CVSROOT: /cvs
Module name: src
Changes by: s...@cvs.openbsd.org 2012/11/30 06:51:11
Modified files:
lib/libc/crypt : crypt.3
Log message:
Document a known bug in the DES crypt cipher implementation which we're
not going to fix in order to stay compatible with legacy password data.
Nobody should use DES crypt anyway these days.
See http://www.freebsd.org/security/advisories/FreeBSD-SA-12:02.crypt.asc
for details about this bug.
Discussed with deraadt and beck about half a year ago (I'm pruning Ms
from my tree).
