diff --git a/CHANGELOG.md b/CHANGELOG.md
index 855842b..ced3d82 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,9 +1,9 @@
 
 ## Change Log
 
-### Security fixes in 3.2.x
+### Security fixes in 3.2
 
-* Security fix: HTML-escape URLs in the HTML report to prevent stored XSS from a server-controlled `Location:` header (#3090)
+* (3.2.4): HTML-escape URLs in the HTML report to prevent stored XSS from a server-controlled "Location:" header (#3090)
 
 ### Features implemented / improvements in 3.2
 
diff --git a/CREDITS.md b/CREDITS.md
index 6ac1b0e..d89b0e3 100644
--- a/CREDITS.md
+++ b/CREDITS.md
@@ -68,9 +68,6 @@ Full contribution, see git log.
 * Christian Dresen
    - Dockerfile
 
-* Eric Gu
-  - HTML report XSS fix (escape server-controlled URLs, #3090)
-
 * enxio
    - support for TN3270/telnet STARTTLS
 
@@ -87,6 +84,9 @@ Full contribution, see git log.
   - bugfixes
   - former ARM binary support
 
+* Eric Gu
+  - HTML report XSS fix: escape server-controlled URLs
+
 * Jauder Ho
   - GH Action to build new container images upon push
   - dependabot actions
diff --git a/testssl.sh b/testssl.sh
index 3d5df94..977220b 100755
--- a/testssl.sh
+++ b/testssl.sh
@@ -122,7 +122,7 @@ trap "child_error" USR1
 
 ########### Internal definitions
 #
-declare -r VERSION="3.2.3"
+declare -r VERSION="3.2.4"
 declare -r SWCONTACT="dirk aet testssl dot sh"
 [[ "$VERSION" =~ dev|rc|beta ]] && \
      SWURL="https://testssl.sh/dev/" ||