about summary refs log tree commit diff
path: root/NEWS
diff options
context:
space:
mode:
authorFlorian Weimer <fweimer@redhat.com>2023-11-22 08:38:33 +0100
committerFlorian Weimer <fweimer@redhat.com>2023-11-22 08:38:33 +0100
commit5d7f1bce7d8eea31f4baeb68bcc3124b35acc751 (patch)
treee9a4a7908362d7e08cdb8a2444ce262e2c242f8e /NEWS
parent780c33920281c5d5cc42a1e578bdc9218e675405 (diff)
downloadglibc-5d7f1bce7d8eea31f4baeb68bcc3124b35acc751.tar.gz
glibc-5d7f1bce7d8eea31f4baeb68bcc3124b35acc751.tar.xz
glibc-5d7f1bce7d8eea31f4baeb68bcc3124b35acc751.zip
posix: Revert the removal of the crypt prototype from <unistd.h>
Many applications still rely on this prototype.  Rebuilds without
this prototype result in an implicit function declaration, which can
introduce security vulnerabilities due to 32-bit pointer truncation.
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS5
1 files changed, 4 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 139cfef1b0..8c1c149f91 100644
--- a/NEWS
+++ b/NEWS
@@ -52,7 +52,10 @@ Deprecated and removed features, and other changes affecting compatibility:
 * libcrypt has been removed from the GNU C Library.  The configure
   options "--enable-crypt" and "--enable-nss-crypt" are no longer
   available.  <crypt.h>, libcrypt.a, and libcrypt.so.1 will not be
-  installed, and <unistd.h> will not declare the crypt function.
+  installed.  For now <unistd.h> continues to declare the crypt
+  function by default, to avoid introducing vulnerabilities into
+  existing applications due to a missing prototype.  This declaration
+  is deprecated and may be removed in a future glibc release.
 
   The replacement for libcrypt is libxcrypt, maintained separately from
   GNU libc, but available under compatible licensing terms, and providing