| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: mihomo | Distribution: openSUSE Tumbleweed |
| Version: 1.19.30 | Vendor: openSUSE |
| Release: 1.1 | Build date: Mon Aug 17 07:52:22 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 55990008 | Source RPM: mihomo-1.19.30-1.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://github.com/MetaCubeX/mihomo | |
| Summary: The universal proxy platform | |
mihomo (formerly Clash.Meta) is a rule-based tunnel / universal proxy platform written in Go. It is the actively maintained successor to the original clash.
GPL-3.0-only AND MPL-2.0
* Mon Aug 17 2026 Martin Pluskal <mpluskal@suse.com>
- Update to version 1.19.30:
* CVE-2026-56862: post-handshake TLS handshake messages such as
KeyUpdate were always treated as state-advancing, letting a
malicious client force unbounded key derivation on the server;
fixed by the vendored crypto/tls fork metacubex/tls 0.1.8
(boo#1275032)
* Add a ZeroTier outbound, plus follow-up work on its network
lifecycle events, domain resolution, runtime synchronisation,
multicast/link state, equal-quality path selection and
packet-bridge throughput
* Add mipstack, a second userspace network stack alongside
gVisor, with BBR3, datagram and raw IP socket support; expose
it through a new "ip-stack" option on the openvpn, masque,
wireguard and ZeroTier outbounds
* Support AmneziaWG v3.0 and v3.1
* Overhaul the sniffer: H2C and QUICv2 sniffing (#3036),
multi-round reads, ClientHello reassembly across TLS records,
HTTP/2 header blocks across continuation frames and coalesced
QUIC packets; keep connections open after an initial sniffing
failure and drop unnecessary sniffing waits
* Fix DNS handling: initialise DNS before NTP (#3103), truncate
UDP replies to the client's advertised buffer size (#3043),
echo the EDNS0 option when the request carries one (#3041) and
fix a panic when UDP is unsupported in dns_dialer
* Improve OpenVPN: survive server-initiated soft reset and rekey
(#3109) and allow overriding IV_VER through peer-info
* Harden ShadowQUIC/JLS: enforce JLS authentication in the QUIC
layer, avoid reserved TLS suffixes in JLS FakeRandom and
harden JLS camouflage forwarding
* Add "client-metadata" to anytls (not sent by default),
"handshake-timeout" to hysteria2 and "rate-limit" to the
restls listener
* Fix Tailscale not recovering after the network was restored,
and report the upstream Tailscale version (#3074, #3079)
* Apply the default uplink chunk size for xhttp (#3061) and
strictly verify Clash-style domain wildcard syntax
* Update bundled quic-go to 0.61.0, tailscale to v1.102.2, and
refresh gvisor, bart and mieru
- Widen License to "GPL-3.0-only AND MPL-2.0": the Go binary
statically links its vendored modules, and the new ZeroTier and
mipstack stacks are MPL-2.0 (as are the already-linked
metacubex/yamux and hashicorp/golang-lru)
- Run the upstream unit test suite in %check instead of only a
version smoke test, skipping the three listener/inbound
V2RayInterop tests that download and build v2ray-core at test
time; this needs "go test -skip", so raise the golang(API)
BuildRequires floor to 1.21
* Sat Jul 18 2026 Martin Pluskal <mpluskal@suse.com>
- Update to version 1.19.29:
* Add JLS (TLS obfuscation) support across many outbounds and
listeners (anytls, vmess/vless/trojan, shadowsocks, snell) and
align its handshake handling with JLS v3
* Add ReSTLS and ShadowTLS support for anytls, snell and the
vmess/vless/trojan proxies; reimplement ShadowTLS and make its
v2/v3 read deadlines recoverable
* Add a ShadowQUIC outbound and listener with JLS pre-flight
fallback handling
* Improve OpenVPN: TLS rekey and data-ciphers negotiation,
tls-crypt-v2 and TLSAuth support, reconnect on server soft
reset (#2989, #2978, #2969)
* Sync anytls to v0.0.13 and fix anytls listener config parsing
* Add name-cert-verify and per-provider override-expr options
* Fix DNS and rule handling: full-width IP-SUFFIX panic, CNAME
query matching a hosts domain-entry and DOMAIN-WILDCARD
ignoring the sniffed hostname (#2975, #2965, #2956)
* Fix wireguard per-peer reserved, a TUIC stream leak, a reaper
goroutine busy-loop and listener duplicate-name checks
(#2958, #2959, #2964, #2948)
* Wed Jul 08 2026 Martin Pluskal <mpluskal@suse.com>
- Update to version 1.19.28:
* Restore the original Clash /proxies REST API behaviour
(behaviour change for API consumers)
* Add new outbound and protocol support: rematch outbound with
REMATCH-NAME rules, MKCP and TLS-mirror for VMess, shadow-TLS
for Snell, ReSTLS for the Shadowsocks listener and h3-l4proxy
for the masque outbound
* Add DNS fallback-lazy-query and listen-routing-mark options
* Add routing-mark support for listeners and DNS plus a
top-level external-controller-routing-mark option
* Fix several crashes and panics (AmneziaWG slice bounds,
masque dial failures, sing-mux UDP writes, TUIC v5 UDP relay
and a nil-slice rand.IntN)
* Bundle the vendored crypto/tls fix for CVE-2026-42505
- Restrict tar_scm tag matching to release tags (match-tag v*)
so the version resolves correctly now that upstream also places
a rolling Prerelease-Alpha tag on the release commit
* Fri Jun 19 2026 Martin Pluskal <mpluskal@suse.com>
- Initial package, version 1.19.27
- mihomo (formerly Clash.Meta) is the actively maintained successor to
the archived Dreamacro/clash; this package obsoletes both clash and
clash-meta
/etc/mihomo /etc/mihomo/config.yaml /usr/bin/mihomo /usr/lib/systemd/system/mihomo.service /usr/libexec/mihomo /usr/libexec/mihomo/start /usr/share/doc/packages/mihomo /usr/share/doc/packages/mihomo/README.md /usr/share/licenses/mihomo /usr/share/licenses/mihomo/LICENSE
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Aug 19 00:39:13 2026