update changelog / install docs for 3.10.3 release

CHANGELOG.md

@@ -1,6 +1,14 @@
 # SingularityCE Changelog
 
-## Changes Since Last Release
+## 3.10.3 \[2022-10-06\]
+
+### Security Related Fixes
+
+- [CVE-2022-39237](https://github.com/sylabs/sif/security/advisories/GHSA-m5m3-46gj-wch8):
+  The github.com/sylabs/sif/v2 dependency included in SingularityCE <=3.10.3
+  does not verify that the hash algorithm(s) used are cryptographically secure
+  when verifying digital signatures. This release updates to sif v2.8.1 which
+  corrects this issue. See the linked advisory for references and a workaround.
 
 ### Bug Fixes
 

INSTALL.md

@@ -114,11 +114,11 @@ cd singularity
 By default your clone will be on the `main` branch which is where development
 of SingularityCE happens. To build a specific version of SingularityCE, check
 out a [release tag](https://github.com/sylabs/singularity/tags) before
-compiling. E.g. to build the 3.10.2 release checkout the
-`v3.10.2` tag:
+compiling. E.g. to build the 3.10.3 release checkout the
+`v3.10.3` tag:
 
 ```sh
-git checkout --recurse-submodules v3.10.2
+git checkout --recurse-submodules v3.10.3
 ```
 
 ## Compiling SingularityCE
@@ -169,7 +169,7 @@ build and install the RPM like this:
 <!-- markdownlint-disable MD013 -->
 
 ```sh
-export VERSION=3.10.2  # this is the singularity version, change as you need
+export VERSION=3.10.3  # this is the singularity version, change as you need
 
 # Fetch the source
 wget https://github.com/sylabs/singularity/releases/download/v${VERSION}/singularity-ce-${VERSION}.tar.gz