0.26.2

• rpc: fix NULL dereference via C_DeriveKey with specific NULL parameters (CVE-2026-2100) [PR#740]

0.26.1

• trust: Ensure compatibility of CKA_NSS_TRUST and CKA_TRUST [PR#738]

0.26.0

• pkcs11: Update PKCS11 headers to version 3.2 [PR#731]
• trust: Lookup DNs in reverse order (RFC4514 section 2.1) [PR#732]
• Update translations [PR#734]

0.25.10

• create a new release to fix issues caused by the 0.25.9 reroll
• ci fixes [PR#722, PR#723]

0.25.9

• subprojects/pkcs11-json: Update git submodule [PR#719]

0.25.8

• rpc: Unbreak protocol compatibility by reverting "rpc: Correctly map Mozilla certificate distrust attributes" [#716]

0.25.7

• Build fixes from tarball with Meson [#714]

0.25.6

• rpc: Add module configuration option to specify server address [#707]
• rpc: Correctly map Mozilla certificate distrust attributes [#705]
• rpc: Fix empty array attribute handling [#704]
• server: Remove libsystemd dependency for socket activation [#685]
• Avoid segfault if p11_library_init_impl/p11_library_uninit are called multiple times [#682]
• Add zsh completions [#674]
• pkcs11: Update pkcs11.h to version 3.1 [#671]
• pkcs11: Add IBM specific mechanisms [#669]
• server: Check SHELL if (and only if) neither --sh nor --csh is specified [#661]
• trust: Don't create file names longer then 255 [#659]
• trust: Sort paths for reproducible extract [#656]
• Build and test fixes [#647, #653, #654, #657, #660, #667, #673, #681, #683, #688, #694]
• Update translations [#663, #701]

0.25.5

• iter: fix recursive attribute loading [#642]
• fix building on FreeBSD 14.0 (amd64) [#644]
• test fix [#645]

0.25.4 (stable)

• rpc: add support for recursive attributes [#624, #629, #631, #633]
• p11-kit: add function to check run-time version of the library [#637]
• p11-kit: expose version information through macros [#635]
• p11-kit: add option to specify CKA_ID in generate-keypair and import-object commands [#615]
• p11-kit: add --provider option to specify PKCS#11 module when using p11-kit commands [#611]
• p11-kit: fix a bug where eddsa mechanism isn't recognized in generate-keypair [#617]
• p11-kit: fallback to C_GetFunctionList when C_GetInterface returns CKR_FUNCTION_NOT_SUPPORTED [#622]
• bug and build fixes [#603, #604, #605, #606, #609, #614, #616, #619, #627, #628, #632, #636, #639]