CVE-2019-2228: Fix ippSetValueTag validation of default language.

[thirdparty/cups.git] / CHANGES.md

diff --git a/CHANGES.md b/CHANGES.md
index 2afa7686a8771c8cfe64969dde528c2331d32d58..78ca1f98a8bc4f707679b14a96a3fb97f81229fe 100644 (file)
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,4 +1,4 @@
-CHANGES - 2.3.1 - 2019-12-04
+CHANGES - 2.3.1 - 2019-12-13
 ============================
 
 
@@ -6,6 +6,8 @@ Changes in CUPS v2.3.1
 ----------------------
 
 - Documentation updates (Issue #5661, #5674, #5682)
+- CVE-2019-2228: The `ippSetValuetag` function did not validate the default
+  language value.
 - Fixed a crash bug in the web interface (Issue #5621)
 - The PPD cache code now looks up page sizes using their dimensions
   (Issue #5633)