Fixes for no-static-engine and Windows builds.

[oweals/openssl.git] / NEWS

diff --git a/NEWS b/NEWS
index b36d1d8e463f3b3c0cc75063ce1722b0b305559e..0de954cf4e768d854480e9ec5bf0e4d264205d6e 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,11 @@
   This file gives a brief overview of the major changes between each OpenSSL
   release. For more details please read the CHANGES file.
 
+  Major changes between OpenSSL 0.9.8x and OpenSSL 0.9.8y:
+
+      o Fix for SSL/TLS/DTLS CBC plaintext recovery attack CVE-2013-0169
+      o Fix OCSP bad key DoS attack CVE-2013-0166
+
   Major changes between OpenSSL 0.9.8w and OpenSSL 0.9.8x:
 
       o Fix DTLS record length checking bug CVE-2012-2333