Update HISTORY.rst

mozilla · Oct 24, 2017 · f28681e · f28681e
1 parent 0dca4fa
commit f28681e
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/HISTORY.rst b/HISTORY.rst
@@ -3,6 +3,18 @@
 History
 -------
 
+0.4.0 (2017-11-24)
+++++++++++++++++++
+
+Security issues:
+
+* **High**: Replace python-jose with josepy and use pyca/cryptography instead of pycrypto (CVE-2013-7459).
+
+Backwards-incompatible changes:
+
+* ``OIDC_RP_IDP_SIGN_KEY`` no longer uses the JWK json as ``dict`` but PEM or DER keys instead.
+
+
 0.3.2 (2017-10-03)
 ++++++++++++++++++