v5.44.1
Security Updates
- uTLS v1.8.2: Chrome120 imitation profile identification
- Go v1.25.6: Fixes vulnerable
tls.Config.Clone()function
Fixes
- DNS leakage prevention with gRPC transports
- Dynamic address length calculation in Shadowsocks UDP encoding
Dependencies
- golang.org/x/crypto 0.47.0, golang.org/x/net 0.49.0, miekg/dns 1.1.70, go-chi/chi/v5 5.2.4
Security Updates
- uTLS: bundled library updated to v1.8.2 for Chrome120 imitation profile identification.
- Golang: Update golang toolchain to v1.25.6, which fixed an vulnerable (tls.Config).Clone function.
Fixes
- avoid DNS leakage with gRPC transports by @leo9800 in https://github.com/v2fly/v2ray-core/pull/3587
- Dynamic address length calculation in shadowsocks udp encoding in https://github.com/v2fly/v2ray-core/pull/3588
Chores
- Chore: bump golang.org/x/crypto from 0.46.0 to 0.47.0 by @dependabot[bot] in https://github.com/v2fly/v2ray-core/pull/3595
- Chore: bump golang.org/x/net from 0.48.0 to 0.49.0 by @dependabot[bot] in https://github.com/v2fly/v2ray-core/pull/3594
- Chore: bump github.com/miekg/dns from 1.1.69 to 1.1.70 by @dependabot[bot] in https://github.com/v2fly/v2ray-core/pull/3592
- Chore: bump github.com/go-chi/chi/v5 from 5.2.3 to 5.2.4 by @dependabot[bot] in https://github.com/v2fly/v2ray-core/pull/3596
Full Changelog: https://github.com/v2fly/v2ray-core/compare/v5.44.0...v5.44.1