1libu2f-host NEWS -- History of user visible changes.
2
3* Version 1.1.10 (released 2019-05-15)
4
5** Add new devices to udev rules.
6
7** Fix a potentially uninitialized buffer.
8
9* Version 1.1.9 (released 2019-03-06)
10
11** Fix CID copying from the init response.
12This broke compatibility with some devices.
13
14* Version 1.1.8 (released 2019-03-05)
15
16** Add udev rules.
17
18** Drop 70-old-u2f.rules and use 70-u2f.rules for everything.
19
20** Use a random nonce for setting up CID to prevent fingerprinting.
21
22** Parse the response to init in a more stable way.
23The old parser could leak 4 bytes of uninitialized stack back to the device.
24Reported by Christian Reitter.
25
26* Version 1.1.7 (released 2019-01-08)
27
28** Fix for trusting length from deivce in device init.
29Reported by Christian Reitter.
30
31** Fix for buffer overflow when receiving data from device.
32
33** Add udev rules for some new devices.
34
35* Version 1.1.6 (released 2018-05-15)
36
37** Change waiting logic on authenticate to allow for faster feedback.
38
39* Version 1.1.5 (released 2018-03-07)
40
41** Fix refcount when adding json_objects.
42
43** Handle fido2 keepalive.
44
45** Add udev rules for more devices.
46
47* Version 1.1.4 (released 2017-09-01)
48
49** Added more u2f devices to the udev rulesets.
50
51** Increase buffer size, allowing for bigger certificates.
52
53** Add u2f.conf.sample for FreeBSD permission handling.
54
55* Version 1.1.3 (released 2016-10-04)
56
57** Added more u2f devices to the udev rulesets.
58
59** Fixup mac builds.
60
61* Version 1.1.2 (released 2016-06-22)
62
63** Make authenticate return U2FH_OK if touch is set to not needed.
64Also minor fixes to error output of authenticate.
65
66** Documentation fixes.
67
68** Compilation fixes on visual studio.
69
70** Add udev rules for Feitian devices.
71
72** Add optional cmake build.
73
74** Change license of the commandline tool to LGPL 2.1+
75
76* Version 1.1.1 (released 2016-03-14)
77
78** Use correct index in u2fh_devs_discover()
79
80** Fix an issue where we left the authenticate loop early.
81
82** Fix an issue where authenticate remembered which devices to skip.
83
84** Stop validating the scheme of the origin.
85
86** Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
87
88** Documentation fixes.
89
90* Version 1.1.0 (released 2016-02-15)
91
92** Add udev rules for more devices.
93
94** Don't return success when no data is received.
95
96** Fix typos.
97
98** Make send_apdu send data like chrome does.
99
100** Don't release json object that we don't own no more.
101
102** Don't do memcmp on uninitialized memory.
103
104** Add u2fh_authenticate2() and u2fh_register2().
105
106** Remove base64 padding (required by spec).
107
108** Use unsigned ints to prevent buffer overflows.
109
110* Version 1.0.0 (released 2015-08-27)
111
112** Add udev rules for older version of udev.
113
114** Add pam:// as an allowed protocol.
115
116** Stop using sleep(), use Sleep() on windows and usleep() on others.
117
118** Fixup tool name in help and manpage.
119
120** Add a timeout to the register and authenticate actions.
121
122* Version 0.0.4 (released 2015-01-22)
123
124** Add an exponential growing timeout for slow devices (PlugUp).
125
126* Version 0.0.3 (released 2015-01-08)
127
128** Change license to LGPLv2+ for the library.
129
130** Some improvements to internal communication code.
131** Some debug mode improvements, from Bram Vandoren.
132
133* Version 0.0.2 (released 2014-11-28)
134
135** Add more devices to udev.
136
137* Version 0.0.1 (released 2014-10-29)
138
139** Use semantic versioning.
140** Correct json key for keyHandle in signResponse
141** Fix the udev rule
142** Add option to install udev rule
143
144* Version 0.0 (released 2014-09-16)
145
146** Initial release.
147