1
1
This NEWS file records noteworthy changes, very tersely.
2
2
See the manual for detailed information.
4
Version 1.7.16 (2017-08-20)
6
** Bug fix: ignore "resumedev" entries in initramfs' cryptroot file
7
** Bug fix in plymouth plugin: fix memory leak, avoid warning output
9
Version 1.7.15 (2017-02-23)
11
** Bug fix: Respect the mandos.conf "zeroconf" and "restore" options
13
** Bug fix in mandos-keygen: Handle backslashes in passphrases
15
Version 1.7.14 (2017-01-25)
17
** Use "Requisite" instead of "RequisiteOverridable" in systemd
20
Version 1.7.13 (2016-10-08)
22
** Minor bug fix: Don't ask for passphrase or fail when generating
23
keys using GnuPG 2.1 in a chrooted environment.
25
Version 1.7.12 (2016-10-05)
27
** Bug fix: Don't crash after exit() when using DH parameters file
29
Version 1.7.11 (2016-10-01)
31
** Security fix: Don't compile with AddressSanitizer
33
** Bug fix: Find GnuTLS library when gnutls28-dev is not installed
34
** Bug fix: Include "Expires" and "Last Checker Status" in mandos-ctl
36
** New option for mandos-ctl: --dump-json
38
Version 1.7.10 (2016-06-23)
40
** Security fix: restrict permissions of /etc/mandos/plugin-helpers
42
** Bug fix: Make the --interface flag work with Python 2.7 when "cc"
45
Version 1.7.9 (2016-06-22)
47
** Do not include intro(8mandos) man page
49
Version 1.7.8 (2016-06-21)
51
** Include intro(8mandos) man page
52
** mandos-keygen: Use ECDSA SSH keys by default
53
** Bug fix: Work with GnuPG 2 when booting (Debian bug #819982)
54
by copying /usr/bin/gpg-agent into initramfs
56
** Bug fix: Work with GnuPG 2 (don't use --no-use-agent option)
57
** Bug fix: Make the --interface option work when using Python 2.7
58
by trying harder to find SO_BINDTODEVICE
60
Version 1.7.7 (2016-03-19)
62
** Fix bug in Plymouth client, broken since 1.7.2
64
Version 1.7.6 (2016-03-13)
66
** Fix bug where stopping server would time out
67
** Make server runnable with Python 3
69
Version 1.7.5 (2016-03-08)
71
** Fix security restrictions in systemd service file.
72
** Work around bug where stopping server would time out
74
Version 1.7.4 (2016-03-05)
76
** Bug fix: Tolerate errors from configure_networking (Debian Bug
78
** Compilation: Only use sanitizing options which work with the
79
compiler used when building. This should fix compilation with GCC
80
4.9 on mips, mipsel, and s390x.
82
** Add extra security restrictions in systemd service file.
84
Version 1.7.3 (2016-02-29)
86
** Bug fix: Remove new type of keyring directory user by GnuPG 2.1.
87
** Bug fix: Remove "nonnull" attribute from a function argument, which
88
would otherwise generate a spurious runtime warning.
90
Version 1.7.2 (2016-02-28)
92
** Stop using python-gnutls library; it was not updated to GnuTLS 3.3.
93
** Bug fix: Only send D-Bus signal ClientRemoved if using D-Bus.
94
** Use GnuPG 2 if available.
96
** Compile with various sanitizing flags.
98
Version 1.7.1 (2015-10-24)
100
** Bug fix: Can now really find Mandos server even if the server has
101
an IPv6 address on a network other than the one which the Mandos
4
104
Version 1.7.0 (2015-08-10)
6
106
** Bug fix: Handle local Zeroconf service name collisions better.