1 files changed, 3 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 31a0ccc915..39a9e84554 100644
--- a/NEWS
+++ b/NEWS
@@ -7,7 +7,9 @@
 
   Major changes between OpenSSL 1.1.1o and OpenSSL 1.1.1p [under development]
 
-      o
+      o Fixed additional bugs in the c_rehash script which was not properly
+        sanitising shell metacharacters to prevent command injection
+        (CVE-2022-2068)
 
   Major changes between OpenSSL 1.1.1n and OpenSSL 1.1.1o [3 May 2022]