0.6.10

- Fixed some security issues (thx @frankmorgner): (https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/) -- fixed buffer overflow with long home directory; -- fixed wiping secrets (now using OpenSSL_cleanse()); -- verify using a nonce from the system, not the card.
OpenSC · Sep 11, 2018 · b606e3b · b606e3b
1 parent ce2839d
commit b606e3b
Show file tree

Hide file tree

Showing 4 changed files with 21 additions and 2 deletions.
diff --git a/ChangeLog b/ChangeLog
@@ -1,3 +1,11 @@
+12- Sep 2018
+    - Version 0.6.10 is out.
+    - Fixed some security issues (thx @frankmorgner):
+      (https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/)
+      -- fixed buffer overflow with long home directory;
+      -- fixed wiping secrets (now using OpenSSL_cleanse());
+      -- verify using a nonce from the system, not the card.
+
 08- Sep 2005
 	- Fixes to pam_pkcs11.spec
 

diff --git a/NEWS b/NEWS
@@ -1,3 +1,13 @@
+12- Sep 2018
+    - Version 0.6.10 is out.
+	- Fixed some security issues (thx @frankmorgner):
+	  (https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/)
+	  -- fixed buffer overflow with long home directory;
+	  -- fixed wiping secrets (now using OpenSSL_cleanse());
+	  -- verify using a nonce from the system, not the card.
+
+... 0.6.9 ... 0.6.0 are yet undescribed.
+
 12- Sep 2005
 	- Finally pam_pkcs11-0.5.3 is out.
 	- New mapper API and Docs

diff --git a/README b/README
@@ -1,10 +1,11 @@
 This is the README of the PKCS #11 PAM Login Module
 ======================================================================
 
-Release: 0.6.1
+Release: 0.6.10
 Authors:  Mario Strasser <mast@gmx.net>
           Juan Antonio Martinez <jonsito@teleline.es>
           Ludovic Rouseau <ludovic.rousseau@free.fr>
+		  Frank Morgner <frankmorgner@gmail.com>
 
 This Linux-PAM login module allows a X.509 certificate based user
 login. The certificate and its dedicated private key are thereby

diff --git a/configure.ac b/configure.ac
@@ -4,7 +4,7 @@
 AC_PREREQ([2.69])
 
 # Process this file with autoconf to produce a configure script.
-AC_INIT([pam_pkcs11],[0.6.9])
+AC_INIT([pam_pkcs11],[0.6.10])
 AC_CONFIG_SRCDIR([src/pam_pkcs11/pam_pkcs11.c])
 AC_CANONICAL_HOST
 AM_INIT_AUTOMAKE