Skip to content

Commit

Permalink
release 1.3.1
Browse files Browse the repository at this point in the history
  • Loading branch information
LDVG committed Jan 14, 2025
1 parent 94d884a commit b4b9550
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions NEWS
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@ Copyright (c) 2014-2025 Yubico AB - See COPYING

pam-u2f NEWS -- History of user-visible changes. -*- outline -*-

* Version 1.3.1 (unreleased)
* Version 1.3.1 (released 2025-01-14)
** Fix incorrect usage of PAM_IGNORE (YSA-2025-01, CVE-2025-23013).
** Changed return value when nouserok is enabled and the user has no
credentials, PAM_IGNORE is used instead of PAM_SUCCESS.
** Herdened checks of authfile permissions.
** Hardened checks of authfile permissions.
** Hardened checks for nouserok.
** Improved debug messages.
** Improved documentation.
Expand Down

0 comments on commit b4b9550

Please sign in to comment.