From: Alexandre Oliva Date: Wed, 10 Oct 2012 10:06:03 +0000 (-0300) Subject: * NEWS: Add note about FIPS mode. Wording suggested by Roland X-Git-Tag: glibc-2.17~419 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=89a3ad0b6e7cfd7bc5588e8bbf243e99a0b8562d;p=thirdparty%2Fglibc.git * NEWS: Add note about FIPS mode. Wording suggested by Roland McGrath. --- diff --git a/ChangeLog b/ChangeLog index 98561a2530a..b106e0e83b0 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,8 @@ +2012-10-10 Alexandre Oliva + + * NEWS: Add note about FIPS mode. Wording suggested by Roland + McGrath. + 2012-10-10 Alexandre Oliva * crypt/crypt-entry.c: Include fips-private.h. diff --git a/NEWS b/NEWS index 490e4dca150..4d186381316 100644 --- a/NEWS +++ b/NEWS @@ -48,6 +48,12 @@ Version 2.17 the tty file descriptor in /dev/pts or /dev if /proc is not available. This allows creation of chroots without the procfs mounted on /proc. +* The `crypt' function now fails if passed salt bytes that violate the + specification for those values. On Linux, the `crypt' function will + consult /proc/sys/crypto/fips_enabled to determine if "FIPS mode" is + enabled, and fail on encrypted strings using the MD5 or DES algorithm + when the mode is enabled. + Version 2.16