X-Git-Url: https://git.eyrie.org/?a=blobdiff_plain;f=NEWS;h=c127ce141485ce2272a53bace3f2dc9b7a58b0f6;hb=refs%2Fheads%2Fdebian%2Funstable;hp=973f5a99926118914da77312a6e1619ae332f755;hpb=de1648235b97bdf76c4b97ca89a55bfb8afeecff;p=kerberos%2Fkrb5-strength.git

diff --git a/NEWS b/NEWS
index 973f5a9..c127ce1 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,31 @@
                     User-Visible krb5-strength Changes
 
+krb5-strength 3.3 (2023-12-25)
+
+    heimdal-history now requires the Perl modules Const::Fast and
+    JSON::MaybeXS instead of Readonly and JSON.
+
+    Increase hash iterations for heimdal-history by about 10% to maintain
+    the time required for a password hash at about 0.1 seconds on not
+    horribly modern hardware.  This will affect newly-stored history
+    entries but will not invalidate existing password history entries.
+
+    Explicitly erase the copy of the password made in the Heimdal plugin
+    before freeing memory.
+
+    Add a spec file for building RPMs, contributed by Daria Phoebe
+    Brashear.
+
+    Update to rra-c-util 10.5:
+
+    * Assume a working snprintf rather than supplying a replacement.
+    * Fix detection of reallocarray on NetBSD.
+    * Check that Kerberos header files were found during configure.
+    * Use AS_ECHO in all Autoconf macros.
+    * Always use lib32 or lib64 if it exists, even on Debian.
+    * Fix rejection of unknown Clang warning flags.
+    * Disable -Wreserved-identifier for Clang warning builds.
+
 krb5-strength 3.2 (2020-05-17)
 
     Add new -c (--check-only) option to heimdal-history to check whether a