From b16d30e4d12bbfc0445d448e625cfc5b9a91945b Mon Sep 17 00:00:00 2001 From: Daniele Lacamera Date: Fri, 2 Oct 2026 11:50:52 +0200 Subject: [PATCH] Prepare v1.1.0 release --- CHANGELOG.md | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index c5255ab5..867c5f5a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,27 @@ # Changelog +## v1.1.0 2026-10-02 + +- New ports: AMD/Xilinx (ZCU102, Versal VMK180, Zynq-7000), NXP QorIQ (FMan, ENETC, eTSEC, QUICC UCC), PIC32MZ, RealTek AmebaPro2, NXP LPC54S018M, STM32C5A3, STM32F437/F439, Pico 2 W, Zephyr; wolfHAL as a submodule under `lib/`; big-endian host support. +- TFTP client and server. +- Multicast UDP sockets with IGMP. +- Raw and AF_PACKET sockets. +- VLAN 802.1Q tagging and filtering. +- Multi-interface routing and forwarding: static route table, martian and strict-RPF source checks. +- Loopback interface. +- wolfSupplicant: clean-room WPA/WPA2/WPA3 supplicant with WPA3-SAE interop; wired 802.1X EAP-TLS demo on STM32H563. +- MACsec 802.1AE (SecY) with wolfMKA control plane. +- wolfGuard: key rotation, cookie expiry, source policy enforcement. +- TCP: RFC 9293 acceptability and RST handling, pre-accept and late-accept fixes, PAWS in TIME_WAIT/LAST_ACK, MSS floor, 64 s RTO cap, retransmit in teardown states. +- DHCP: RFC 4331 DAD before lease bind, exponential retransmit backoff, jittered T1/T2, server-ID validation. +- DNS response validation per RFC 1035; IGMP query responses deferred per RFC 3376. +- Security hardening: ARP guardrails (DAD, anti-poisoning, rate limiting), IPsec ESP replay window and SA persistence, TFTP and HTTP hardening, raw socket receive enforcement. +- New APIs: wolfIP_sock_abort(), IP_TOS setsockopt, SO_RCVTIMEO; FreeRTOS ISR-safe wake and deadline-based sleep. +- Compile-out options for the DHCP client and zero-UDP builds. +- Docs: porting guide, how-to guides (TLS, HTTP, wolfGuard, DHCP/DNS, IPsec ESP, TFTP, advanced IPv4), lwIP migration guide with Japanese translation, CONTRIBUTING.md. +- wolfIP_poll refactor +- Fixed ESP anti-replay window issue (CWE-354). Reported by: Matan Radomski. + ## v1.0 2026-03-31 Initial public wolfIP release.