File libu2f-host.changes of Package libu2f-host.10301
------------------------------------------------------------------- Fri Feb 8 12:23:30 UTC 2019 - Karol Babioch <kbabioch@suse.de> - Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which could allow a buffer overflow with a custom made malicious USB device (bsc#1124781 CVE-2018-20340). - Applied spec-cleaner ------------------------------------------------------------------- Tue May 15 12:05:12 UTC 2018 - kbabioch@suse.com - Version 1.1.6 (released 2018-05-15) - Change waiting logic on authenticate to allow for faster feedback. - Version 1.1.5 (released 2018-03-07) - Fix refcount when adding json_objects. - Handle fido2 keepalive. - Add udev rules for more devices. ------------------------------------------------------------------- Wed Sep 13 16:51:11 UTC 2017 - kkaempf@suse.com - Version 1.1.4 (released 2017-09-01) - Added more u2f devices to the udev rulesets. - Increase buffer size, allowing for bigger certificates. - Add u2f.conf.sample for FreeBSD permission handling. ------------------------------------------------------------------- Wed Oct 12 13:02:38 UTC 2016 - t.gruner@katodev.de - Version 1.1.3 (released 2016-10-04) - Added more u2f devices to the udev rulesets. - Fixup mac builds. - Version 1.1.2 (released 2016-06-22) - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate. - Documentation fixes. - Compilation fixes on visual studio. - Add udev rules for Feitian devices. - Add optional cmake build. - Change license of the commandline tool to LGPL 2.1+ - remove udev.patch ------------------------------------------------------------------- Thu May 19 13:33:26 UTC 2016 - t.gruner@katodev.de - Add buildrequirement for libudev to select the rule for udev. - Add udev directories in %files - Add udev rule for Feitian ePass FIDO (udev.patch) - Change License for the library ------------------------------------------------------------------- Wed Mar 23 20:45:47 UTC 2016 - jengelh@inai.de - Avoid undesired blank lines at start of descriptions. Expand description. Trim filelist. ------------------------------------------------------------------- Mon Mar 21 12:21:54 UTC 2016 - t.gruner@katodev.de - Version 1.1.1 (released 2016-03-14) - Use correct index in u2fh_devs_discover() - Fix an issue where we left the authenticate loop early. - Fix an issue where authenticate remembered which devices to skip. - Stop validating the scheme of the origin. - Fixup a crash in u2fh_devs_discover() with closing unplugged devices. - Documentation fixes. ------------------------------------------------------------------- Thu Feb 18 11:57:06 UTC 2016 - t.gruner@katodev.de - Version 1.1.0 (released 2016-02-15) - Add udev rules for more devices. - Don’t return success when no data is received. - Fix typos. - Make send_apdu send data like chrome does. - Don’t release json object that we don’t own no more. - Don’t do memcmp on uninitialized memory. - Add u2fh_authenticate2() and u2fh_register2(). - Remove base64 padding (required by spec). - Use unsigned ints to prevent buffer overflows. ------------------------------------------------------------------- Tue Oct 6 11:16:30 UTC 2015 - t.gruner@katodev.de - Remove fix in u2f-host/u2f-host.h - Cleanup .spec file ------------------------------------------------------------------- Fri Sep 4 07:38:29 UTC 2015 - t.gruner@katodev.de - Fix path in u2f-host/u2f-host.h ------------------------------------------------------------------- Tue Sep 1 11:54:44 UTC 2015 - t.gruner@katodev.de - Version 1.0.0 (released 2015-08-27) - Add udev rules for older version of udev. - Add pam:// as an allowed protocol. - Stop using sleep(), use Sleep() on windows and usleep() on others. - Fixup tool name in help and manpage. - Add a timeout to the register and authenticate actions. ------------------------------------------------------------------- Fri Jan 23 11:52:04 UTC 2015 - t.gruner@katodev.de - Version 0.0.4 (released 2015-01-22) - Add an exponential growing timeout for slow devices (PlugUp). ------------------------------------------------------------------- Thu Jan 8 19:55:46 UTC 2015 - t.gruner@katodev.de - Version 0.0.3 (released 2015-01-08) - Change license to LGPLv2+ for the library. - Some improvements to internal communication code. - Some debug mode improvements, from Bram Vandoren. ------------------------------------------------------------------- Tue Dec 9 07:23:22 UTC 2014 - t.gruner@katodev.de - Version 0.0.2 (released 2014-11-28) - Add more devices to udev. ------------------------------------------------------------------- Tue Oct 28 13:07:01 UTC 2014 - t.gruner@katodev.de - Version 0.0 (released 2014-09-16) - Initial release.
