This repository has been archived by the owner on Oct 14, 2020. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 194
/
NEWS
148 lines (79 loc) · 3.44 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
libu2f-host NEWS -- History of user visible changes.
* Version 1.1.11 (unreleased)
* Version 1.1.10 (released 2019-05-15)
** Add new devices to udev rules.
** Fix a potentially uninitialized buffer.
* Version 1.1.9 (released 2019-03-06)
** Fix CID copying from the init response.
This broke compatibility with some devices.
* Version 1.1.8 (released 2019-03-05)
** Add udev rules.
** Drop 70-old-u2f.rules and use 70-u2f.rules for everything.
** Use a random nonce for setting up CID to prevent fingerprinting.
** Parse the response to init in a more stable way.
The old parser could leak 4 bytes of uninitialized stack back to the device.
Reported by Christian Reitter.
* Version 1.1.7 (released 2019-01-08)
** Fix for trusting length from deivce in device init.
Reported by Christian Reitter.
** Fix for buffer overflow when receiving data from device.
** Add udev rules for some new devices.
* Version 1.1.6 (released 2018-05-15)
** Change waiting logic on authenticate to allow for faster feedback.
* Version 1.1.5 (released 2018-03-07)
** Fix refcount when adding json_objects.
** Handle fido2 keepalive.
** Add udev rules for more devices.
* Version 1.1.4 (released 2017-09-01)
** Added more u2f devices to the udev rulesets.
** Increase buffer size, allowing for bigger certificates.
** Add u2f.conf.sample for FreeBSD permission handling.
* Version 1.1.3 (released 2016-10-04)
** Added more u2f devices to the udev rulesets.
** Fixup mac builds.
* Version 1.1.2 (released 2016-06-22)
** Make authenticate return U2FH_OK if touch is set to not needed.
Also minor fixes to error output of authenticate.
** Documentation fixes.
** Compilation fixes on visual studio.
** Add udev rules for Feitian devices.
** Add optional cmake build.
** Change license of the commandline tool to LGPL 2.1+
* Version 1.1.1 (released 2016-03-14)
** Use correct index in u2fh_devs_discover()
** Fix an issue where we left the authenticate loop early.
** Fix an issue where authenticate remembered which devices to skip.
** Stop validating the scheme of the origin.
** Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
** Documentation fixes.
* Version 1.1.0 (released 2016-02-15)
** Add udev rules for more devices.
** Don't return success when no data is received.
** Fix typos.
** Make send_apdu send data like chrome does.
** Don't release json object that we don't own no more.
** Don't do memcmp on uninitialized memory.
** Add u2fh_authenticate2() and u2fh_register2().
** Remove base64 padding (required by spec).
** Use unsigned ints to prevent buffer overflows.
* Version 1.0.0 (released 2015-08-27)
** Add udev rules for older version of udev.
** Add pam:// as an allowed protocol.
** Stop using sleep(), use Sleep() on windows and usleep() on others.
** Fixup tool name in help and manpage.
** Add a timeout to the register and authenticate actions.
* Version 0.0.4 (released 2015-01-22)
** Add an exponential growing timeout for slow devices (PlugUp).
* Version 0.0.3 (released 2015-01-08)
** Change license to LGPLv2+ for the library.
** Some improvements to internal communication code.
** Some debug mode improvements, from Bram Vandoren.
* Version 0.0.2 (released 2014-11-28)
** Add more devices to udev.
* Version 0.0.1 (released 2014-10-29)
** Use semantic versioning.
** Correct json key for keyHandle in signResponse
** Fix the udev rule
** Add option to install udev rule
* Version 0.0 (released 2014-09-16)
** Initial release.