Copyright (c) 2014-2023 Yubico AB - See COPYING

pam-u2f NEWS -- History of user-visible changes.          -*- outline -*-

* Version 1.3.1 (unreleased)

* Version 1.3.0 (released 2023-03-14)
** Add sanity checking of UV options to pamu2fcfg.
** Add support for username expansion in the authfile path.
** Improvements to the documentation.

* Version 1.2.1 (released 2022-05-11)
** Fixed an issue where native credentials could be truncated, resulting in
failure to authenticate or successful authentication with missing options.
** Stricter parsing of sshformat credentials.
** pamu2fcfg now allows a combination of the --username and --nouser options.
** Improved documentation on FIDO2 options.

* Version 1.2.0 (released 2021-09-22)
** Added support for EdDSA keys.
** Added support for SSH ed25519-sk keys.
** Added authenticator filtering based on user verification options.
** Fixed an issue with privilege restoration on MacOS.
** Fixed an issue where credentials created with pamu2fcfg 1.0.8 or earlier
were not handled correctly if their origin and appid differed.
** Miscellaneous improvements to the documentation.
** Miscellaneous minor bug fixes found by fuzzing.

* Version 1.1.1 (released 2021-05-19)
** Fix an issue where PIN authentication could be bypassed (CVE-2021-31924).
** Fix an issue with nodetect and non-resident credentials.
** Fix build issues with musl libc.
** Add support for self-attestation in pamu2fcfg.
** Fix minor bugs found by fuzzing.

* Version 1.1.0 (released 2020-09-17)
 ** Add support to FIDO2 (move from libu2f-host+libu2f-server to libfido2).
 ** Add support to User Verification
 ** Add support to PIN Verification
 ** Add support to Resident Credentials
 ** Add support to SSH credential format

* Version 1.0.8 (released 2019-06-04)
 ** Fix debug file descriptor leak CVE-2019-12210.
 ** Fix insecure debug file handling CVE-2019-12209.
 Both reported by Matthias Gerstner of the SUSE Security Team.
 ** Fix a non-critical buffer oob access.

* Version 1.0.7 (released 2018-05-15)
 ** Add authpending_file to signal authentication activity
 ** Add nodetect to skip to avoid unnecessary cue messages

* Version 1.0.6 (released 2018-04-18)
 ** Fix an issue when using syslog as a debug facility.
 ** Do not honor cue if no sutable device is found.

* Version 1.0.5 (released 2018-04-16)
 ** General bugfixes and quality-of-life improvements.

* Version 1.0.4 (released 2016-01-07)
 ** Fixed possible permission escalation when using XDG_CONFIG_HOME.

* Version 1.0.3 (released 2015-11-02)
 ** Bugfix in pamu2fcfg.
 ** Minor improvements for verbose mode in pamu2fcfg.

* Version 1.0.2 (released 2015-10-06)
 ** Changes to automake flags.
 ** Improve build on OS X.

* Version 1.0.1 (released 2015-06-18)
 ** Minor changes to man pages and install hooks.

* Version 1.0.0 (released 2015-06-17)
 ** Use XDG_CONFIG_HOME as default for config files.
 ** Added manual and interactive mode.
 ** Added verbose mode.

* Version 0.0.1 (released 2015-01-16)
 ** Changed failure mode after authentication error.
 ** Added call to setcred.

* Version 0.0.0 (released 2014-12-16)
 ** Initial release.