Yubico / ykneo-openpgp

OpenPGP applet for the YubiKey NEO
https://developers.yubico.com/ykneo-openpgp/
GNU General Public License v2.0
215 stars 67 forks source link

Release 1.0.10? #35

Closed jonathancross closed 8 years ago

jonathancross commented 8 years ago

According to SecurityAdvisory 2015-04-14 all versions of this OpenPGP applet 1.0.9 or earlier are vulnerable. There is a tag for 1.0.10, but no official release on GitHub since 1.0.2.

Also, the security fix should be clearly explained in the release notes as it is not obvious from commit comments.

klali commented 8 years ago

Official releases for this project is listed on https://developers.yubico.com/ykneo-openpgp/Releases/ unfortunately the github releases tab can't be disabled.