Releases: xmidt-org/cjwt
Releases · xmidt-org/cjwt
v2.3.0 2024-12-19
- Fix for CVE-2024-54150: 096ab3e
- When using HSxxx signing types, the new option
OPT_ALLOW_ONLY_HS_ALG
is required.
This ensures that public/private keys can't be mistakenly accepted as symmetric
algorithem ciphers.
v2.1.1 2021-12-22
- Fix a few compiler warnings in the example code.
v2.1.0 08/29/2021
- Add string to alg type mapping function. - Allow use of `num_algorithms`.
v2.0.1 07/16/2021
- Upgrade the build system to use meson. - Improve the CI pipeline.
v2.0.0 05/22/2021
- Update the interface to not use strlen() for lengths but expect them to be passed in. This reduces the likelihood of this library being exploited by a long string. - Add the cjwt_printf() function to the interface. - Remove the alg mapping function that was mistakenly provided in the 1.x.x API. - Add a few worked examples.
v1.0.4 05/21/2021
- Move to use internal base64 decoding with stricter processing rules - Major refactor to use a specified length and not '\0' terminated strings internally. - A number of failures that may not have been detected now have tests and are covered. - Bridge the new implementation to use the existing API.
v1.0.3 05/08/2021
First stable release
1.0.0 First stable release