Highlights
Security
-
Only root can now read the tunnel database and WireGuard configuration, which hold the server's keys. Existing installs are tightened when the service starts. Thanks to dritzps for reporting this.
-
Publishing to the Start9 apt repository now refuses to sign any package the repository's existing signed index does not list. Thanks to dritzps for reporting this.
Full changelog
[1.5.1]
Fixed
-
Fixed documentation links in the contextual help panel.
-
Show server-provided plaintext HTTP error details and preserve meaningful timeout and cancellation errors.
Security
-
Only root can now read the tunnel database and WireGuard configuration, which hold the server's keys. Existing installs are tightened when the service starts. Thanks to dritzps for reporting this.
-
Publishing to the Start9 apt repository now refuses to sign any package the repository's existing signed index does not list. Thanks to dritzps for reporting this.
start-tunnel packages Checksums
SHA-256
a5a912929d41c52a0678ac54ca0342b7dcb36dde5961916f1c8fae6457d013c1 start-tunnel_1.5.1_amd64.deb
a0b10913360aa745a642639e381b2bdf0a38614a289c238433c2a7fbd2e858b4 start-tunnel_1.5.1_arm64.deb
7c39b6bd5edc452e3e9e68cdf1a4d1ca5e73ac68d94ac391fe05324565ff5fdf start-tunnel_1.5.1_riscv64.deb
BLAKE-3
1518c17107ed6bcb71f88522c41c3da21061fecaa26800e5ff48b54d1e01811e start-tunnel_1.5.1_amd64.deb
e5c55c6c7019c2a9db7206fc46ea0acefb9a516f6d8c2aee9308d2171eec7985 start-tunnel_1.5.1_arm64.deb
d1da9574fce684fc063fda0cbc305254eee0e41b550c156bd6c3525d1457856b start-tunnel_1.5.1_riscv64.deb