Use new support for SPDX check exclusions

[kerberos/krb5-strength.git] / NEWS

diff --git a/NEWS b/NEWS
index 5274ac01d601f34abe321a2b0dd5bbe1a8b61214..c127ce141485ce2272a53bace3f2dc9b7a58b0f6 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,11 +1,20 @@
                     User-Visible krb5-strength Changes
 
-krb5-strength 3.3 (unreleased)
+krb5-strength 3.3 (2023-12-25)
 
     heimdal-history now requires the Perl modules Const::Fast and
     JSON::MaybeXS instead of Readonly and JSON.
 
-    Explicitly erase the copy of the password made in the Heimdal plugin.
+    Increase hash iterations for heimdal-history by about 10% to maintain
+    the time required for a password hash at about 0.1 seconds on not
+    horribly modern hardware.  This will affect newly-stored history
+    entries but will not invalidate existing password history entries.
+
+    Explicitly erase the copy of the password made in the Heimdal plugin
+    before freeing memory.
+
+    Add a spec file for building RPMs, contributed by Daria Phoebe
+    Brashear.
 
     Update to rra-c-util 10.5: