Fixes for no-static-engine and Windows builds.

[oweals/openssl.git] / NEWS

diff --git a/NEWS b/NEWS
index 4f449115bc39627305dfd6393485ad965c022f83..0de954cf4e768d854480e9ec5bf0e4d264205d6e 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,15 @@
   This file gives a brief overview of the major changes between each OpenSSL
   release. For more details please read the CHANGES file.
 
+  Major changes between OpenSSL 0.9.8x and OpenSSL 0.9.8y:
+
+      o Fix for SSL/TLS/DTLS CBC plaintext recovery attack CVE-2013-0169
+      o Fix OCSP bad key DoS attack CVE-2013-0166
+
+  Major changes between OpenSSL 0.9.8w and OpenSSL 0.9.8x:
+
+      o Fix DTLS record length checking bug CVE-2012-2333
+
   Major changes between OpenSSL 0.9.8v and OpenSSL 0.9.8w:
 
       o Fix for CVE-2012-2131 (corrected fix for 0.9.8 and CVE-2012-2110)