summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPietro Albini <pietro@pietroalbini.org>2023-03-26 17:29:17 +0200
committerPietro Albini <pietro@pietroalbini.org>2023-03-26 22:29:04 +0200
commitaf9f6418ac5ebf96bc20340b8bd4838ecaa02e02 (patch)
treead9a218a3926bb08cb92057cd22c582ef3eba013
parent728dba9644f8c60cd906e6f2af3d81064080a817 (diff)
downloadrust-af9f6418ac5ebf96bc20340b8bd4838ecaa02e02.tar.gz
update release notes for 1.68.2
-rw-r--r--RELEASES.md11
1 files changed, 11 insertions, 0 deletions
diff --git a/RELEASES.md b/RELEASES.md
index bc776ce2ac8..e2b43690d93 100644
--- a/RELEASES.md
+++ b/RELEASES.md
@@ -1,3 +1,14 @@
+Version 1.68.2 (2023-03-28)
+===========================
+
+- [Update the GitHub RSA host key bundled within Cargo](https://github.com/rust-lang/cargo/pull/11883).
+ The key was [rotated by GitHub](https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/)
+ on 2023-03-24 after the old one leaked.
+- [Mark the old GitHub RSA host key as revoked](https://github.com/rust-lang/cargo/pull/11889).
+ This will prevent Cargo from accepting the leaked key even when trusted by
+ the system.
+- [Add support for `@revoked` and a better error message for `@cert-authority` in Cargo's SSH host key verification](https://github.com/rust-lang/cargo/pull/11635)
+
Version 1.68.1 (2023-03-23)
===========================