summaryrefslogtreecommitdiff
path: root/etc/NEWS
diff options
context:
space:
mode:
authorStefan Kangas <stefankangas@gmail.com>2023-10-24 16:20:42 +0200
committerStefan Kangas <stefankangas@gmail.com>2023-10-24 16:41:10 +0200
commitdbcaaf375f285a42ff1a81c313a454264374cbdb (patch)
tree830680dcf5105af629cf10b13565d81fd001dbd5 /etc/NEWS
parenta59d1da0dde890da59dc007d39efb1a0892ebbb6 (diff)
downloademacs-dbcaaf375f285a42ff1a81c313a454264374cbdb.tar.gz
Warn about 3DES when network-security-level is medium
* lisp/net/nsm.el (network-security-protocol-checks): Bump deprecated and insecure '3des-cipher' to 'medium'. * doc/emacs/misc.texi (Network Security): Document the above change. Ref: https://nvd.nist.gov/vuln/detail/CVE-2016-2183
Diffstat (limited to 'etc/NEWS')
-rw-r--r--etc/NEWS6
1 files changed, 6 insertions, 0 deletions
diff --git a/etc/NEWS b/etc/NEWS
index 8becfae..9268575 100644
--- a/etc/NEWS
+++ b/etc/NEWS
@@ -62,6 +62,12 @@ more details.
** Emacs now supports Unicode Standard version 15.1.
+** The Network Security Manager now warns about 3DES by default.
+This cypher is no longer recommended owing to a major vulnerability
+disclosed in 2016, and its small 112 bit key size. Emacs now warns
+about its use also when 'network-security-level' is set to 'medium'
+(the default). See 'network-security-protocol-checks'.
+
** Help
*** 'describe-function' shows function inferred type when available.