Fixes for no-static-engine and Windows builds.

[oweals/openssl.git] / NEWS

diff --git a/NEWS b/NEWS
index 66f445cdeb95413f1448a5b8747d9f3e1fb4ed7e..0de954cf4e768d854480e9ec5bf0e4d264205d6e 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,19 @@
   This file gives a brief overview of the major changes between each OpenSSL
   release. For more details please read the CHANGES file.
 
+  Major changes between OpenSSL 0.9.8x and OpenSSL 0.9.8y:
+
+      o Fix for SSL/TLS/DTLS CBC plaintext recovery attack CVE-2013-0169
+      o Fix OCSP bad key DoS attack CVE-2013-0166
+
+  Major changes between OpenSSL 0.9.8w and OpenSSL 0.9.8x:
+
+      o Fix DTLS record length checking bug CVE-2012-2333
+
+  Major changes between OpenSSL 0.9.8v and OpenSSL 0.9.8w:
+
+      o Fix for CVE-2012-2131 (corrected fix for 0.9.8 and CVE-2012-2110)
+
   Major changes between OpenSSL 0.9.8u and OpenSSL 0.9.8v:
 
       o Fix for ASN1 overflow bug CVE-2012-2110