Merge pull request #212 from zmanda/3_5_changelog

Add changelog for 3.5.3

ChangeLog

@@ -1,3 +1,16 @@
+2023-02-25 amandaTrusted <[email protected]>
+ * Fixed: removed vulnerable jQuery dependency
+ * Fixed: fix suppressed 1st char of error message in common-src/bsdtcp-security.c
+ * docs: improved README with Markdown
+ * docs: updated README file name for docs in Debian builds
+ * Fixed: post_inst_functions.sh to create amkey
+ * Fixed: added extern keyword for tu_debugging_enabled declaration in testutils.h
+ * Fixed: https://sogis.eu complaint symmetric encryption key derivation algorithm
+ * Fixed: removed perror to fix information leak vulnerability found in the calcsize SUID binary. (CVE-2022-37703)
+ * Fixed: added filter for RSH environment settings in rundump to fix privilege escalation vulnerability (CVE-2022-37704)
+ * Fixed: arg checking for runtar.c (CVE-2022-37705)
+
+
 2022-05-23 chassell <[email protected]>
  * Purpose: set a default to disable auto-label from claiming non-amanda and "other-config" labels as if available
  * Changes: Add a build flag to re-include options. Block use of two enums for the features. Change perl uses to null-set options.