Fixes for no-static-engine and Windows builds.

[oweals/openssl.git] / NEWS

diff --git a/NEWS b/NEWS
index 4c8a9e6d19cd3866ba5e45a2ae530b543ae6c4f3..0de954cf4e768d854480e9ec5bf0e4d264205d6e 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,7 +5,16 @@
   This file gives a brief overview of the major changes between each OpenSSL
   release. For more details please read the CHANGES file.
 
-  Major changes between OpenSSL 0.9.8u and OpenSSL 0.9.8v:
+  Major changes between OpenSSL 0.9.8x and OpenSSL 0.9.8y:
+
+      o Fix for SSL/TLS/DTLS CBC plaintext recovery attack CVE-2013-0169
+      o Fix OCSP bad key DoS attack CVE-2013-0166
+
+  Major changes between OpenSSL 0.9.8w and OpenSSL 0.9.8x:
+
+      o Fix DTLS record length checking bug CVE-2012-2333
+
+  Major changes between OpenSSL 0.9.8v and OpenSSL 0.9.8w:
 
       o Fix for CVE-2012-2131 (corrected fix for 0.9.8 and CVE-2012-2110)