===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/66.html,v
retrieving revision 1.45
retrieving revision 1.46
diff -u -r1.45 -r1.46
--- www/66.html	2019/10/04 09:37:29	1.45
+++ www/66.html	2019/10/04 18:10:13	1.46
@@ -664,6 +664,9 @@
       <li>Fixed -modulus option with openssl(1) dsa subcommand.
       <li>Fixed PVK format output issue with openssl(1) dsa and rsa
 	subcommand.
+      <li>Fixed a padding oracle attack in <code>PKCS7_dataDecode()</code>
+        and <code>CMS_decrypt_set1_pkey()</code> (<code>CMS</code>
+        is currently disabled). From Bernd Edlinger.
     </ul>
   </ul>