File libu2f-host.changes of Package libu2f-host
-------------------------------------------------------------------
Fri Aug 21 13:54:14 UTC 2020 - Malte Kraus <malte.kraus@suse.com>
- Add support for json-c 0.14.0 (json-c-update.patch)
-------------------------------------------------------------------
Tue May 28 20:06:37 UTC 2019 - Karol Babioch <kbabioch@suse.de>
- Version 1.1.10 (released 2019-05-15)
- Add new devices to udev rules.
- Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)
-------------------------------------------------------------------
Wed Mar 6 16:23:31 UTC 2019 - Karol Babioch <kbabioch@suse.de>
- Version 1.1.9 (released 2019-03-06)
- Fix CID copying from the init response, which broke compatibility with some
devices.
-------------------------------------------------------------------
Tue Mar 5 17:06:59 UTC 2019 - Karol Babioch <kbabioch@suse.de>
- Version 1.1.8 (released 2019-03-05)
- Add udev rules
- Drop 70-old-u2f.rules and use 70-u2f.rules for everything
- Use a random nonce for setting up CID to prevent fingerprinting
- CVE-2019-9578: Parse the response to init in a more stable way to prevent
leakage of uninitialized stack memory back to the device (bnc#1128140).
-------------------------------------------------------------------
Fri Feb 8 11:10:42 UTC 2019 - Karol Babioch <kbabioch@suse.de>
- Version 1.1.7 (released 2019-01-08)
- Fix for trusting length from deivce in device init.
- Fix for buffer overflow when receiving data from device. (YSA-2019-01,
CVE-2018-20340, bsc#1124781)
- Add udev rules for some new devices.
- Using %license macro
- Applied spec-cleaner
-------------------------------------------------------------------
Tue May 15 12:05:12 UTC 2018 - kbabioch@suse.com
- Version 1.1.6 (released 2018-05-15)
- Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
- Fix refcount when adding json_objects.
- Handle fido2 keepalive.
- Add udev rules for more devices.
-------------------------------------------------------------------
Wed Sep 13 16:51:11 UTC 2017 - kkaempf@suse.com
- Version 1.1.4 (released 2017-09-01)
- Added more u2f devices to the udev rulesets.
- Increase buffer size, allowing for bigger certificates.
- Add u2f.conf.sample for FreeBSD permission handling.
-------------------------------------------------------------------
Wed Oct 12 13:02:38 UTC 2016 - t.gruner@katodev.de
- Version 1.1.3 (released 2016-10-04)
- Added more u2f devices to the udev rulesets.
- Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
- Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
- Documentation fixes.
- Compilation fixes on visual studio.
- Add udev rules for Feitian devices.
- Add optional cmake build.
- Change license of the commandline tool to LGPL 2.1+
- remove udev.patch
-------------------------------------------------------------------
Thu May 19 13:33:26 UTC 2016 - t.gruner@katodev.de
- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library
-------------------------------------------------------------------
Wed Mar 23 20:45:47 UTC 2016 - jengelh@inai.de
- Avoid undesired blank lines at start of descriptions.
Expand description. Trim filelist.
-------------------------------------------------------------------
Mon Mar 21 12:21:54 UTC 2016 - t.gruner@katodev.de
- Version 1.1.1 (released 2016-03-14)
- Use correct index in u2fh_devs_discover()
- Fix an issue where we left the authenticate loop early.
- Fix an issue where authenticate remembered which devices to skip.
- Stop validating the scheme of the origin.
- Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
- Documentation fixes.
-------------------------------------------------------------------
Thu Feb 18 11:57:06 UTC 2016 - t.gruner@katodev.de
- Version 1.1.0 (released 2016-02-15)
- Add udev rules for more devices.
- Don’t return success when no data is received.
- Fix typos.
- Make send_apdu send data like chrome does.
- Don’t release json object that we don’t own no more.
- Don’t do memcmp on uninitialized memory.
- Add u2fh_authenticate2() and u2fh_register2().
- Remove base64 padding (required by spec).
- Use unsigned ints to prevent buffer overflows.
-------------------------------------------------------------------
Tue Oct 6 11:16:30 UTC 2015 - t.gruner@katodev.de
- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file
-------------------------------------------------------------------
Fri Sep 4 07:38:29 UTC 2015 - t.gruner@katodev.de
- Fix path in u2f-host/u2f-host.h
-------------------------------------------------------------------
Tue Sep 1 11:54:44 UTC 2015 - t.gruner@katodev.de
- Version 1.0.0 (released 2015-08-27)
- Add udev rules for older version of udev.
- Add pam:// as an allowed protocol.
- Stop using sleep(), use Sleep() on windows and usleep() on others.
- Fixup tool name in help and manpage.
- Add a timeout to the register and authenticate actions.
-------------------------------------------------------------------
Fri Jan 23 11:52:04 UTC 2015 - t.gruner@katodev.de
- Version 0.0.4 (released 2015-01-22)
- Add an exponential growing timeout for slow devices (PlugUp).
-------------------------------------------------------------------
Thu Jan 8 19:55:46 UTC 2015 - t.gruner@katodev.de
- Version 0.0.3 (released 2015-01-08)
- Change license to LGPLv2+ for the library.
- Some improvements to internal communication code.
- Some debug mode improvements, from Bram Vandoren.
-------------------------------------------------------------------
Tue Dec 9 07:23:22 UTC 2014 - t.gruner@katodev.de
- Version 0.0.2 (released 2014-11-28)
- Add more devices to udev.
-------------------------------------------------------------------
Tue Oct 28 13:07:01 UTC 2014 - t.gruner@katodev.de
- Version 0.0 (released 2014-09-16)
- Initial release.
