1libu2f-host NEWS -- History of user visible changes. 2 3* Version 1.1.10 (released 2019-05-15) 4 5** Add new devices to udev rules. 6 7** Fix a potentially uninitialized buffer. 8 9* Version 1.1.9 (released 2019-03-06) 10 11** Fix CID copying from the init response. 12This broke compatibility with some devices. 13 14* Version 1.1.8 (released 2019-03-05) 15 16** Add udev rules. 17 18** Drop 70-old-u2f.rules and use 70-u2f.rules for everything. 19 20** Use a random nonce for setting up CID to prevent fingerprinting. 21 22** Parse the response to init in a more stable way. 23The old parser could leak 4 bytes of uninitialized stack back to the device. 24Reported by Christian Reitter. 25 26* Version 1.1.7 (released 2019-01-08) 27 28** Fix for trusting length from deivce in device init. 29Reported by Christian Reitter. 30 31** Fix for buffer overflow when receiving data from device. 32 33** Add udev rules for some new devices. 34 35* Version 1.1.6 (released 2018-05-15) 36 37** Change waiting logic on authenticate to allow for faster feedback. 38 39* Version 1.1.5 (released 2018-03-07) 40 41** Fix refcount when adding json_objects. 42 43** Handle fido2 keepalive. 44 45** Add udev rules for more devices. 46 47* Version 1.1.4 (released 2017-09-01) 48 49** Added more u2f devices to the udev rulesets. 50 51** Increase buffer size, allowing for bigger certificates. 52 53** Add u2f.conf.sample for FreeBSD permission handling. 54 55* Version 1.1.3 (released 2016-10-04) 56 57** Added more u2f devices to the udev rulesets. 58 59** Fixup mac builds. 60 61* Version 1.1.2 (released 2016-06-22) 62 63** Make authenticate return U2FH_OK if touch is set to not needed. 64Also minor fixes to error output of authenticate. 65 66** Documentation fixes. 67 68** Compilation fixes on visual studio. 69 70** Add udev rules for Feitian devices. 71 72** Add optional cmake build. 73 74** Change license of the commandline tool to LGPL 2.1+ 75 76* Version 1.1.1 (released 2016-03-14) 77 78** Use correct index in u2fh_devs_discover() 79 80** Fix an issue where we left the authenticate loop early. 81 82** Fix an issue where authenticate remembered which devices to skip. 83 84** Stop validating the scheme of the origin. 85 86** Fixup a crash in u2fh_devs_discover() with closing unplugged devices. 87 88** Documentation fixes. 89 90* Version 1.1.0 (released 2016-02-15) 91 92** Add udev rules for more devices. 93 94** Don't return success when no data is received. 95 96** Fix typos. 97 98** Make send_apdu send data like chrome does. 99 100** Don't release json object that we don't own no more. 101 102** Don't do memcmp on uninitialized memory. 103 104** Add u2fh_authenticate2() and u2fh_register2(). 105 106** Remove base64 padding (required by spec). 107 108** Use unsigned ints to prevent buffer overflows. 109 110* Version 1.0.0 (released 2015-08-27) 111 112** Add udev rules for older version of udev. 113 114** Add pam:// as an allowed protocol. 115 116** Stop using sleep(), use Sleep() on windows and usleep() on others. 117 118** Fixup tool name in help and manpage. 119 120** Add a timeout to the register and authenticate actions. 121 122* Version 0.0.4 (released 2015-01-22) 123 124** Add an exponential growing timeout for slow devices (PlugUp). 125 126* Version 0.0.3 (released 2015-01-08) 127 128** Change license to LGPLv2+ for the library. 129 130** Some improvements to internal communication code. 131** Some debug mode improvements, from Bram Vandoren. 132 133* Version 0.0.2 (released 2014-11-28) 134 135** Add more devices to udev. 136 137* Version 0.0.1 (released 2014-10-29) 138 139** Use semantic versioning. 140** Correct json key for keyHandle in signResponse 141** Fix the udev rule 142** Add option to install udev rule 143 144* Version 0.0 (released 2014-09-16) 145 146** Initial release. 147