summaryrefslogtreecommitdiff
path: root/NEWS.md
diff options
context:
space:
mode:
authorMatt Caswell <matt@openssl.org>2022-06-20 14:14:20 +0100
committerMatt Caswell <matt@openssl.org>2022-06-21 13:22:55 +0100
commitde85a9de3f56aaf8c55c28fe495b900e50752a5a (patch)
tree6392da68fa8a8929448c39f8106cee7b2c0cfc65 /NEWS.md
parent87eee75010f7efaa617ff32163359bf81513a619 (diff)
downloadopenssl-new-de85a9de3f56aaf8c55c28fe495b900e50752a5a.tar.gz
Update CHANGES.md and NEWS.md for new release
Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Release: yes
Diffstat (limited to 'NEWS.md')
-rw-r--r--NEWS.md8
1 files changed, 7 insertions, 1 deletions
diff --git a/NEWS.md b/NEWS.md
index 8dc94bc62f..36a157bc3d 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -30,7 +30,13 @@ OpenSSL 3.1
OpenSSL 3.0
-----------
-### Major changes between OpenSSL 3.0.2 and OpenSSL 3.0.3
+### Major changes between OpenSSL 3.0.3 and OpenSSL 3.0.4 [21 Jun 2022]
+
+ * Fixed additional bugs in the c_rehash script which was not properly
+ sanitising shell metacharacters to prevent command injection
+ ([CVE-2022-2068])
+
+### Major changes between OpenSSL 3.0.2 and OpenSSL 3.0.3 [3 May 2022]
* Fixed a bug in the c_rehash script which was not properly sanitising shell
metacharacters to prevent command injection ([CVE-2022-1292])