Skip to content

Commit

Permalink
YubiHSM SDK 2024.09b release
Browse files Browse the repository at this point in the history
  • Loading branch information
aveenismail committed Sep 23, 2024
1 parent b47e87f commit 0a24402
Show file tree
Hide file tree
Showing 2 changed files with 29 additions and 11 deletions.
36 changes: 25 additions & 11 deletions content/YubiHSM2/Releases/Release_notes.adoc
Original file line number Diff line number Diff line change
@@ -1,5 +1,18 @@
== Release Notes

=== 2024.09b

==== Content:

* yubihsm-shell 2.6.0
* yubihsm-connector 3.0.5
* yubihsm-setup 2.3.2
* yubihsm-ksp 2.6.0

==== Improvements:

* Repackaging of yubihsm-setup MSI installer

=== 2024.09

==== Content:
Expand Down Expand Up @@ -42,7 +55,8 @@

==== Improvements:

* Rename yubihsm-shell installer file in the Windows release package. No binaries are effected.
* Rename yubihsm-shell installer file in the Windows release package.
No binaries are effected.

=== 2023.11

Expand Down Expand Up @@ -107,7 +121,8 @@
* PKCS11: Improve handling of attributes
* PKCS11: Improve debug output
* PKCS11: Improve error handling
* PKCS11: Change in firmware/hardware version representation. The version as reported by C_GetSlotInfo and C_GetTokenInfo will now show minor*10+patch, instead of minor*100+patch
* PKCS11: Change in firmware/hardware version representation.
The version as reported by C_GetSlotInfo and C_GetTokenInfo will now show minor*10+patch, instead of minor*100+patch
* Build: Dependency updates
* Connector: Add changelog
* Connector: Minor code improvements
Expand Down Expand Up @@ -249,18 +264,15 @@
* Shell: Honor the PEM format when returning a certificate
* Shell: Add support for special (national) characters
* Test: Improve testing
* Deployment Guides: Change in YubiHSM2 Windows Deployment Guide to set the YubiHSM connector service (yhconsrv) as a
dependency for the ADCS service (certsvc) to prevent it from starting before the YubiHSM connector service and thus
causing the ADCS service to fail. See https://developers.yubico.com/YubiHSM2/Usage_Guides/YubiHSM_2_Windows_Deployment_Guide--Configure_YubiHSM_2_Key_Storage_Provider_for_Microsoft_Windows_Server/Install_the_YubiHSM_Tools_and_Software.html[YubiHSM2 Windows Deployment Guide].
* Deployment Guides: Change in YubiHSM2 Windows Deployment Guide to set the YubiHSM connector service (yhconsrv) as a dependency for the ADCS service (certsvc) to prevent it from starting before the YubiHSM connector service and thus causing the ADCS service to fail.
See https://developers.yubico.com/YubiHSM2/Usage_Guides/YubiHSM_2_Windows_Deployment_Guide--Configure_YubiHSM_2_Key_Storage_Provider_for_Microsoft_Windows_Server/Install_the_YubiHSM_Tools_and_Software.html[YubiHSM2 Windows Deployment Guide].

=== 2019.12

==== Bugs Fixed:

* Shell: Fix Wrapping and public key PEM formatting of ED25519 keys
* Shell: Add filtering of non-printable characters to prevent terminal control characters embedded in a label from
being used to compromise a user using a vulnerable terminal as in CVE-2019-9535. Reported by
Julian Biehl <julianbiehl@yahoo.de> of the CISPA Helmholtz Center for Information Security.
* Shell: Add filtering of non-printable characters to prevent terminal control characters embedded in a label from being used to compromise a user using a vulnerable terminal as in CVE-2019-9535. Reported by Julian Biehl <julianbiehl@yahoo.de> of the CISPA Helmholtz Center for Information Security.

==== Other Improvements:

Expand All @@ -274,7 +286,8 @@ Julian Biehl <julianbiehl@yahoo.de> of the CISPA Helmholtz Center for Informatio
* Library: Allow disabling link time optimization.
* Library: Fixes and improvements to build, work and test on FreeBSD.
* Library: Ensure closing the USB connection before destroying it
* Connector: Drop gb dependency manager and move to Go modules and google/gousb. The minimum required version of golang is 1.11.x
* Connector: Drop gb dependency manager and move to Go modules and google/gousb.
The minimum required version of golang is 1.11.x
* Connector: Update dependencies

=== 2019.03
Expand Down Expand Up @@ -312,7 +325,7 @@ Julian Biehl <julianbiehl@yahoo.de> of the CISPA Helmholtz Center for Informatio
* Library: Add a feature to derive an authentication key from a password
* Library: Add a feature to change an authentication key
* Pkcs11: Added support for C_DeriveKey()
* Shell: Change keepalive command to a toggle (on/off)
* Shell: Change keepalive command to a toggle (on/off)
* Tests: Add support for running tests using direct USB connection
* Documentation: Drop documentation from the code base and moved the content to Yubico's developers website (https://developers.yubico.com/YubiHSM2/)
* All: Re-organization of file structure
Expand Down Expand Up @@ -361,7 +374,8 @@ Julian Biehl <julianbiehl@yahoo.de> of the CISPA Helmholtz Center for Informatio
* Pkcs11: Accept C_SetAttributeValue() for CKA_ID and CKA_LABEL if unchanged
* Shell: Implement decrypt-ecdh in non-interactive mode
* Connector: On Windows use internal USB libraries instead of libusb
* Connector: Implement Host header allow listing (Use to prevent DNS rebinding attacks in applicable environments, e.g., if there is an absolute need to use a web browser on the host where the Yubihsm2 is installed to connect to untrusted web sites on the Internet. This is not a recommended practice.)
* Connector: Implement Host header allow listing (Use to prevent DNS rebinding attacks in applicable environments, e.g., if there is an absolute need to use a web browser on the host where the Yubihsm2 is installed to connect to untrusted web sites on the Internet.
This is not a recommended practice.)

=== 1.0.1

Expand Down
4 changes: 4 additions & 0 deletions content/YubiHSM2/Releases/index.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,10 @@ may have several releases in the meantime. Those releases are available on the i
component's release page. There will always be a full yubihsm-sdk release if any of the individual component would
require a security update.

=== 2024.09b

https://developers.yubico.com/YubiHSM2/Releases/yubihsm2-sdk-2024-09b-windows-amd64.zip[yubihsm2-sdk-2024-09b-windows-amd64.zip] (https://developers.yubico.com/YubiHSM2/Releases/yubihsm2-sdk-2024-09b-windows-amd64.zip.sig[sig]) (2024-09-23)

=== 2024.09

https://developers.yubico.com/YubiHSM2/Releases/yubihsm2-sdk-2024-09-ubuntu2404-amd64.tar.gz[yubihsm2-sdk-2024-09-ubuntu2404-amd64.tar.gz] (https://developers.yubico.com/YubiHSM2/Releases/yubihsm2-sdk-2024-09-ubuntu2404-amd64.tar.gz.sig[sig]) (2024-09-09)
Expand Down

0 comments on commit 0a24402

Please sign in to comment.