: pkgconfig(systemd) +AutoReqProv: Off +Provides: v2ray = %{version}-%{release} +Obsoletes: v2ray < %{version}-%{release} +BuildRoot: %{_tmppath}/%{name}-%{version}-build +%{go_provides} +%{?systemd_ordering} + +%description +Project V is a set of network tools for building a computer network. +It secures network connections and protects privacy. + +%package -n golang-%{provider}-%{project}-%{repo} +Summary: Additional mobile libraries +Group: Development/Languages/Golang +BuildArch: noarch + +%description -n golang-%{provider}-%{project}-%{repo} +Project V is a set of network tools for building a computer network. +It secures network connections and protects privacy. + +This package provide source code for %{repo} + +%prep +%setup -q -a1 -a6 -n %{repo}-%{version} + +%build +export GO111MODULE=off +%goprep %{import_path} +%gobuild main... +mv %{_builddir}/go/bin/main %{_builddir}/go/bin/v2ray + +%install +%goinstall +%gosrc +rm -rf %{buildroot}%{go_contribsrcdir}/%{import_path}/vendor +%gofilelist + +install -d %{buildroot}%{_datadir}/v2ray +install -m0644 %{SOURCE4} %{buildroot}%{_datadir}/v2ray/geoip.dat +install -m0644 %{SOURCE5} %{buildroot}%{_datadir}/v2ray/geosite.dat + +install -d %{buildroot}%{_unitdir} +install -m0644 %{SOURCE2} %{buildroot}%{_unitdir}/ +install -m0644 %{SOURCE3} %{buildroot}%{_unitdir}/ + +install -d %{buildroot}%{_sysconfdir}/v2ray +install -m0644 release/config/*.json %{buildroot}%{_sysconfdir}/v2ray/ + +install -d %{buildroot}%{_sbindir}/ +ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rcv2ray + +install -d %{buildroot}%{_datadir}/v2ray/browserforwarder +install -m0644 browserforwarder/index.js %{buildroot}%{_datadir}/v2ray/browserforwarder/ +install -m0644 browserforwarder/index.html %{buildroot}%{_datadir}/v2ray/browserforwarder/ + +%fdupes %{buildroot} + +%pre +%service_add_pre v2ray.service v2ray@.service + +%post +%service_add_post v2ray.service v2ray@.service + +%preun +%service_del_preun v2ray.service v2ray@.service + +%postun +%service_del_postun v2ray.service v2ray@.service + +%files +%doc README.md +%license LICENSE +%{_bindir}/v2ray +%{_bindir}/v2api +%{_unitdir}/v2ray.service +%{_unitdir}/v2ray@.service +%dir %{_sysconfdir}/v2ray +%dir %{_datadir}/v2ray +%{_datadir}/v2ray/* +%config(noreplace) %{_sysconfdir}/v2ray/*.json +%{_sbindir}/rcv2ray +%{_datadir}/v2ray/browserforwarder/ + +%files -n golang-%{provider}-%{project}-%{repo} -f file.lst +%doc README.md +%license LICENSE + +%changelog diff --git a/v2ray-extra.zip b/v2ray-extra.zip new file mode 100644 index 0000000..b212bbf --- /dev/null +++ b/v2ray-extra.zip @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:a4ac9ad0c16c8abaaee78bec038fb22ff6a8f448489759745dfad2af34c65659 +size 296846 diff --git a/v2ray.service b/v2ray.service new file mode 100644 index 0000000..a0f9517 --- /dev/null +++ b/v2ray.service @@ -0,0 +1,30 @@ +[Unit] +Description=V2Ray Service +Documentation=https://www.v2fly.org/ +After=network.target nss-lookup.target + +[Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions +User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true +Environment=V2RAY_LOCATION_ASSET=/usr/share/v2ray +ExecStart=/usr/bin/v2ray run -config /etc/v2ray/config.json +Restart=on-failure +RestartPreventExitStatus=23 + +[Install] +WantedBy=multi-user.target diff --git a/v2ray@.service b/v2ray@.service new file mode 100644 index 0000000..30b9843 --- /dev/null +++ b/v2ray@.service @@ -0,0 +1,30 @@ +[Unit] +Description=V2Ray Service +Documentation=https://www.v2fly.org/ +After=network.target nss-lookup.target + +[Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions +User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true +Environment=V2RAY_LOCATION_ASSET=/usr/share/v2ray +ExecStart=/usr/bin/v2ray run -config /etc/v2ray/%i.json +Restart=on-failure +RestartPreventExitStatus=23 + +[Install] +WantedBy=multi-user.target diff --git a/vendor.tar.gz b/vendor.tar.gz new file mode 100644 index 0000000..b7ad8b6 --- /dev/null +++ b/vendor.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2bc6248ad20ff99b628f3b03de0f0bc351c50bc312b079fb8eb773e5025406be +size 8541660 -- 2.51.1 From 9a3430790b223b6bf67d28c75cd86cd6e013f6382c7d69f816f37e8839f1db4c Mon Sep 17 00:00:00 2001 From: Hillwood Yang Date: Mon, 2 Jun 2025 12:57:15 +0000 Subject: [PATCH 4/6] - Update version to 5.33.0 * bump github.com/quic-go/quic-go from 0.51.0 to 0.52.0(boo#1243946 and CVE-2025-297850) * Update other vendor source OBS-URL: https://build.opensuse.org/package/show/server:proxy/v2ray-core?expand=0&rev=60 --- .gitattributes | 26 ++ .gitignore | 1 + dlc.dat | 3 + geoip.dat | 3 + v2ray-core-5.16.1.tar.gz | 3 + v2ray-core-5.18.0.tar.gz | 3 + v2ray-core-5.22.0.tar.gz | 3 + v2ray-core-5.29.3.tar.gz | 3 + v2ray-core-5.31.0.tar.gz | 3 + v2ray-core-5.33.0.tar.gz | 3 + v2ray-core-rpmlintrc | 2 + v2ray-core.changes | 508 +++++++++++++++++++++++++++++++++++++++ v2ray-core.spec | 134 +++++++++++ v2ray-extra.zip | 3 + v2ray.service | 30 +++ v2ray@.service | 30 +++ vendor.tar.gz | 3 + 17 files changed, 761 insertions(+) create mode 100644 .gitattributes create mode 100644 .gitignore create mode 100644 dlc.dat create mode 100644 geoip.dat create mode 100644 v2ray-core-5.16.1.tar.gz create mode 100644 v2ray-core-5.18.0.tar.gz create mode 100644 v2ray-core-5.22.0.tar.gz create mode 100644 v2ray-core-5.29.3.tar.gz create mode 100644 v2ray-core-5.31.0.tar.gz create mode 100644 v2ray-core-5.33.0.tar.gz create mode 100644 v2ray-core-rpmlintrc create mode 100644 v2ray-core.changes create mode 100644 v2ray-core.spec create mode 100644 v2ray-extra.zip create mode 100644 v2ray.service create mode 100644 v2ray@.service create mode 100644 vendor.tar.gz diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..4f0e993 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,26 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text +## Specific LFS patterns +dlc.dat filter=lfs diff=lfs merge=lfs -text +geoip.dat filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/dlc.dat b/dlc.dat new file mode 100644 index 0000000..98a0996 --- /dev/null +++ b/dlc.dat @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:6c69c83e0d9ee39cb0674515ce1668a411b9824a1c6314291d77bc83cd0c6d56 +size 2245011 diff --git a/geoip.dat b/geoip.dat new file mode 100644 index 0000000..216f284 --- /dev/null +++ b/geoip.dat @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:735786c00694313090c5d525516463836167422b132ce293873443613b496e92 +size 21013265 diff --git a/v2ray-core-5.16.1.tar.gz b/v2ray-core-5.16.1.tar.gz new file mode 100644 index 0000000..89fd3a8 --- /dev/null +++ b/v2ray-core-5.16.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e5d61b97168ebdf6da3d672ab40abe5b22951d46997072ca1ee497a3aa47ba05 +size 1036374 diff --git a/v2ray-core-5.18.0.tar.gz b/v2ray-core-5.18.0.tar.gz new file mode 100644 index 0000000..b7b25f2 --- /dev/null +++ b/v2ray-core-5.18.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:15acf65228867d47dcab27f87af048a2f0e6ed5d347a2e68730d30ae2a3871eb +size 1064425 diff --git a/v2ray-core-5.22.0.tar.gz b/v2ray-core-5.22.0.tar.gz new file mode 100644 index 0000000..acae025 --- /dev/null +++ b/v2ray-core-5.22.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:df25a873c8f7fb30f44cb6d26b18db264dfa209df5aeb6116fc43df7157fb4b8 +size 1072762 diff --git a/v2ray-core-5.29.3.tar.gz b/v2ray-core-5.29.3.tar.gz new file mode 100644 index 0000000..6536ff4 --- /dev/null +++ b/v2ray-core-5.29.3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f2a2eb4c835a99339746eaadbb1c88b4dcd022aa6d801ca44936be36f3ed027a +size 1126423 diff --git a/v2ray-core-5.31.0.tar.gz b/v2ray-core-5.31.0.tar.gz new file mode 100644 index 0000000..5af59c1 --- /dev/null +++ b/v2ray-core-5.31.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:20895d4200d3b7906a3fba90690cc2e27239989acc9c31601f40f2f71827e2e5 +size 1127230 diff --git a/v2ray-core-5.33.0.tar.gz b/v2ray-core-5.33.0.tar.gz new file mode 100644 index 0000000..0e483e8 --- /dev/null +++ b/v2ray-core-5.33.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:44b768e0048cf2e68f885f08ceb95ee29eea16a5dbb3b4cb9920d55ce691fa9f +size 1127363 diff --git a/v2ray-core-rpmlintrc b/v2ray-core-rpmlintrc new file mode 100644 index 0000000..bafb361 --- /dev/null +++ b/v2ray-core-rpmlintrc @@ -0,0 +1,2 @@ +# Please refer https://en.opensuse.org/openSUSE:Packaging_Go +addFilter("devel-file-in-non-devel-package") diff --git a/v2ray-core.changes b/v2ray-core.changes new file mode 100644 index 0000000..34dd7c7 --- /dev/null +++ b/v2ray-core.changes @@ -0,0 +1,508 @@ +------------------------------------------------------------------- +Mon Jun 2 12:53:55 UTC 2025 - Hillwood Yang + +- Update version to 5.33.0 + * bump github.com/quic-go/quic-go from 0.51.0 to 0.52.0(boo#1243946 and CVE-2025-297850) + * Update other vendor source + +------------------------------------------------------------------- +Sun May 4 08:35:24 UTC 2025 - Hillwood Yang + +- Update version to 5.31.0 + * Add Dns Proxy Response TTL Control + * Fix call newError Base with a nil value error + * Update vendor (boo#1235164) + +------------------------------------------------------------------- +Sun Apr 6 04:47:00 UTC 2025 - Marguerite Su + +- Update version to 5.29.3 + * Enable restricted mode load for http protocol client + * Correctly implement QUIC sniffer when handling multiple initial packets + * Fix unreleased cache buffer in QUIC sniffing + * A temporary testing fix for the buffer corruption issue + * QUIC Sniffer Restructure + +------------------------------------------------------------------- +Fri Nov 22 12:44:43 UTC 2024 - Hillwood Yang + +- Update version to 5.22.0 + * Add packetEncoding for Hysteria + * Add ECH Client Support + * Add support for parsing some shadowsocks links + * Add Mekya Transport + * Fix bugs + +------------------------------------------------------------------- +Fri Sep 13 12:02:49 UTC 2024 - Hillwood Yang + +- Update version to 5.18.0 + * Add timeout for http request roundtripper + * Fix ss2022 auth reader size overflow + * Add pie build mode to all binary builds + * Support "services" root config in cfgv4 + * packet_encoding for config v4 + * add MPTCP support + * Add (Experimental) Meyka Building Blocks to request Transport + * Add timeout for http request roundtripper + * Hysteria2: Add Hysteria2 Protocol + * Add AllowInsecureIfPinnedPeerCertificate option to tls security + * Add tls certChainHash command + * add support for socket activation + * Add pprof flag for debugging + * Fix bugs + +------------------------------------------------------------------- +Sun Jun 16 08:21:52 UTC 2024 - Hillwood Yang + +- Update version to 5.16.1 + * Add Keep-Alive to removed headers + +------------------------------------------------------------------- +Sun Apr 14 13:08:52 UTC 2024 - Hillwood Yang + + - Update version to 5.15.1 + * feat: RandomStrategy AliveOnly + * Improve container image tags and timestamp + * Add delay_auth_write to Socks5 Client Advanced Config + * Add MaxMin TLS version support in TLS Setting + * feat: RandomStrategy AliveOnly + * Improve container image tags and timestamp + * Fixed an encrypted traffic's malleable vulnerability that allow + integrity corruption by an attacker with a privileged network + position to silently drop segments of traffic from an encrypted + traffic stream. + * Update documents + * Fix bugs +- Update vendor, fix CVE-2024-22189 boo#1222488 + +------------------------------------------------------------------- +Sun Dec 3 08:38:20 UTC 2023 - Hillwood Yang + +- Update version to 5.12.1 + * Shadowsocks2022 Client Support + * Apply DomainStrategy to outbound target + * Add DomainStrategy to JSONv5 outbound + * Add sniffing for TUN + * Add HTTPUpgrade transport + * It is a reduced version of WebSocket Transport that can pass many + reverse proxies and CDNs without running a WebSocket protocol stack + * TUN Support + * Add uTLS support for h2 transport + * Fix bugs + +------------------------------------------------------------------- +Sun Oct 8 13:35:54 UTC 2023 - Hillwood Yang + +- Update version to 5.8.0 + * DNS over QUIC should not have "http/1.1" and "h2" ALPNs + * Migrate to quic-go v0.36.0 + * Fix: parse for the CipherType of Shadowsocks in simplified config + * Fix protocol matching in routing + * Fix CI breakage in 5.7.0 +- Build by golang 1.20, workaround build error on golang 1.21 + +------------------------------------------------------------------- +Sun Jun 25 03:13:08 UTC 2023 - opensuse-packaging + +- Drop vendor in filelist + +------------------------------------------------------------------- +Mon Jun 12 06:34:21 UTC 2023 - opensuse-packaging + +- Update version to 5.7.0 + * meek: a new transport protocol meek is added. + * HTTP Proxy Add h1SkipWaitForReply Option to HTTP Proxy Protocol + * set v2ray binary as an entrypoint in container images + * Add Integrated Container Image Building + * Skip validating on empty http host config + * Add PacketAddr support to Trojan + * DomainStrategy support for all outbounds + * Add an option to replace destination address in access log with sniffed domain + * uTLS uTLS ALPN Control + * uTLS New Security Type uTLS: TLS Client Hello imitation + * DNS Support per-client configuration + * DNS Support specifying domain matcher + * Add bind to device to Windows and Darwin + * Replace default Health Ping URL to HTTPS for burst observatory + * Implement Match and MatchAny for all MatcherGroup + * Fix bugs + +------------------------------------------------------------------- +Thu Jan 5 12:42:50 UTC 2023 - opensuse-packaging + +- Fix service command: "run" is required in v2ray 5.x + +------------------------------------------------------------------- +Thu Dec 29 14:23:37 UTC 2022 - Marguerite Su + +- Update version to 5.2.0 + * New Features + + uTLS New Security Type uTLS: TLS Client Hello imitation. + Only client without transport, or with websocket transport is + currently supported. + + DNS Support per-client configuration + + DNS Support specifying domain matcher + + Replace default Health Ping URL to HTTPS + + Implement Match and MatchAny for all MatcherGroup, IndexMatcher + * Fixes + + Fix typo in error message + + Support domain string validation + + Charset of ACAutomationMatcherGroup should accept all ASCII characters + + Fix logic of domain override + + Fix HTTP sniff + + Fix config merger fixes + + Fix selectLeastLoad() returns wrong number of nodes + + Fix(freebsd): ReadUDPMsg nil pointer + + fix: socks4/4a client handshake + + Add transport original name to listen unix + + fix Replace "math/rand" with "crypto/rand" in padding generation + + Fix remove v2ctl from debian/rules + + Fix getting shared flags for balance info command + + Fix erroneous prefix checking + + Fix json.Reader: fill output bytes as much as possible + + Guard against nil pointer dereference of (*NetworkList) + * Chores + + Add tests for idn support + + Refactor: replace netaddr package with netipx + +------------------------------------------------------------------- +Sat Dec 25 14:01:53 UTC 2021 - opensuse-packaging + +- Update version to 4.44.0 + * Fix DoS attack vulnerability in CommandSwitchAccountFactory. (@geeknik) + * Apply timeout to DNS outbound. (#1330 @nekohasekai) + +------------------------------------------------------------------- +Wed Dec 1 08:11:01 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * v2ray.service + * v2ray@.service + +------------------------------------------------------------------- +Thu Nov 11 02:55:40 UTC 2021 - opensuse-packaging + +- Update version to 4.43.0 + * Send Shadowsocks handshake with payload data if available + * Custom TCP Fast Open queue length support + * Fix Trojan fallback cannot get ALPN + * Fix QueryStrategy ignored + * Fix UDP connection transport connection terminated unnecessarily + * refactor: move from io/ioutil to io and os package + * Fix some tests to use udp.PickPort() + * Fix flaky TestVMessDynamicPort + +------------------------------------------------------------------- +Tue Sep 21 13:38:23 UTC 2021 - opensuse-packaging + +- Update to 4.42.2 + * TLS: support client certificate authentication #1169 Thanks @qq906907952 + * Socks: support 4/4a version of the socks protocol (#1269 Thanks @nekohasekai) + * DNS: add option disableFallbackIfMatch for DNS (#1270 Thanks @nekohasekai) + * DoQ(DNS over QUIC) local mode supports IP destination + (#1226 Thanks @AkinoKaede) + * Observatory will now probe outbounds in a deterministic order + (#1230 Thanks @digglife) + * DNS response will respect request type(like AAAA, A) + (#1235 Thanks @AkinoKaede) + * Fix typo in DNS log output (#1183 Thanks @rurirei) + * Fix typo in observatory log output (#1211 Thanks @ihotte) + * Fix version string not updated to match release version + * Fix IP length not deterministic (#1267 Thanks @Loyalsoldier) + * Fix HTTP outbound not respect socket config (#1264 Thanks @Vigilans) + * Fix sockopt.mark type (#1264 Thanks @Vigilans) + * Fix typo in browser forwarder error message +- Update in 4.41.1 + * VMess: Added 2 VMess experiments AuthenticatedLength and NoTerminationSignal + #940 Thanks @RPRX + * Hardening Draining connection at client side when receiving invalid data. + #940 Thanks @RPRX + * Observatory Support custom probe interval and probe URL. Thanks @nekohasekai + * Fixed connection stability issue when in h2, grpc transport. + #1059 #1058 #1056 Thanks @IRN-Kawakaze @architecturers @lijinglin3 + * Further fixed connection stability issue when in h2, grpc transport. + check https://github.com/v2fly/v2ray-core/releases/tag/v4.41.1 for more info +- Update in 4.40.1 + * DNS: support DNS over TCP. #983 Thanks @AkinoKaede + * Fix: new cert issuing is incorrectly delayed. #998 Thanks @bhoppi + +------------------------------------------------------------------- +Wed Jun 2 08:15:09 UTC 2021 - opensuse-packaging + +- Update version to 4.39.2 + * Websocket: support header based Websocket early data & its partial browser + forwarder support + * GeoData: add a memory efficient geodata decoder called memconservative for + memory-limited devices #934 #953 #964 #965 #967 #977 Thanks @Loyalsoldier @rurirei + * HTTP/2 Transport: support to set method and headers for outgoing connections + * TCP Socket Option: support to set keepalive interval on Linux operating system + #962 Thanks @therealak12 + * Fix BrowserForwarder panics with empty config (#954) Thanks @AkinoKaede + @Loyalsoldier + * Fix FakeDNS prints error with empty config (#955) Thanks @Loyalsoldier + * Fix Dual stack FakeDNS Close method (#956) Thanks @Loyalsoldier + * Fix Observatory starts with empty config & fails to close (#957) Thanks + @Loyalsoldier + * Fix Null check on alternative system dialer (#959) Thanks @rurirei + * Fixed the chain proxy support for gRPC and HTTP/2 transport + * Fixed leastping logic (#1019) Thanks @fanyiguang + * Fixed v2ctl unable to create geodata loaders (#1014) Thanks @ght99 +- Update in 4.38.3 + - FakeDNS: Added fakedns+others sniffer , based on #697 . Thanks @yuhan6665 + - TLS: A SECURITY improvement that allow the remote peer's TLS certificate + to be pinned to a known value. Document for TLS is updated + - Observatory: A component that measure the connectivity of selected outbounds + The document for Observatory is updated. + - Routing : leastPing balancing strategy is added. This strategy will select + a outbound that is alive and completed HTTPS GET request in the least time. + The document for Routing is updated. + - Fixed crashing in fake dns. #931 Thanks @IceCodeNew + - Added IPv6 pool in fake dns by default. #925 Thanks @Loyalsoldier + - Return ErrEmptyResponse for fakedns. #926 Thanks @sixg0000d + - Fixed UDP DNS connection cause crash. Thanks @nekohasekai + - Fixed two typo in comments. Thanks @U-v-U + * Multi-json support for observatory, browser forwarder. + #944 Thanks @ha-ku @AkinoKaede +- Add browserforwarder related v2ray-extra.zip + +------------------------------------------------------------------- +Thu Apr 15 06:11:12 UTC 2021 - opensuse-packaging + +- update version to 4.37.3 + * Add multiple address host support for DNS (#884 #886 #888) + * Fix geoiop & geosite load issue (#889) +- update in 4.37.2 + * Add browser forwarder support for Websocket (#818) + * Add Websocket 0-RTT early data support (#818) + * Add replay protection for Shadowsocks proxy (#777) + * Add queryStrategy option for DNS (#794) + * Add disableFallback & skipFallback option for DNS client (#864) + * Add inversed GeoIP matching (#860) + * Add grpcSettings & gunSettings to streamSettings (00879c4) @rprx + * Fix vprotogen loop dependency (#797) @Loyalsoldier @U-v-U + * Fix DNS tests timeout due to network instability (#805) @Loyalsoldier + * Remove AA header flag in DNS query (#817) @Loyalsoldier + * TProxy: cannot find IPv6 destination in redirect mode (#815) @mzz2017 + * Context: ctx initialization for core.functions (#841) @rurirei + * Set FakeDNS FakeEnable option dynamically (#879) @sixg0000d @Loyalsoldier + * Fix Websocket early data 404 bug (#859) @k79e + * Fix QUIC: disconnect due to timeout (#850) @bhoppi + * Log: remove package path prefix in logs (#840 0138017 78c1993) @kslr +- update in 4.36.2 + * Fix gRPC max delay unintentionally low (1eaec68) @xiaokangwang + * Fix core panics when zero domain/full type of rule (#786) @darsvador +- update in 4.36.1 + * Add gRPC/gun transport (#757 #783) + * Add loopback proxy (#770) + * Add a new efficient routing rule matcher MphDomainMatcher (#743) + * FakeDNS: use 198.18.0.0/15 as default FakeDNS IP pool (#779) +- update build needed golang version to 1.16 +- keep go.sum go.mod to fix build issue with 'matched no packages' +- add geo files manually since upstream removed them from source + +------------------------------------------------------------------- +Tue Mar 9 10:26:12 UTC 2021 - opensuse-packaging + +- update version to 4.35.1 + * Add support for FakeDNS (#395 #406 #696) @yuhan6665 + * Add streamSetting / transport support for outbound front proxy + * Add zero pseudo encryption for better performance VMess + * Add support to disable compatibility for legacy VMess MD5 (#596) @dyhkwong + * Add a faster and more memory-efficient routing rule matcher + HybridDomainMatcher (#587 #639) @darsvador + * Add support to disable DNS cache (#699 #705) @CalmLong + * Fix test HTTP/2 dial timeout (#570) @kslr + * Fix Trojan panic when UDP dispatcher fails to write response (#599) @maskedeken + * Fix TCP default ALPN (#716) @AkinoKaede + * Fix DNS rule index out of range (#727) @Loyalsoldier + Check https://github.com/v2fly/v2ray-core/releases/tag/v4.35.1 for more info +- update import path to github.com/v2fly/v2ray-core/v4 + +------------------------------------------------------------------- +Sat Jan 9 01:37:48 UTC 2021 - opensuse-packaging + +- update version to 4.34.0 + * Disable TLS Session Resumption by default + * Remove legacy Shadowsocks unsecure stream ciphers + * Add preliminary support for DNS over QUIC + +------------------------------------------------------------------- +Tue Dec 29 13:11:50 UTC 2020 - opensuse-packaging + +- Rename golang-github-v2ray-v2ray-core to golang-github-v2fly-v2ray-core +- Update vendor. + +------------------------------------------------------------------- +Wed Nov 25 15:31:22 UTC 2020 - opensuse-packaging + +- update to version 4.33.0 + * Remove XTLS + * API: Reflection Service Support @Vigilans + * Update to IETF QUIC draft-32 +- update in 4.32.1 + * VLESS XTLS Direct Mode ReadV Experiment + * Disable 0-RTT mechanism for HTTP/1.x outbound + * Set default alterId to 0 for VMess dynamic ports + +------------------------------------------------------------------- +Sun Nov 1 12:26:08 UTC 2020 - opensuse-packaging + +- update version to 4.32.0 + * loads JSON internally by default @forever8938 + * Refine UNIX domain socket @lucifer9 + * Fix mKCP sending window @p4gefau1t + * Fix JSON parsing dependency introduced by mutijson config @xiaokangwang + * Fix proto.go ProtoFilesUsingProtocGenGoFast on Windows @JimhHan +- other changes before this version + * Add full VLESS fallbacks support to Trojan + * Add Trojan over XTLS support @maskedeken + * Add XTLS Direct Mode + * Add XTLS support to mKCP + * Add padding to abstract UNIX domain socket in fallbacks + * Add XTLS support to DomainSocket @rprx + +------------------------------------------------------------------- +Mon Sep 28 08:35:06 UTC 2020 - opensuse-packaging + +- Update version to 4.29.0 + * Fix issue#202 + * Fix issue#203 + * Routing: Implement Route interface as the routing result of Router + * kcp: removing annoying NewAEADAESGCMBasedOnSeed hint + * Make isAEAD more efficient + * Golangci-lint: disable some plugins + * Add XTLS support + * CodeQL: do NOT run on ready for review status + +------------------------------------------------------------------- +Sat Sep 12 10:48:05 UTC 2020 - opensuse-packaging + +- Update version to 4.28.1 + * Fix incorrect IV usage which slightly reduced security + +------------------------------------------------------------------- +Fri Sep 11 08:42:39 UTC 2020 - opensuse-packaging + +- Update version to 4.28.0 + * Changes + - VMess AEAD will be used when alterId is 0. ("testsEnabled" is discarded) + * Fixes + - Fix dns tests by setting v2ray.location.asset @felixonmars + - fix abstract UDS & add PROXY protocol support to DS inbound @lucifer9 @rprx + - Systemd: prevent restart on corrupt config @DuckSoft + * Chores + - Upgrade all dependencies @rprx + - Change lint order to avoid file changes notice @Loyalsoldier + - Update geoip, geosite + +------------------------------------------------------------------- +Wed Sep 2 10:34:41 UTC 2020 - opensuse-packaging + +- Update version to 4.27.5 + * Features + - Parse X-Forwarded-For in http transport @lucifer9 + * Fix + - Fix according to staticcheck result @Loyalsoldier + - Fix: Bound check when accessing DNS server's ipIndexMap @Vigilans + - Refine code @Loyalsoldier + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 + +------------------------------------------------------------------- +Sat Aug 29 03:26:28 UTC 2020 - opensuse-packaging + +- Update version to 4.27.4 + * Features + - Dotless domain support in built-in DNS @Vigilans + - Support source port matching in routing config @Vigilans + - Make HTTP outbound 0-rtt @darhwa + - Add asset location auto search @vcptr + - Add PROXY protocol support to TCP & WebSocket inbound @lucifer9 and @rprx + - VLESS PREVIEW 1.5 @rprx + * Fixs + - Amending domain matcher with returning array of all matches @Vigilans + - Refactor DNS Server to record original rule of domain matchers @Vigilans + - New Systemd unit file @dctxmei + - Fix: logging empty rules & DNS @Loyalsoldier + - Fix a typo @dikaixu1999 + - Shadowsocks Detection defense @studentmain and @xiaokangwang + - Update Old file @Loyalsoldier + * Breaking Changes + - VLESS fallback -> fallbacks, + see https://www.v2fly.org/config/protocols/vless.html + - Route matching order changes + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 +- Update in 4.27.0 + * Feature + - VLESS PREVIEW 1.3 https://www.v2fly.org/config/protocols/vless.html + * Fix + - Shadowsocks supports cipher as None @yuhan6665 + - Add access log for Dokodemo inbound @lucifer9 + - Some typo fixes @DuckSoft + - Add Linux riscv64 release @rprx + - Fix the error of missing curl in Dockerfile @kallydev + - GitHub Actions push to docker hub @kallydev + - Optimize SO_REUSEPORT implementation @Vigilans + - DOH supports HTTP/2 @darhwa + - Apply Sockopt from inbound config to Dokodemo Tproxy's response connection + @Vigilans + * Breaking Change + - VMessAEAD has been updated and needs both client and server to be the same + version for it to work. + - Release file structure changes. + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 + +------------------------------------------------------------------- +Sun Aug 2 09:20:46 UTC 2020 - Sam Yu + +- Fix out-of-box usability + +------------------------------------------------------------------- +Fri Jul 10 14:05:15 UTC 2020 - opensuse-packaging + +- Update version to 4.26.0 + * Update Signing key + * Update geoip, geosite + * Fix bug with tag name extract + * Generate Manifest for bleeding edge release + * Adjust arm build + * Allow the use of Browser Bridge + +------------------------------------------------------------------- +Thu Jun 25 15:09:25 UTC 2020 - Jan Engelhardt + +- Update summary with something useful. Trim filler wording + from description. + +------------------------------------------------------------------- +Sun Jun 21 09:05:14 UTC 2020 - opensuse-packaging + +- Update version to 4.25.0 + * VMess's new header format experiment begins. You can now enable VMessAEAD to + be better protected. Documents EN CH are updated. See extra-VMessAEADdoc.zip + for a more detailed explanation available in both Chinese and English. + * mKCP can now be encrypted to resist recognition, address issue mentioned in + #2530 #2253 #2131. Documents EN CH are updated. + * Updated Golang tool-chain. Thanks @rprx + * LocalAddr() in UDP workers will now return correct local addr. Thanks + @zhuobixin + * Further remove the identity leakage with TLS ClientHello from #2521 thank + @darhwa + * Fix UDP stability issue in Socks5 inbound, Shadowsocks inbound, and + Dokodemo( TProxy ) inbound. This should alleviate unnecessary CPU, memory + usage, and premature disconnection issue typically triggered by playing + games, video conference, and Torrenting. See #2565 thank @JimHan75d8c5 + @xiaokangwang and Other testers @1265578519 @zhj9709 @Kylejustknows etc + * Added ARM v5 binary in the release. This should allow legacy ARM devices to + run V2Ray correctly. See #2536 + +------------------------------------------------------------------- +Sun Jun 7 02:44:52 UTC 2020 - opensuse-packaging + +- initial package for version 4.23.4 diff --git a/v2ray-core.spec b/v2ray-core.spec new file mode 100644 index 0000000..7371aab --- /dev/null +++ b/v2ray-core.spec @@ -0,0 +1,134 @@ +# +# spec file for package v2ray-core +# +# Copyright (c) 2025 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +%define provider github +%define provider_tld com +%define project v2fly +%define repo v2ray-core +# https://github.com/v2fly/v2ray-core +%define provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo} +%define import_path github.com/v2fly/v2ray-core/v5 + +Name: v2ray-core +Version: 5.33.0 +Release: 0 +Summary: Network tools for building a computer network +License: MIT +Group: Productivity/Networking/Web/Proxy +URL: https://github.com/v2fly/v2ray-core +Source0: https://github.com/v2fly/v2ray-core/archive/v%{version}/%{name}-%{version}.tar.gz +Source1: vendor.tar.gz +Source2: v2ray.service +Source3: v2ray@.service +Source4: https://github.com/v2fly/geoip/raw/release/geoip.dat +Source5: https://github.com/v2fly/domain-list-community/raw/release/dlc.dat +Source6: https://github.com/v2fly/v2ray-core/releases/download/v%{version}/v2ray-extra.zip +Source99: %{name}-rpmlintrc +BuildRequires: fdupes +BuildRequires: golang-packaging +BuildRequires: systemd-rpm-macros +BuildRequires: unzip +BuildRequires: pkgconfig(systemd) +AutoReqProv: Off +Provides: v2ray = %{version}-%{release} +Obsoletes: v2ray < %{version}-%{release} +BuildRoot: %{_tmppath}/%{name}-%{version}-build +%{go_provides} +%{?systemd_ordering} + +%description +Project V is a set of network tools for building a computer network. +It secures network connections and protects privacy. + +%package -n golang-%{provider}-%{project}-%{repo} +Summary: Additional mobile libraries +Group: Development/Languages/Golang +BuildArch: noarch + +%description -n golang-%{provider}-%{project}-%{repo} +Project V is a set of network tools for building a computer network. +It secures network connections and protects privacy. + +This package provide source code for %{repo} + +%prep +%setup -q -a1 -a6 -n %{repo}-%{version} + +%build +export GO111MODULE=off +%goprep %{import_path} +%gobuild main... +mv %{_builddir}/go/bin/main %{_builddir}/go/bin/v2ray + +%install +%goinstall +%gosrc +rm -rf %{buildroot}%{go_contribsrcdir}/%{import_path}/vendor +%gofilelist + +install -d %{buildroot}%{_datadir}/v2ray +install -m0644 %{SOURCE4} %{buildroot}%{_datadir}/v2ray/geoip.dat +install -m0644 %{SOURCE5} %{buildroot}%{_datadir}/v2ray/geosite.dat + +install -d %{buildroot}%{_unitdir} +install -m0644 %{SOURCE2} %{buildroot}%{_unitdir}/ +install -m0644 %{SOURCE3} %{buildroot}%{_unitdir}/ + +install -d %{buildroot}%{_sysconfdir}/v2ray +install -m0644 release/config/*.json %{buildroot}%{_sysconfdir}/v2ray/ + +install -d %{buildroot}%{_sbindir}/ +ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rcv2ray + +install -d %{buildroot}%{_datadir}/v2ray/browserforwarder +install -m0644 browserforwarder/index.js %{buildroot}%{_datadir}/v2ray/browserforwarder/ +install -m0644 browserforwarder/index.html %{buildroot}%{_datadir}/v2ray/browserforwarder/ + +%fdupes %{buildroot} + +%pre +%service_add_pre v2ray.service v2ray@.service + +%post +%service_add_post v2ray.service v2ray@.service + +%preun +%service_del_preun v2ray.service v2ray@.service + +%postun +%service_del_postun v2ray.service v2ray@.service + +%files +%doc README.md +%license LICENSE +%{_bindir}/v2ray +%{_bindir}/v2api +%{_unitdir}/v2ray.service +%{_unitdir}/v2ray@.service +%dir %{_sysconfdir}/v2ray +%dir %{_datadir}/v2ray +%{_datadir}/v2ray/* +%config(noreplace) %{_sysconfdir}/v2ray/*.json +%{_sbindir}/rcv2ray +%{_datadir}/v2ray/browserforwarder/ + +%files -n golang-%{provider}-%{project}-%{repo} -f file.lst +%doc README.md +%license LICENSE + +%changelog diff --git a/v2ray-extra.zip b/v2ray-extra.zip new file mode 100644 index 0000000..b212bbf --- /dev/null +++ b/v2ray-extra.zip @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:a4ac9ad0c16c8abaaee78bec038fb22ff6a8f448489759745dfad2af34c65659 +size 296846 diff --git a/v2ray.service b/v2ray.service new file mode 100644 index 0000000..a0f9517 --- /dev/null +++ b/v2ray.service @@ -0,0 +1,30 @@ +[Unit] +Description=V2Ray Service +Documentation=https://www.v2fly.org/ +After=network.target nss-lookup.target + +[Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions +User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true +Environment=V2RAY_LOCATION_ASSET=/usr/share/v2ray +ExecStart=/usr/bin/v2ray run -config /etc/v2ray/config.json +Restart=on-failure +RestartPreventExitStatus=23 + +[Install] +WantedBy=multi-user.target diff --git a/v2ray@.service b/v2ray@.service new file mode 100644 index 0000000..30b9843 --- /dev/null +++ b/v2ray@.service @@ -0,0 +1,30 @@ +[Unit] +Description=V2Ray Service +Documentation=https://www.v2fly.org/ +After=network.target nss-lookup.target + +[Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions +User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true +Environment=V2RAY_LOCATION_ASSET=/usr/share/v2ray +ExecStart=/usr/bin/v2ray run -config /etc/v2ray/%i.json +Restart=on-failure +RestartPreventExitStatus=23 + +[Install] +WantedBy=multi-user.target diff --git a/vendor.tar.gz b/vendor.tar.gz new file mode 100644 index 0000000..4f83e6e --- /dev/null +++ b/vendor.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f0fa4cf8528b5aa6641984a45b0f643639d8a69f0d672c59f87076ec2e716331 +size 8550300 -- 2.51.1 From 08ec215baca68144ea6d9ab7b20ad81502e7ed3cd7be3f25e9c534a1e8272389 Mon Sep 17 00:00:00 2001 From: Hillwood Yang Date: Thu, 11 Sep 2025 12:23:40 +0000 Subject: [PATCH 5/6] - Update version to 5.38.0 * TLSMirror Connection Enrollment System * Add TLSMirror Sequence Watermarking * LSMirror developer preview protocol is now a part of mainline V2Ray * proxy dns with NOTIMP error * Add TLSMirror looks like TLS censorship resistant transport protocol as a developer preview transport * proxy dns with NOTIMP error * fix false success from SOCKS server when Dispatch() fails * HTTP inbound: Directly forward plain HTTP 1xx response header * add a option to override domain used to query https record * Fix bugs * Update vendor OBS-URL: https://build.opensuse.org/package/show/server:proxy/v2ray-core?expand=0&rev=62 --- .gitattributes | 26 ++ .gitignore | 1 + dlc.dat | 3 + geoip.dat | 3 + v2ray-core-5.38.0.tar.gz | 3 + v2ray-core-rpmlintrc | 2 + v2ray-core.changes | 525 +++++++++++++++++++++++++++++++++++++++ v2ray-core.spec | 134 ++++++++++ v2ray-extra.zip | 3 + v2ray.service | 30 +++ v2ray@.service | 30 +++ vendor.tar.gz | 3 + 12 files changed, 763 insertions(+) create mode 100644 .gitattributes create mode 100644 .gitignore create mode 100644 dlc.dat create mode 100644 geoip.dat create mode 100644 v2ray-core-5.38.0.tar.gz create mode 100644 v2ray-core-rpmlintrc create mode 100644 v2ray-core.changes create mode 100644 v2ray-core.spec create mode 100644 v2ray-extra.zip create mode 100644 v2ray.service create mode 100644 v2ray@.service create mode 100644 vendor.tar.gz diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..4f0e993 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,26 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text +## Specific LFS patterns +dlc.dat filter=lfs diff=lfs merge=lfs -text +geoip.dat filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/dlc.dat b/dlc.dat new file mode 100644 index 0000000..98a0996 --- /dev/null +++ b/dlc.dat @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:6c69c83e0d9ee39cb0674515ce1668a411b9824a1c6314291d77bc83cd0c6d56 +size 2245011 diff --git a/geoip.dat b/geoip.dat new file mode 100644 index 0000000..216f284 --- /dev/null +++ b/geoip.dat @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:735786c00694313090c5d525516463836167422b132ce293873443613b496e92 +size 21013265 diff --git a/v2ray-core-5.38.0.tar.gz b/v2ray-core-5.38.0.tar.gz new file mode 100644 index 0000000..99233a2 --- /dev/null +++ b/v2ray-core-5.38.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:6e2412f6d08282ef06e4f3c752db443d782bb2d6cbf525ebbb2f5e2c01759f9e +size 1109219 diff --git a/v2ray-core-rpmlintrc b/v2ray-core-rpmlintrc new file mode 100644 index 0000000..bafb361 --- /dev/null +++ b/v2ray-core-rpmlintrc @@ -0,0 +1,2 @@ +# Please refer https://en.opensuse.org/openSUSE:Packaging_Go +addFilter("devel-file-in-non-devel-package") diff --git a/v2ray-core.changes b/v2ray-core.changes new file mode 100644 index 0000000..4fe1e06 --- /dev/null +++ b/v2ray-core.changes @@ -0,0 +1,525 @@ +------------------------------------------------------------------- +Tue Sep 9 15:14:22 UTC 2025 - Hillwood Yang + +- Update version to 5.38.0 + * TLSMirror Connection Enrollment System + * Add TLSMirror Sequence Watermarking + * LSMirror developer preview protocol is now a part of mainline V2Ray + * proxy dns with NOTIMP error + * Add TLSMirror looks like TLS censorship resistant transport protocol + as a developer preview transport + * proxy dns with NOTIMP error + * fix false success from SOCKS server when Dispatch() fails + * HTTP inbound: Directly forward plain HTTP 1xx response header + * add a option to override domain used to query https record + * Fix bugs + * Update vendor + +------------------------------------------------------------------- +Mon Jun 2 12:53:55 UTC 2025 - Hillwood Yang + +- Update version to 5.33.0 + * bump github.com/quic-go/quic-go from 0.51.0 to 0.52.0(boo#1243946 and CVE-2025-297850) + * Update other vendor source + +------------------------------------------------------------------- +Sun May 4 08:35:24 UTC 2025 - Hillwood Yang + +- Update version to 5.31.0 + * Add Dns Proxy Response TTL Control + * Fix call newError Base with a nil value error + * Update vendor (boo#1235164) + +------------------------------------------------------------------- +Sun Apr 6 04:47:00 UTC 2025 - Marguerite Su + +- Update version to 5.29.3 + * Enable restricted mode load for http protocol client + * Correctly implement QUIC sniffer when handling multiple initial packets + * Fix unreleased cache buffer in QUIC sniffing + * A temporary testing fix for the buffer corruption issue + * QUIC Sniffer Restructure + +------------------------------------------------------------------- +Fri Nov 22 12:44:43 UTC 2024 - Hillwood Yang + +- Update version to 5.22.0 + * Add packetEncoding for Hysteria + * Add ECH Client Support + * Add support for parsing some shadowsocks links + * Add Mekya Transport + * Fix bugs + +------------------------------------------------------------------- +Fri Sep 13 12:02:49 UTC 2024 - Hillwood Yang + +- Update version to 5.18.0 + * Add timeout for http request roundtripper + * Fix ss2022 auth reader size overflow + * Add pie build mode to all binary builds + * Support "services" root config in cfgv4 + * packet_encoding for config v4 + * add MPTCP support + * Add (Experimental) Meyka Building Blocks to request Transport + * Add timeout for http request roundtripper + * Hysteria2: Add Hysteria2 Protocol + * Add AllowInsecureIfPinnedPeerCertificate option to tls security + * Add tls certChainHash command + * add support for socket activation + * Add pprof flag for debugging + * Fix bugs + +------------------------------------------------------------------- +Sun Jun 16 08:21:52 UTC 2024 - Hillwood Yang + +- Update version to 5.16.1 + * Add Keep-Alive to removed headers + +------------------------------------------------------------------- +Sun Apr 14 13:08:52 UTC 2024 - Hillwood Yang + + - Update version to 5.15.1 + * feat: RandomStrategy AliveOnly + * Improve container image tags and timestamp + * Add delay_auth_write to Socks5 Client Advanced Config + * Add MaxMin TLS version support in TLS Setting + * feat: RandomStrategy AliveOnly + * Improve container image tags and timestamp + * Fixed an encrypted traffic's malleable vulnerability that allow + integrity corruption by an attacker with a privileged network + position to silently drop segments of traffic from an encrypted + traffic stream. + * Update documents + * Fix bugs +- Update vendor, fix CVE-2024-22189 boo#1222488 + +------------------------------------------------------------------- +Sun Dec 3 08:38:20 UTC 2023 - Hillwood Yang + +- Update version to 5.12.1 + * Shadowsocks2022 Client Support + * Apply DomainStrategy to outbound target + * Add DomainStrategy to JSONv5 outbound + * Add sniffing for TUN + * Add HTTPUpgrade transport + * It is a reduced version of WebSocket Transport that can pass many + reverse proxies and CDNs without running a WebSocket protocol stack + * TUN Support + * Add uTLS support for h2 transport + * Fix bugs + +------------------------------------------------------------------- +Sun Oct 8 13:35:54 UTC 2023 - Hillwood Yang + +- Update version to 5.8.0 + * DNS over QUIC should not have "http/1.1" and "h2" ALPNs + * Migrate to quic-go v0.36.0 + * Fix: parse for the CipherType of Shadowsocks in simplified config + * Fix protocol matching in routing + * Fix CI breakage in 5.7.0 +- Build by golang 1.20, workaround build error on golang 1.21 + +------------------------------------------------------------------- +Sun Jun 25 03:13:08 UTC 2023 - opensuse-packaging + +- Drop vendor in filelist + +------------------------------------------------------------------- +Mon Jun 12 06:34:21 UTC 2023 - opensuse-packaging + +- Update version to 5.7.0 + * meek: a new transport protocol meek is added. + * HTTP Proxy Add h1SkipWaitForReply Option to HTTP Proxy Protocol + * set v2ray binary as an entrypoint in container images + * Add Integrated Container Image Building + * Skip validating on empty http host config + * Add PacketAddr support to Trojan + * DomainStrategy support for all outbounds + * Add an option to replace destination address in access log with sniffed domain + * uTLS uTLS ALPN Control + * uTLS New Security Type uTLS: TLS Client Hello imitation + * DNS Support per-client configuration + * DNS Support specifying domain matcher + * Add bind to device to Windows and Darwin + * Replace default Health Ping URL to HTTPS for burst observatory + * Implement Match and MatchAny for all MatcherGroup + * Fix bugs + +------------------------------------------------------------------- +Thu Jan 5 12:42:50 UTC 2023 - opensuse-packaging + +- Fix service command: "run" is required in v2ray 5.x + +------------------------------------------------------------------- +Thu Dec 29 14:23:37 UTC 2022 - Marguerite Su + +- Update version to 5.2.0 + * New Features + + uTLS New Security Type uTLS: TLS Client Hello imitation. + Only client without transport, or with websocket transport is + currently supported. + + DNS Support per-client configuration + + DNS Support specifying domain matcher + + Replace default Health Ping URL to HTTPS + + Implement Match and MatchAny for all MatcherGroup, IndexMatcher + * Fixes + + Fix typo in error message + + Support domain string validation + + Charset of ACAutomationMatcherGroup should accept all ASCII characters + + Fix logic of domain override + + Fix HTTP sniff + + Fix config merger fixes + + Fix selectLeastLoad() returns wrong number of nodes + + Fix(freebsd): ReadUDPMsg nil pointer + + fix: socks4/4a client handshake + + Add transport original name to listen unix + + fix Replace "math/rand" with "crypto/rand" in padding generation + + Fix remove v2ctl from debian/rules + + Fix getting shared flags for balance info command + + Fix erroneous prefix checking + + Fix json.Reader: fill output bytes as much as possible + + Guard against nil pointer dereference of (*NetworkList) + * Chores + + Add tests for idn support + + Refactor: replace netaddr package with netipx + +------------------------------------------------------------------- +Sat Dec 25 14:01:53 UTC 2021 - opensuse-packaging + +- Update version to 4.44.0 + * Fix DoS attack vulnerability in CommandSwitchAccountFactory. (@geeknik) + * Apply timeout to DNS outbound. (#1330 @nekohasekai) + +------------------------------------------------------------------- +Wed Dec 1 08:11:01 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * v2ray.service + * v2ray@.service + +------------------------------------------------------------------- +Thu Nov 11 02:55:40 UTC 2021 - opensuse-packaging + +- Update version to 4.43.0 + * Send Shadowsocks handshake with payload data if available + * Custom TCP Fast Open queue length support + * Fix Trojan fallback cannot get ALPN + * Fix QueryStrategy ignored + * Fix UDP connection transport connection terminated unnecessarily + * refactor: move from io/ioutil to io and os package + * Fix some tests to use udp.PickPort() + * Fix flaky TestVMessDynamicPort + +------------------------------------------------------------------- +Tue Sep 21 13:38:23 UTC 2021 - opensuse-packaging + +- Update to 4.42.2 + * TLS: support client certificate authentication #1169 Thanks @qq906907952 + * Socks: support 4/4a version of the socks protocol (#1269 Thanks @nekohasekai) + * DNS: add option disableFallbackIfMatch for DNS (#1270 Thanks @nekohasekai) + * DoQ(DNS over QUIC) local mode supports IP destination + (#1226 Thanks @AkinoKaede) + * Observatory will now probe outbounds in a deterministic order + (#1230 Thanks @digglife) + * DNS response will respect request type(like AAAA, A) + (#1235 Thanks @AkinoKaede) + * Fix typo in DNS log output (#1183 Thanks @rurirei) + * Fix typo in observatory log output (#1211 Thanks @ihotte) + * Fix version string not updated to match release version + * Fix IP length not deterministic (#1267 Thanks @Loyalsoldier) + * Fix HTTP outbound not respect socket config (#1264 Thanks @Vigilans) + * Fix sockopt.mark type (#1264 Thanks @Vigilans) + * Fix typo in browser forwarder error message +- Update in 4.41.1 + * VMess: Added 2 VMess experiments AuthenticatedLength and NoTerminationSignal + #940 Thanks @RPRX + * Hardening Draining connection at client side when receiving invalid data. + #940 Thanks @RPRX + * Observatory Support custom probe interval and probe URL. Thanks @nekohasekai + * Fixed connection stability issue when in h2, grpc transport. + #1059 #1058 #1056 Thanks @IRN-Kawakaze @architecturers @lijinglin3 + * Further fixed connection stability issue when in h2, grpc transport. + check https://github.com/v2fly/v2ray-core/releases/tag/v4.41.1 for more info +- Update in 4.40.1 + * DNS: support DNS over TCP. #983 Thanks @AkinoKaede + * Fix: new cert issuing is incorrectly delayed. #998 Thanks @bhoppi + +------------------------------------------------------------------- +Wed Jun 2 08:15:09 UTC 2021 - opensuse-packaging + +- Update version to 4.39.2 + * Websocket: support header based Websocket early data & its partial browser + forwarder support + * GeoData: add a memory efficient geodata decoder called memconservative for + memory-limited devices #934 #953 #964 #965 #967 #977 Thanks @Loyalsoldier @rurirei + * HTTP/2 Transport: support to set method and headers for outgoing connections + * TCP Socket Option: support to set keepalive interval on Linux operating system + #962 Thanks @therealak12 + * Fix BrowserForwarder panics with empty config (#954) Thanks @AkinoKaede + @Loyalsoldier + * Fix FakeDNS prints error with empty config (#955) Thanks @Loyalsoldier + * Fix Dual stack FakeDNS Close method (#956) Thanks @Loyalsoldier + * Fix Observatory starts with empty config & fails to close (#957) Thanks + @Loyalsoldier + * Fix Null check on alternative system dialer (#959) Thanks @rurirei + * Fixed the chain proxy support for gRPC and HTTP/2 transport + * Fixed leastping logic (#1019) Thanks @fanyiguang + * Fixed v2ctl unable to create geodata loaders (#1014) Thanks @ght99 +- Update in 4.38.3 + - FakeDNS: Added fakedns+others sniffer , based on #697 . Thanks @yuhan6665 + - TLS: A SECURITY improvement that allow the remote peer's TLS certificate + to be pinned to a known value. Document for TLS is updated + - Observatory: A component that measure the connectivity of selected outbounds + The document for Observatory is updated. + - Routing : leastPing balancing strategy is added. This strategy will select + a outbound that is alive and completed HTTPS GET request in the least time. + The document for Routing is updated. + - Fixed crashing in fake dns. #931 Thanks @IceCodeNew + - Added IPv6 pool in fake dns by default. #925 Thanks @Loyalsoldier + - Return ErrEmptyResponse for fakedns. #926 Thanks @sixg0000d + - Fixed UDP DNS connection cause crash. Thanks @nekohasekai + - Fixed two typo in comments. Thanks @U-v-U + * Multi-json support for observatory, browser forwarder. + #944 Thanks @ha-ku @AkinoKaede +- Add browserforwarder related v2ray-extra.zip + +------------------------------------------------------------------- +Thu Apr 15 06:11:12 UTC 2021 - opensuse-packaging + +- update version to 4.37.3 + * Add multiple address host support for DNS (#884 #886 #888) + * Fix geoiop & geosite load issue (#889) +- update in 4.37.2 + * Add browser forwarder support for Websocket (#818) + * Add Websocket 0-RTT early data support (#818) + * Add replay protection for Shadowsocks proxy (#777) + * Add queryStrategy option for DNS (#794) + * Add disableFallback & skipFallback option for DNS client (#864) + * Add inversed GeoIP matching (#860) + * Add grpcSettings & gunSettings to streamSettings (00879c4) @rprx + * Fix vprotogen loop dependency (#797) @Loyalsoldier @U-v-U + * Fix DNS tests timeout due to network instability (#805) @Loyalsoldier + * Remove AA header flag in DNS query (#817) @Loyalsoldier + * TProxy: cannot find IPv6 destination in redirect mode (#815) @mzz2017 + * Context: ctx initialization for core.functions (#841) @rurirei + * Set FakeDNS FakeEnable option dynamically (#879) @sixg0000d @Loyalsoldier + * Fix Websocket early data 404 bug (#859) @k79e + * Fix QUIC: disconnect due to timeout (#850) @bhoppi + * Log: remove package path prefix in logs (#840 0138017 78c1993) @kslr +- update in 4.36.2 + * Fix gRPC max delay unintentionally low (1eaec68) @xiaokangwang + * Fix core panics when zero domain/full type of rule (#786) @darsvador +- update in 4.36.1 + * Add gRPC/gun transport (#757 #783) + * Add loopback proxy (#770) + * Add a new efficient routing rule matcher MphDomainMatcher (#743) + * FakeDNS: use 198.18.0.0/15 as default FakeDNS IP pool (#779) +- update build needed golang version to 1.16 +- keep go.sum go.mod to fix build issue with 'matched no packages' +- add geo files manually since upstream removed them from source + +------------------------------------------------------------------- +Tue Mar 9 10:26:12 UTC 2021 - opensuse-packaging + +- update version to 4.35.1 + * Add support for FakeDNS (#395 #406 #696) @yuhan6665 + * Add streamSetting / transport support for outbound front proxy + * Add zero pseudo encryption for better performance VMess + * Add support to disable compatibility for legacy VMess MD5 (#596) @dyhkwong + * Add a faster and more memory-efficient routing rule matcher + HybridDomainMatcher (#587 #639) @darsvador + * Add support to disable DNS cache (#699 #705) @CalmLong + * Fix test HTTP/2 dial timeout (#570) @kslr + * Fix Trojan panic when UDP dispatcher fails to write response (#599) @maskedeken + * Fix TCP default ALPN (#716) @AkinoKaede + * Fix DNS rule index out of range (#727) @Loyalsoldier + Check https://github.com/v2fly/v2ray-core/releases/tag/v4.35.1 for more info +- update import path to github.com/v2fly/v2ray-core/v4 + +------------------------------------------------------------------- +Sat Jan 9 01:37:48 UTC 2021 - opensuse-packaging + +- update version to 4.34.0 + * Disable TLS Session Resumption by default + * Remove legacy Shadowsocks unsecure stream ciphers + * Add preliminary support for DNS over QUIC + +------------------------------------------------------------------- +Tue Dec 29 13:11:50 UTC 2020 - opensuse-packaging + +- Rename golang-github-v2ray-v2ray-core to golang-github-v2fly-v2ray-core +- Update vendor. + +------------------------------------------------------------------- +Wed Nov 25 15:31:22 UTC 2020 - opensuse-packaging + +- update to version 4.33.0 + * Remove XTLS + * API: Reflection Service Support @Vigilans + * Update to IETF QUIC draft-32 +- update in 4.32.1 + * VLESS XTLS Direct Mode ReadV Experiment + * Disable 0-RTT mechanism for HTTP/1.x outbound + * Set default alterId to 0 for VMess dynamic ports + +------------------------------------------------------------------- +Sun Nov 1 12:26:08 UTC 2020 - opensuse-packaging + +- update version to 4.32.0 + * loads JSON internally by default @forever8938 + * Refine UNIX domain socket @lucifer9 + * Fix mKCP sending window @p4gefau1t + * Fix JSON parsing dependency introduced by mutijson config @xiaokangwang + * Fix proto.go ProtoFilesUsingProtocGenGoFast on Windows @JimhHan +- other changes before this version + * Add full VLESS fallbacks support to Trojan + * Add Trojan over XTLS support @maskedeken + * Add XTLS Direct Mode + * Add XTLS support to mKCP + * Add padding to abstract UNIX domain socket in fallbacks + * Add XTLS support to DomainSocket @rprx + +------------------------------------------------------------------- +Mon Sep 28 08:35:06 UTC 2020 - opensuse-packaging + +- Update version to 4.29.0 + * Fix issue#202 + * Fix issue#203 + * Routing: Implement Route interface as the routing result of Router + * kcp: removing annoying NewAEADAESGCMBasedOnSeed hint + * Make isAEAD more efficient + * Golangci-lint: disable some plugins + * Add XTLS support + * CodeQL: do NOT run on ready for review status + +------------------------------------------------------------------- +Sat Sep 12 10:48:05 UTC 2020 - opensuse-packaging + +- Update version to 4.28.1 + * Fix incorrect IV usage which slightly reduced security + +------------------------------------------------------------------- +Fri Sep 11 08:42:39 UTC 2020 - opensuse-packaging + +- Update version to 4.28.0 + * Changes + - VMess AEAD will be used when alterId is 0. ("testsEnabled" is discarded) + * Fixes + - Fix dns tests by setting v2ray.location.asset @felixonmars + - fix abstract UDS & add PROXY protocol support to DS inbound @lucifer9 @rprx + - Systemd: prevent restart on corrupt config @DuckSoft + * Chores + - Upgrade all dependencies @rprx + - Change lint order to avoid file changes notice @Loyalsoldier + - Update geoip, geosite + +------------------------------------------------------------------- +Wed Sep 2 10:34:41 UTC 2020 - opensuse-packaging + +- Update version to 4.27.5 + * Features + - Parse X-Forwarded-For in http transport @lucifer9 + * Fix + - Fix according to staticcheck result @Loyalsoldier + - Fix: Bound check when accessing DNS server's ipIndexMap @Vigilans + - Refine code @Loyalsoldier + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 + +------------------------------------------------------------------- +Sat Aug 29 03:26:28 UTC 2020 - opensuse-packaging + +- Update version to 4.27.4 + * Features + - Dotless domain support in built-in DNS @Vigilans + - Support source port matching in routing config @Vigilans + - Make HTTP outbound 0-rtt @darhwa + - Add asset location auto search @vcptr + - Add PROXY protocol support to TCP & WebSocket inbound @lucifer9 and @rprx + - VLESS PREVIEW 1.5 @rprx + * Fixs + - Amending domain matcher with returning array of all matches @Vigilans + - Refactor DNS Server to record original rule of domain matchers @Vigilans + - New Systemd unit file @dctxmei + - Fix: logging empty rules & DNS @Loyalsoldier + - Fix a typo @dikaixu1999 + - Shadowsocks Detection defense @studentmain and @xiaokangwang + - Update Old file @Loyalsoldier + * Breaking Changes + - VLESS fallback -> fallbacks, + see https://www.v2fly.org/config/protocols/vless.html + - Route matching order changes + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 +- Update in 4.27.0 + * Feature + - VLESS PREVIEW 1.3 https://www.v2fly.org/config/protocols/vless.html + * Fix + - Shadowsocks supports cipher as None @yuhan6665 + - Add access log for Dokodemo inbound @lucifer9 + - Some typo fixes @DuckSoft + - Add Linux riscv64 release @rprx + - Fix the error of missing curl in Dockerfile @kallydev + - GitHub Actions push to docker hub @kallydev + - Optimize SO_REUSEPORT implementation @Vigilans + - DOH supports HTTP/2 @darhwa + - Apply Sockopt from inbound config to Dokodemo Tproxy's response connection + @Vigilans + * Breaking Change + - VMessAEAD has been updated and needs both client and server to be the same + version for it to work. + - Release file structure changes. + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 + +------------------------------------------------------------------- +Sun Aug 2 09:20:46 UTC 2020 - Sam Yu + +- Fix out-of-box usability + +------------------------------------------------------------------- +Fri Jul 10 14:05:15 UTC 2020 - opensuse-packaging + +- Update version to 4.26.0 + * Update Signing key + * Update geoip, geosite + * Fix bug with tag name extract + * Generate Manifest for bleeding edge release + * Adjust arm build + * Allow the use of Browser Bridge + +------------------------------------------------------------------- +Thu Jun 25 15:09:25 UTC 2020 - Jan Engelhardt + +- Update summary with something useful. Trim filler wording + from description. + +------------------------------------------------------------------- +Sun Jun 21 09:05:14 UTC 2020 - opensuse-packaging + +- Update version to 4.25.0 + * VMess's new header format experiment begins. You can now enable VMessAEAD to + be better protected. Documents EN CH are updated. See extra-VMessAEADdoc.zip + for a more detailed explanation available in both Chinese and English. + * mKCP can now be encrypted to resist recognition, address issue mentioned in + #2530 #2253 #2131. Documents EN CH are updated. + * Updated Golang tool-chain. Thanks @rprx + * LocalAddr() in UDP workers will now return correct local addr. Thanks + @zhuobixin + * Further remove the identity leakage with TLS ClientHello from #2521 thank + @darhwa + * Fix UDP stability issue in Socks5 inbound, Shadowsocks inbound, and + Dokodemo( TProxy ) inbound. This should alleviate unnecessary CPU, memory + usage, and premature disconnection issue typically triggered by playing + games, video conference, and Torrenting. See #2565 thank @JimHan75d8c5 + @xiaokangwang and Other testers @1265578519 @zhj9709 @Kylejustknows etc + * Added ARM v5 binary in the release. This should allow legacy ARM devices to + run V2Ray correctly. See #2536 + +------------------------------------------------------------------- +Sun Jun 7 02:44:52 UTC 2020 - opensuse-packaging + +- initial package for version 4.23.4 diff --git a/v2ray-core.spec b/v2ray-core.spec new file mode 100644 index 0000000..beadb79 --- /dev/null +++ b/v2ray-core.spec @@ -0,0 +1,134 @@ +# +# spec file for package v2ray-core +# +# Copyright (c) 2025 SUSE LLC and contributors +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +%define provider github +%define provider_tld com +%define project v2fly +%define repo v2ray-core +# https://github.com/v2fly/v2ray-core +%define provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo} +%define import_path github.com/v2fly/v2ray-core/v5 + +Name: v2ray-core +Version: 5.38.0 +Release: 0 +Summary: Network tools for building a computer network +License: MIT +Group: Productivity/Networking/Web/Proxy +URL: https://github.com/v2fly/v2ray-core +Source0: https://github.com/v2fly/v2ray-core/archive/v%{version}/%{name}-%{version}.tar.gz +Source1: vendor.tar.gz +Source2: v2ray.service +Source3: v2ray@.service +Source4: https://github.com/v2fly/geoip/raw/release/geoip.dat +Source5: https://github.com/v2fly/domain-list-community/raw/release/dlc.dat +Source6: https://github.com/v2fly/v2ray-core/releases/download/v%{version}/v2ray-extra.zip +Source99: %{name}-rpmlintrc +BuildRequires: fdupes +BuildRequires: golang-packaging +BuildRequires: systemd-rpm-macros +BuildRequires: unzip +BuildRequires: pkgconfig(systemd) +AutoReqProv: Off +Provides: v2ray = %{version}-%{release} +Obsoletes: v2ray < %{version}-%{release} +BuildRoot: %{_tmppath}/%{name}-%{version}-build +%{go_provides} +%{?systemd_ordering} + +%description +Project V is a set of network tools for building a computer network. +It secures network connections and protects privacy. + +%package -n golang-%{provider}-%{project}-%{repo} +Summary: Additional mobile libraries +Group: Development/Languages/Golang +BuildArch: noarch + +%description -n golang-%{provider}-%{project}-%{repo} +Project V is a set of network tools for building a computer network. +It secures network connections and protects privacy. + +This package provide source code for %{repo} + +%prep +%setup -q -a1 -a6 -n %{repo}-%{version} + +%build +export GO111MODULE=off +%goprep %{import_path} +%gobuild main... +mv %{_builddir}/go/bin/main %{_builddir}/go/bin/v2ray + +%install +%goinstall +%gosrc +rm -rf %{buildroot}%{go_contribsrcdir}/%{import_path}/vendor +%gofilelist + +install -d %{buildroot}%{_datadir}/v2ray +install -m0644 %{SOURCE4} %{buildroot}%{_datadir}/v2ray/geoip.dat +install -m0644 %{SOURCE5} %{buildroot}%{_datadir}/v2ray/geosite.dat + +install -d %{buildroot}%{_unitdir} +install -m0644 %{SOURCE2} %{buildroot}%{_unitdir}/ +install -m0644 %{SOURCE3} %{buildroot}%{_unitdir}/ + +install -d %{buildroot}%{_sysconfdir}/v2ray +install -m0644 release/config/*.json %{buildroot}%{_sysconfdir}/v2ray/ + +install -d %{buildroot}%{_sbindir}/ +ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rcv2ray + +install -d %{buildroot}%{_datadir}/v2ray/browserforwarder +install -m0644 browserforwarder/index.js %{buildroot}%{_datadir}/v2ray/browserforwarder/ +install -m0644 browserforwarder/index.html %{buildroot}%{_datadir}/v2ray/browserforwarder/ + +%fdupes %{buildroot} + +%pre +%service_add_pre v2ray.service v2ray@.service + +%post +%service_add_post v2ray.service v2ray@.service + +%preun +%service_del_preun v2ray.service v2ray@.service + +%postun +%service_del_postun v2ray.service v2ray@.service + +%files +%doc README.md +%license LICENSE +%{_bindir}/v2ray +%{_bindir}/v2api +%{_unitdir}/v2ray.service +%{_unitdir}/v2ray@.service +%dir %{_sysconfdir}/v2ray +%dir %{_datadir}/v2ray +%{_datadir}/v2ray/* +%config(noreplace) %{_sysconfdir}/v2ray/*.json +%{_sbindir}/rcv2ray +%{_datadir}/v2ray/browserforwarder/ + +%files -n golang-%{provider}-%{project}-%{repo} -f file.lst +%doc README.md +%license LICENSE + +%changelog diff --git a/v2ray-extra.zip b/v2ray-extra.zip new file mode 100644 index 0000000..8e5aa55 --- /dev/null +++ b/v2ray-extra.zip @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:c077c4db5dfeea008b1abf9859c87dfc6faeaedd550c85aab3e4ffdf7968ccbe +size 296846 diff --git a/v2ray.service b/v2ray.service new file mode 100644 index 0000000..a0f9517 --- /dev/null +++ b/v2ray.service @@ -0,0 +1,30 @@ +[Unit] +Description=V2Ray Service +Documentation=https://www.v2fly.org/ +After=network.target nss-lookup.target + +[Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions +User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true +Environment=V2RAY_LOCATION_ASSET=/usr/share/v2ray +ExecStart=/usr/bin/v2ray run -config /etc/v2ray/config.json +Restart=on-failure +RestartPreventExitStatus=23 + +[Install] +WantedBy=multi-user.target diff --git a/v2ray@.service b/v2ray@.service new file mode 100644 index 0000000..30b9843 --- /dev/null +++ b/v2ray@.service @@ -0,0 +1,30 @@ +[Unit] +Description=V2Ray Service +Documentation=https://www.v2fly.org/ +After=network.target nss-lookup.target + +[Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions +User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true +Environment=V2RAY_LOCATION_ASSET=/usr/share/v2ray +ExecStart=/usr/bin/v2ray run -config /etc/v2ray/%i.json +Restart=on-failure +RestartPreventExitStatus=23 + +[Install] +WantedBy=multi-user.target diff --git a/vendor.tar.gz b/vendor.tar.gz new file mode 100644 index 0000000..0f9c3a7 --- /dev/null +++ b/vendor.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:bfc83aea2e89471b17ef5b9321e8ef176582fc145292a258e6c7cf53f05ad88e +size 8262563 -- 2.51.1 From 50fc8b7d874d9af02fbe6cbafad07238a238c2fc7ed08aba573d690575ea2009 Mon Sep 17 00:00:00 2001 From: Hillwood Yang Date: Thu, 9 Oct 2025 13:17:28 +0000 Subject: [PATCH 6/6] - Fix CVE-2025-47911 and boo#1251404 * Add fix-CVE-2025-47911.patch * Update golang.org/x/net to 0.45.0 in vendor OBS-URL: https://build.opensuse.org/package/show/server:proxy/v2ray-core?expand=0&rev=64 --- .gitattributes | 26 ++ .gitignore | 1 + dlc.dat | 3 + fix-CVE-2025-47911.patch | 24 ++ geoip.dat | 3 + v2ray-core-5.38.0.tar.gz | 3 + v2ray-core-5.40.0.tar.gz | 3 + v2ray-core-rpmlintrc | 2 + v2ray-core.changes | 532 +++++++++++++++++++++++++++++++++++++++ v2ray-core.spec | 136 ++++++++++ v2ray-extra.zip | 3 + v2ray.service | 30 +++ v2ray@.service | 30 +++ vendor.tar.gz | 3 + 14 files changed, 799 insertions(+) create mode 100644 .gitattributes create mode 100644 .gitignore create mode 100644 dlc.dat create mode 100644 fix-CVE-2025-47911.patch create mode 100644 geoip.dat create mode 100644 v2ray-core-5.38.0.tar.gz create mode 100644 v2ray-core-5.40.0.tar.gz create mode 100644 v2ray-core-rpmlintrc create mode 100644 v2ray-core.changes create mode 100644 v2ray-core.spec create mode 100644 v2ray-extra.zip create mode 100644 v2ray.service create mode 100644 v2ray@.service create mode 100644 vendor.tar.gz diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..4f0e993 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,26 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text +## Specific LFS patterns +dlc.dat filter=lfs diff=lfs merge=lfs -text +geoip.dat filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/dlc.dat b/dlc.dat new file mode 100644 index 0000000..98a0996 --- /dev/null +++ b/dlc.dat @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:6c69c83e0d9ee39cb0674515ce1668a411b9824a1c6314291d77bc83cd0c6d56 +size 2245011 diff --git a/fix-CVE-2025-47911.patch b/fix-CVE-2025-47911.patch new file mode 100644 index 0000000..793c109 --- /dev/null +++ b/fix-CVE-2025-47911.patch @@ -0,0 +1,24 @@ +diff -Nur v2ray-core-5.40.0/go.mod v2ray-core-5.40.0-new/go.mod +--- v2ray-core-5.40.0/go.mod 2025-10-04 02:48:03.000000000 +0800 ++++ v2ray-core-5.40.0-new/go.mod 2025-10-08 21:22:52.425457464 +0800 +@@ -38,7 +38,7 @@ + go.starlark.net v0.0.0-20230612165344-9532f5667272 + go4.org/netipx v0.0.0-20230303233057-f1b76eb4bb35 + golang.org/x/crypto v0.42.0 +- golang.org/x/net v0.44.0 ++ golang.org/x/net v0.45.0 + golang.org/x/sync v0.17.0 + golang.org/x/sys v0.36.0 + google.golang.org/grpc v1.75.1 +diff -Nur v2ray-core-5.40.0/go.sum v2ray-core-5.40.0-new/go.sum +--- v2ray-core-5.40.0/go.sum 2025-10-04 02:48:03.000000000 +0800 ++++ v2ray-core-5.40.0-new/go.sum 2025-10-08 21:22:52.429457454 +0800 +@@ -655,6 +655,8 @@ + golang.org/x/net v0.20.0/go.mod h1:z8BVo6PvndSri0LbOE3hAn0apkU+1YvI6E70E9jsnvY= + golang.org/x/net v0.44.0 h1:evd8IRDyfNBMBTTY5XRF1vaZlD+EmWx6x8PkhR04H/I= + golang.org/x/net v0.44.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY= ++golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM= ++golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY= + golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= + golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= + golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= diff --git a/geoip.dat b/geoip.dat new file mode 100644 index 0000000..216f284 --- /dev/null +++ b/geoip.dat @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:735786c00694313090c5d525516463836167422b132ce293873443613b496e92 +size 21013265 diff --git a/v2ray-core-5.38.0.tar.gz b/v2ray-core-5.38.0.tar.gz new file mode 100644 index 0000000..99233a2 --- /dev/null +++ b/v2ray-core-5.38.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:6e2412f6d08282ef06e4f3c752db443d782bb2d6cbf525ebbb2f5e2c01759f9e +size 1109219 diff --git a/v2ray-core-5.40.0.tar.gz b/v2ray-core-5.40.0.tar.gz new file mode 100644 index 0000000..e802627 --- /dev/null +++ b/v2ray-core-5.40.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:14e333c7454781f0b44fe9cba1616e25accfb04cf0d9d31db7acdd33e2e8d0ac +size 1109413 diff --git a/v2ray-core-rpmlintrc b/v2ray-core-rpmlintrc new file mode 100644 index 0000000..bafb361 --- /dev/null +++ b/v2ray-core-rpmlintrc @@ -0,0 +1,2 @@ +# Please refer https://en.opensuse.org/openSUSE:Packaging_Go +addFilter("devel-file-in-non-devel-package") diff --git a/v2ray-core.changes b/v2ray-core.changes new file mode 100644 index 0000000..7191700 --- /dev/null +++ b/v2ray-core.changes @@ -0,0 +1,532 @@ +------------------------------------------------------------------- +Wed Oct 8 13:30:29 UTC 2025 - Hillwood Yang + +- Fix CVE-2025-47911 and boo#1251404 + * Add fix-CVE-2025-47911.patch + * Update golang.org/x/net to 0.45.0 in vendor + +------------------------------------------------------------------- +Tue Sep 9 15:14:22 UTC 2025 - Hillwood Yang + +- Update version to 5.38.0 + * TLSMirror Connection Enrollment System + * Add TLSMirror Sequence Watermarking + * LSMirror developer preview protocol is now a part of mainline V2Ray + * proxy dns with NOTIMP error + * Add TLSMirror looks like TLS censorship resistant transport protocol + as a developer preview transport + * proxy dns with NOTIMP error + * fix false success from SOCKS server when Dispatch() fails + * HTTP inbound: Directly forward plain HTTP 1xx response header + * add a option to override domain used to query https record + * Fix bugs + * Update vendor + +------------------------------------------------------------------- +Mon Jun 2 12:53:55 UTC 2025 - Hillwood Yang + +- Update version to 5.33.0 + * bump github.com/quic-go/quic-go from 0.51.0 to 0.52.0(boo#1243946 and CVE-2025-297850) + * Update other vendor source + +------------------------------------------------------------------- +Sun May 4 08:35:24 UTC 2025 - Hillwood Yang + +- Update version to 5.31.0 + * Add Dns Proxy Response TTL Control + * Fix call newError Base with a nil value error + * Update vendor (boo#1235164) + +------------------------------------------------------------------- +Sun Apr 6 04:47:00 UTC 2025 - Marguerite Su + +- Update version to 5.29.3 + * Enable restricted mode load for http protocol client + * Correctly implement QUIC sniffer when handling multiple initial packets + * Fix unreleased cache buffer in QUIC sniffing + * A temporary testing fix for the buffer corruption issue + * QUIC Sniffer Restructure + +------------------------------------------------------------------- +Fri Nov 22 12:44:43 UTC 2024 - Hillwood Yang + +- Update version to 5.22.0 + * Add packetEncoding for Hysteria + * Add ECH Client Support + * Add support for parsing some shadowsocks links + * Add Mekya Transport + * Fix bugs + +------------------------------------------------------------------- +Fri Sep 13 12:02:49 UTC 2024 - Hillwood Yang + +- Update version to 5.18.0 + * Add timeout for http request roundtripper + * Fix ss2022 auth reader size overflow + * Add pie build mode to all binary builds + * Support "services" root config in cfgv4 + * packet_encoding for config v4 + * add MPTCP support + * Add (Experimental) Meyka Building Blocks to request Transport + * Add timeout for http request roundtripper + * Hysteria2: Add Hysteria2 Protocol + * Add AllowInsecureIfPinnedPeerCertificate option to tls security + * Add tls certChainHash command + * add support for socket activation + * Add pprof flag for debugging + * Fix bugs + +------------------------------------------------------------------- +Sun Jun 16 08:21:52 UTC 2024 - Hillwood Yang + +- Update version to 5.16.1 + * Add Keep-Alive to removed headers + +------------------------------------------------------------------- +Sun Apr 14 13:08:52 UTC 2024 - Hillwood Yang + + - Update version to 5.15.1 + * feat: RandomStrategy AliveOnly + * Improve container image tags and timestamp + * Add delay_auth_write to Socks5 Client Advanced Config + * Add MaxMin TLS version support in TLS Setting + * feat: RandomStrategy AliveOnly + * Improve container image tags and timestamp + * Fixed an encrypted traffic's malleable vulnerability that allow + integrity corruption by an attacker with a privileged network + position to silently drop segments of traffic from an encrypted + traffic stream. + * Update documents + * Fix bugs +- Update vendor, fix CVE-2024-22189 boo#1222488 + +------------------------------------------------------------------- +Sun Dec 3 08:38:20 UTC 2023 - Hillwood Yang + +- Update version to 5.12.1 + * Shadowsocks2022 Client Support + * Apply DomainStrategy to outbound target + * Add DomainStrategy to JSONv5 outbound + * Add sniffing for TUN + * Add HTTPUpgrade transport + * It is a reduced version of WebSocket Transport that can pass many + reverse proxies and CDNs without running a WebSocket protocol stack + * TUN Support + * Add uTLS support for h2 transport + * Fix bugs + +------------------------------------------------------------------- +Sun Oct 8 13:35:54 UTC 2023 - Hillwood Yang + +- Update version to 5.8.0 + * DNS over QUIC should not have "http/1.1" and "h2" ALPNs + * Migrate to quic-go v0.36.0 + * Fix: parse for the CipherType of Shadowsocks in simplified config + * Fix protocol matching in routing + * Fix CI breakage in 5.7.0 +- Build by golang 1.20, workaround build error on golang 1.21 + +------------------------------------------------------------------- +Sun Jun 25 03:13:08 UTC 2023 - opensuse-packaging + +- Drop vendor in filelist + +------------------------------------------------------------------- +Mon Jun 12 06:34:21 UTC 2023 - opensuse-packaging + +- Update version to 5.7.0 + * meek: a new transport protocol meek is added. + * HTTP Proxy Add h1SkipWaitForReply Option to HTTP Proxy Protocol + * set v2ray binary as an entrypoint in container images + * Add Integrated Container Image Building + * Skip validating on empty http host config + * Add PacketAddr support to Trojan + * DomainStrategy support for all outbounds + * Add an option to replace destination address in access log with sniffed domain + * uTLS uTLS ALPN Control + * uTLS New Security Type uTLS: TLS Client Hello imitation + * DNS Support per-client configuration + * DNS Support specifying domain matcher + * Add bind to device to Windows and Darwin + * Replace default Health Ping URL to HTTPS for burst observatory + * Implement Match and MatchAny for all MatcherGroup + * Fix bugs + +------------------------------------------------------------------- +Thu Jan 5 12:42:50 UTC 2023 - opensuse-packaging + +- Fix service command: "run" is required in v2ray 5.x + +------------------------------------------------------------------- +Thu Dec 29 14:23:37 UTC 2022 - Marguerite Su + +- Update version to 5.2.0 + * New Features + + uTLS New Security Type uTLS: TLS Client Hello imitation. + Only client without transport, or with websocket transport is + currently supported. + + DNS Support per-client configuration + + DNS Support specifying domain matcher + + Replace default Health Ping URL to HTTPS + + Implement Match and MatchAny for all MatcherGroup, IndexMatcher + * Fixes + + Fix typo in error message + + Support domain string validation + + Charset of ACAutomationMatcherGroup should accept all ASCII characters + + Fix logic of domain override + + Fix HTTP sniff + + Fix config merger fixes + + Fix selectLeastLoad() returns wrong number of nodes + + Fix(freebsd): ReadUDPMsg nil pointer + + fix: socks4/4a client handshake + + Add transport original name to listen unix + + fix Replace "math/rand" with "crypto/rand" in padding generation + + Fix remove v2ctl from debian/rules + + Fix getting shared flags for balance info command + + Fix erroneous prefix checking + + Fix json.Reader: fill output bytes as much as possible + + Guard against nil pointer dereference of (*NetworkList) + * Chores + + Add tests for idn support + + Refactor: replace netaddr package with netipx + +------------------------------------------------------------------- +Sat Dec 25 14:01:53 UTC 2021 - opensuse-packaging + +- Update version to 4.44.0 + * Fix DoS attack vulnerability in CommandSwitchAccountFactory. (@geeknik) + * Apply timeout to DNS outbound. (#1330 @nekohasekai) + +------------------------------------------------------------------- +Wed Dec 1 08:11:01 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * v2ray.service + * v2ray@.service + +------------------------------------------------------------------- +Thu Nov 11 02:55:40 UTC 2021 - opensuse-packaging + +- Update version to 4.43.0 + * Send Shadowsocks handshake with payload data if available + * Custom TCP Fast Open queue length support + * Fix Trojan fallback cannot get ALPN + * Fix QueryStrategy ignored + * Fix UDP connection transport connection terminated unnecessarily + * refactor: move from io/ioutil to io and os package + * Fix some tests to use udp.PickPort() + * Fix flaky TestVMessDynamicPort + +------------------------------------------------------------------- +Tue Sep 21 13:38:23 UTC 2021 - opensuse-packaging + +- Update to 4.42.2 + * TLS: support client certificate authentication #1169 Thanks @qq906907952 + * Socks: support 4/4a version of the socks protocol (#1269 Thanks @nekohasekai) + * DNS: add option disableFallbackIfMatch for DNS (#1270 Thanks @nekohasekai) + * DoQ(DNS over QUIC) local mode supports IP destination + (#1226 Thanks @AkinoKaede) + * Observatory will now probe outbounds in a deterministic order + (#1230 Thanks @digglife) + * DNS response will respect request type(like AAAA, A) + (#1235 Thanks @AkinoKaede) + * Fix typo in DNS log output (#1183 Thanks @rurirei) + * Fix typo in observatory log output (#1211 Thanks @ihotte) + * Fix version string not updated to match release version + * Fix IP length not deterministic (#1267 Thanks @Loyalsoldier) + * Fix HTTP outbound not respect socket config (#1264 Thanks @Vigilans) + * Fix sockopt.mark type (#1264 Thanks @Vigilans) + * Fix typo in browser forwarder error message +- Update in 4.41.1 + * VMess: Added 2 VMess experiments AuthenticatedLength and NoTerminationSignal + #940 Thanks @RPRX + * Hardening Draining connection at client side when receiving invalid data. + #940 Thanks @RPRX + * Observatory Support custom probe interval and probe URL. Thanks @nekohasekai + * Fixed connection stability issue when in h2, grpc transport. + #1059 #1058 #1056 Thanks @IRN-Kawakaze @architecturers @lijinglin3 + * Further fixed connection stability issue when in h2, grpc transport. + check https://github.com/v2fly/v2ray-core/releases/tag/v4.41.1 for more info +- Update in 4.40.1 + * DNS: support DNS over TCP. #983 Thanks @AkinoKaede + * Fix: new cert issuing is incorrectly delayed. #998 Thanks @bhoppi + +------------------------------------------------------------------- +Wed Jun 2 08:15:09 UTC 2021 - opensuse-packaging + +- Update version to 4.39.2 + * Websocket: support header based Websocket early data & its partial browser + forwarder support + * GeoData: add a memory efficient geodata decoder called memconservative for + memory-limited devices #934 #953 #964 #965 #967 #977 Thanks @Loyalsoldier @rurirei + * HTTP/2 Transport: support to set method and headers for outgoing connections + * TCP Socket Option: support to set keepalive interval on Linux operating system + #962 Thanks @therealak12 + * Fix BrowserForwarder panics with empty config (#954) Thanks @AkinoKaede + @Loyalsoldier + * Fix FakeDNS prints error with empty config (#955) Thanks @Loyalsoldier + * Fix Dual stack FakeDNS Close method (#956) Thanks @Loyalsoldier + * Fix Observatory starts with empty config & fails to close (#957) Thanks + @Loyalsoldier + * Fix Null check on alternative system dialer (#959) Thanks @rurirei + * Fixed the chain proxy support for gRPC and HTTP/2 transport + * Fixed leastping logic (#1019) Thanks @fanyiguang + * Fixed v2ctl unable to create geodata loaders (#1014) Thanks @ght99 +- Update in 4.38.3 + - FakeDNS: Added fakedns+others sniffer , based on #697 . Thanks @yuhan6665 + - TLS: A SECURITY improvement that allow the remote peer's TLS certificate + to be pinned to a known value. Document for TLS is updated + - Observatory: A component that measure the connectivity of selected outbounds + The document for Observatory is updated. + - Routing : leastPing balancing strategy is added. This strategy will select + a outbound that is alive and completed HTTPS GET request in the least time. + The document for Routing is updated. + - Fixed crashing in fake dns. #931 Thanks @IceCodeNew + - Added IPv6 pool in fake dns by default. #925 Thanks @Loyalsoldier + - Return ErrEmptyResponse for fakedns. #926 Thanks @sixg0000d + - Fixed UDP DNS connection cause crash. Thanks @nekohasekai + - Fixed two typo in comments. Thanks @U-v-U + * Multi-json support for observatory, browser forwarder. + #944 Thanks @ha-ku @AkinoKaede +- Add browserforwarder related v2ray-extra.zip + +------------------------------------------------------------------- +Thu Apr 15 06:11:12 UTC 2021 - opensuse-packaging + +- update version to 4.37.3 + * Add multiple address host support for DNS (#884 #886 #888) + * Fix geoiop & geosite load issue (#889) +- update in 4.37.2 + * Add browser forwarder support for Websocket (#818) + * Add Websocket 0-RTT early data support (#818) + * Add replay protection for Shadowsocks proxy (#777) + * Add queryStrategy option for DNS (#794) + * Add disableFallback & skipFallback option for DNS client (#864) + * Add inversed GeoIP matching (#860) + * Add grpcSettings & gunSettings to streamSettings (00879c4) @rprx + * Fix vprotogen loop dependency (#797) @Loyalsoldier @U-v-U + * Fix DNS tests timeout due to network instability (#805) @Loyalsoldier + * Remove AA header flag in DNS query (#817) @Loyalsoldier + * TProxy: cannot find IPv6 destination in redirect mode (#815) @mzz2017 + * Context: ctx initialization for core.functions (#841) @rurirei + * Set FakeDNS FakeEnable option dynamically (#879) @sixg0000d @Loyalsoldier + * Fix Websocket early data 404 bug (#859) @k79e + * Fix QUIC: disconnect due to timeout (#850) @bhoppi + * Log: remove package path prefix in logs (#840 0138017 78c1993) @kslr +- update in 4.36.2 + * Fix gRPC max delay unintentionally low (1eaec68) @xiaokangwang + * Fix core panics when zero domain/full type of rule (#786) @darsvador +- update in 4.36.1 + * Add gRPC/gun transport (#757 #783) + * Add loopback proxy (#770) + * Add a new efficient routing rule matcher MphDomainMatcher (#743) + * FakeDNS: use 198.18.0.0/15 as default FakeDNS IP pool (#779) +- update build needed golang version to 1.16 +- keep go.sum go.mod to fix build issue with 'matched no packages' +- add geo files manually since upstream removed them from source + +------------------------------------------------------------------- +Tue Mar 9 10:26:12 UTC 2021 - opensuse-packaging + +- update version to 4.35.1 + * Add support for FakeDNS (#395 #406 #696) @yuhan6665 + * Add streamSetting / transport support for outbound front proxy + * Add zero pseudo encryption for better performance VMess + * Add support to disable compatibility for legacy VMess MD5 (#596) @dyhkwong + * Add a faster and more memory-efficient routing rule matcher + HybridDomainMatcher (#587 #639) @darsvador + * Add support to disable DNS cache (#699 #705) @CalmLong + * Fix test HTTP/2 dial timeout (#570) @kslr + * Fix Trojan panic when UDP dispatcher fails to write response (#599) @maskedeken + * Fix TCP default ALPN (#716) @AkinoKaede + * Fix DNS rule index out of range (#727) @Loyalsoldier + Check https://github.com/v2fly/v2ray-core/releases/tag/v4.35.1 for more info +- update import path to github.com/v2fly/v2ray-core/v4 + +------------------------------------------------------------------- +Sat Jan 9 01:37:48 UTC 2021 - opensuse-packaging + +- update version to 4.34.0 + * Disable TLS Session Resumption by default + * Remove legacy Shadowsocks unsecure stream ciphers + * Add preliminary support for DNS over QUIC + +------------------------------------------------------------------- +Tue Dec 29 13:11:50 UTC 2020 - opensuse-packaging + +- Rename golang-github-v2ray-v2ray-core to golang-github-v2fly-v2ray-core +- Update vendor. + +------------------------------------------------------------------- +Wed Nov 25 15:31:22 UTC 2020 - opensuse-packaging + +- update to version 4.33.0 + * Remove XTLS + * API: Reflection Service Support @Vigilans + * Update to IETF QUIC draft-32 +- update in 4.32.1 + * VLESS XTLS Direct Mode ReadV Experiment + * Disable 0-RTT mechanism for HTTP/1.x outbound + * Set default alterId to 0 for VMess dynamic ports + +------------------------------------------------------------------- +Sun Nov 1 12:26:08 UTC 2020 - opensuse-packaging + +- update version to 4.32.0 + * loads JSON internally by default @forever8938 + * Refine UNIX domain socket @lucifer9 + * Fix mKCP sending window @p4gefau1t + * Fix JSON parsing dependency introduced by mutijson config @xiaokangwang + * Fix proto.go ProtoFilesUsingProtocGenGoFast on Windows @JimhHan +- other changes before this version + * Add full VLESS fallbacks support to Trojan + * Add Trojan over XTLS support @maskedeken + * Add XTLS Direct Mode + * Add XTLS support to mKCP + * Add padding to abstract UNIX domain socket in fallbacks + * Add XTLS support to DomainSocket @rprx + +------------------------------------------------------------------- +Mon Sep 28 08:35:06 UTC 2020 - opensuse-packaging + +- Update version to 4.29.0 + * Fix issue#202 + * Fix issue#203 + * Routing: Implement Route interface as the routing result of Router + * kcp: removing annoying NewAEADAESGCMBasedOnSeed hint + * Make isAEAD more efficient + * Golangci-lint: disable some plugins + * Add XTLS support + * CodeQL: do NOT run on ready for review status + +------------------------------------------------------------------- +Sat Sep 12 10:48:05 UTC 2020 - opensuse-packaging + +- Update version to 4.28.1 + * Fix incorrect IV usage which slightly reduced security + +------------------------------------------------------------------- +Fri Sep 11 08:42:39 UTC 2020 - opensuse-packaging + +- Update version to 4.28.0 + * Changes + - VMess AEAD will be used when alterId is 0. ("testsEnabled" is discarded) + * Fixes + - Fix dns tests by setting v2ray.location.asset @felixonmars + - fix abstract UDS & add PROXY protocol support to DS inbound @lucifer9 @rprx + - Systemd: prevent restart on corrupt config @DuckSoft + * Chores + - Upgrade all dependencies @rprx + - Change lint order to avoid file changes notice @Loyalsoldier + - Update geoip, geosite + +------------------------------------------------------------------- +Wed Sep 2 10:34:41 UTC 2020 - opensuse-packaging + +- Update version to 4.27.5 + * Features + - Parse X-Forwarded-For in http transport @lucifer9 + * Fix + - Fix according to staticcheck result @Loyalsoldier + - Fix: Bound check when accessing DNS server's ipIndexMap @Vigilans + - Refine code @Loyalsoldier + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 + +------------------------------------------------------------------- +Sat Aug 29 03:26:28 UTC 2020 - opensuse-packaging + +- Update version to 4.27.4 + * Features + - Dotless domain support in built-in DNS @Vigilans + - Support source port matching in routing config @Vigilans + - Make HTTP outbound 0-rtt @darhwa + - Add asset location auto search @vcptr + - Add PROXY protocol support to TCP & WebSocket inbound @lucifer9 and @rprx + - VLESS PREVIEW 1.5 @rprx + * Fixs + - Amending domain matcher with returning array of all matches @Vigilans + - Refactor DNS Server to record original rule of domain matchers @Vigilans + - New Systemd unit file @dctxmei + - Fix: logging empty rules & DNS @Loyalsoldier + - Fix a typo @dikaixu1999 + - Shadowsocks Detection defense @studentmain and @xiaokangwang + - Update Old file @Loyalsoldier + * Breaking Changes + - VLESS fallback -> fallbacks, + see https://www.v2fly.org/config/protocols/vless.html + - Route matching order changes + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 +- Update in 4.27.0 + * Feature + - VLESS PREVIEW 1.3 https://www.v2fly.org/config/protocols/vless.html + * Fix + - Shadowsocks supports cipher as None @yuhan6665 + - Add access log for Dokodemo inbound @lucifer9 + - Some typo fixes @DuckSoft + - Add Linux riscv64 release @rprx + - Fix the error of missing curl in Dockerfile @kallydev + - GitHub Actions push to docker hub @kallydev + - Optimize SO_REUSEPORT implementation @Vigilans + - DOH supports HTTP/2 @darhwa + - Apply Sockopt from inbound config to Dokodemo Tproxy's response connection + @Vigilans + * Breaking Change + - VMessAEAD has been updated and needs both client and server to be the same + version for it to work. + - Release file structure changes. + * Warning + - In version v4.28.0 and later, VMess AEAD will be enabled when alterId is + set to 0 + +------------------------------------------------------------------- +Sun Aug 2 09:20:46 UTC 2020 - Sam Yu + +- Fix out-of-box usability + +------------------------------------------------------------------- +Fri Jul 10 14:05:15 UTC 2020 - opensuse-packaging + +- Update version to 4.26.0 + * Update Signing key + * Update geoip, geosite + * Fix bug with tag name extract + * Generate Manifest for bleeding edge release + * Adjust arm build + * Allow the use of Browser Bridge + +------------------------------------------------------------------- +Thu Jun 25 15:09:25 UTC 2020 - Jan Engelhardt + +- Update summary with something useful. Trim filler wording + from description. + +------------------------------------------------------------------- +Sun Jun 21 09:05:14 UTC 2020 - opensuse-packaging + +- Update version to 4.25.0 + * VMess's new header format experiment begins. You can now enable VMessAEAD to + be better protected. Documents EN CH are updated. See extra-VMessAEADdoc.zip + for a more detailed explanation available in both Chinese and English. + * mKCP can now be encrypted to resist recognition, address issue mentioned in + #2530 #2253 #2131. Documents EN CH are updated. + * Updated Golang tool-chain. Thanks @rprx + * LocalAddr() in UDP workers will now return correct local addr. Thanks + @zhuobixin + * Further remove the identity leakage with TLS ClientHello from #2521 thank + @darhwa + * Fix UDP stability issue in Socks5 inbound, Shadowsocks inbound, and + Dokodemo( TProxy ) inbound. This should alleviate unnecessary CPU, memory + usage, and premature disconnection issue typically triggered by playing + games, video conference, and Torrenting. See #2565 thank @JimHan75d8c5 + @xiaokangwang and Other testers @1265578519 @zhj9709 @Kylejustknows etc + * Added ARM v5 binary in the release. This should allow legacy ARM devices to + run V2Ray correctly. See #2536 + +------------------------------------------------------------------- +Sun Jun 7 02:44:52 UTC 2020 - opensuse-packaging + +- initial package for version 4.23.4 diff --git a/v2ray-core.spec b/v2ray-core.spec new file mode 100644 index 0000000..536795e --- /dev/null +++ b/v2ray-core.spec @@ -0,0 +1,136 @@ +# +# spec file for package v2ray-core +# +# Copyright (c) 2025 SUSE LLC and contributors +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +%define provider github +%define provider_tld com +%define project v2fly +%define repo v2ray-core +# https://github.com/v2fly/v2ray-core +%define provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo} +%define import_path github.com/v2fly/v2ray-core/v5 + +Name: v2ray-core +Version: 5.40.0 +Release: 0 +Summary: Network tools for building a computer network +License: MIT +Group: Productivity/Networking/Web/Proxy +URL: https://github.com/v2fly/v2ray-core +Source0: https://github.com/v2fly/v2ray-core/archive/v%{version}/%{name}-%{version}.tar.gz +Source1: vendor.tar.gz +Source2: v2ray.service +Source3: v2ray@.service +Source4: https://github.com/v2fly/geoip/raw/release/geoip.dat +Source5: https://github.com/v2fly/domain-list-community/raw/release/dlc.dat +Source6: https://github.com/v2fly/v2ray-core/releases/download/v%{version}/v2ray-extra.zip +Source99: %{name}-rpmlintrc +Patch0: fix-CVE-2025-47911.patch +BuildRequires: fdupes +BuildRequires: golang-packaging +BuildRequires: systemd-rpm-macros +BuildRequires: unzip +BuildRequires: pkgconfig(systemd) +AutoReqProv: Off +Provides: v2ray = %{version}-%{release} +Obsoletes: v2ray < %{version}-%{release} +BuildRoot: %{_tmppath}/%{name}-%{version}-build +%{go_provides} +%{?systemd_ordering} + +%description +Project V is a set of network tools for building a computer network. +It secures network connections and protects privacy. + +%package -n golang-%{provider}-%{project}-%{repo} +Summary: Additional mobile libraries +Group: Development/Languages/Golang +BuildArch: noarch + +%description -n golang-%{provider}-%{project}-%{repo} +Project V is a set of network tools for building a computer network. +It secures network connections and protects privacy. + +This package provide source code for %{repo} + +%prep +%setup -q -a1 -a6 -n %{repo}-%{version} +%patch -P 0 -p1 + +%build +export GO111MODULE=off +%goprep %{import_path} +%gobuild main... +mv %{_builddir}/go/bin/main %{_builddir}/go/bin/v2ray + +%install +%goinstall +%gosrc +rm -rf %{buildroot}%{go_contribsrcdir}/%{import_path}/vendor +%gofilelist + +install -d %{buildroot}%{_datadir}/v2ray +install -m0644 %{SOURCE4} %{buildroot}%{_datadir}/v2ray/geoip.dat +install -m0644 %{SOURCE5} %{buildroot}%{_datadir}/v2ray/geosite.dat + +install -d %{buildroot}%{_unitdir} +install -m0644 %{SOURCE2} %{buildroot}%{_unitdir}/ +install -m0644 %{SOURCE3} %{buildroot}%{_unitdir}/ + +install -d %{buildroot}%{_sysconfdir}/v2ray +install -m0644 release/config/*.json %{buildroot}%{_sysconfdir}/v2ray/ + +install -d %{buildroot}%{_sbindir}/ +ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rcv2ray + +install -d %{buildroot}%{_datadir}/v2ray/browserforwarder +install -m0644 browserforwarder/index.js %{buildroot}%{_datadir}/v2ray/browserforwarder/ +install -m0644 browserforwarder/index.html %{buildroot}%{_datadir}/v2ray/browserforwarder/ + +%fdupes %{buildroot} + +%pre +%service_add_pre v2ray.service v2ray@.service + +%post +%service_add_post v2ray.service v2ray@.service + +%preun +%service_del_preun v2ray.service v2ray@.service + +%postun +%service_del_postun v2ray.service v2ray@.service + +%files +%doc README.md +%license LICENSE +%{_bindir}/v2ray +%{_bindir}/v2api +%{_unitdir}/v2ray.service +%{_unitdir}/v2ray@.service +%dir %{_sysconfdir}/v2ray +%dir %{_datadir}/v2ray +%{_datadir}/v2ray/* +%config(noreplace) %{_sysconfdir}/v2ray/*.json +%{_sbindir}/rcv2ray +%{_datadir}/v2ray/browserforwarder/ + +%files -n golang-%{provider}-%{project}-%{repo} -f file.lst +%doc README.md +%license LICENSE + +%changelog diff --git a/v2ray-extra.zip b/v2ray-extra.zip new file mode 100644 index 0000000..8d4c2de --- /dev/null +++ b/v2ray-extra.zip @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:abb1a1805f93ab352a85e38f565cee8956febf97d2edfc08a1309654ec881c02 +size 296846 diff --git a/v2ray.service b/v2ray.service new file mode 100644 index 0000000..a0f9517 --- /dev/null +++ b/v2ray.service @@ -0,0 +1,30 @@ +[Unit] +Description=V2Ray Service +Documentation=https://www.v2fly.org/ +After=network.target nss-lookup.target + +[Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions +User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true +Environment=V2RAY_LOCATION_ASSET=/usr/share/v2ray +ExecStart=/usr/bin/v2ray run -config /etc/v2ray/config.json +Restart=on-failure +RestartPreventExitStatus=23 + +[Install] +WantedBy=multi-user.target diff --git a/v2ray@.service b/v2ray@.service new file mode 100644 index 0000000..30b9843 --- /dev/null +++ b/v2ray@.service @@ -0,0 +1,30 @@ +[Unit] +Description=V2Ray Service +Documentation=https://www.v2fly.org/ +After=network.target nss-lookup.target + +[Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions +User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true +Environment=V2RAY_LOCATION_ASSET=/usr/share/v2ray +ExecStart=/usr/bin/v2ray run -config /etc/v2ray/%i.json +Restart=on-failure +RestartPreventExitStatus=23 + +[Install] +WantedBy=multi-user.target diff --git a/vendor.tar.gz b/vendor.tar.gz new file mode 100644 index 0000000..8430876 --- /dev/null +++ b/vendor.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2b47495a1c058b741f03627e827093d7036967973e4ad5d799221242f324e58a +size 8273389 -- 2.51.1