Allow AES XTS decryption using duplicate keys.

[oweals/openssl.git] / NEWS

diff --git a/NEWS b/NEWS
index 6d2b97dcbaa9c670e6ee40962564e4f138382e57..8547a2ebdcf5354990c6e4f6ae30eba813960537 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,10 +5,21 @@
   This file gives a brief overview of the major changes between each OpenSSL
   release. For more details please read the CHANGES file.
 
-  Major changes between OpenSSL 1.1.1a and OpenSSL 1.1.1b [under development]
+  Major changes between OpenSSL 1.1.1c and OpenSSL 1.1.1d [under development]
 
       o
 
+  Major changes between OpenSSL 1.1.1b and OpenSSL 1.1.1c [28 May 2019]
+
+      o Prevent over long nonces in ChaCha20-Poly1305 (CVE-2019-1543)
+
+  Major changes between OpenSSL 1.1.1a and OpenSSL 1.1.1b [26 Feb 2019]
+
+      o Change the info callback signals for the start and end of a post-handshake
+        message exchange in TLSv1.3.
+      o Fix a bug in DTLS over SCTP. This breaks interoperability with older versions
+        of OpenSSL like OpenSSL 1.1.0 and OpenSSL 1.0.2.
+
   Major changes between OpenSSL 1.1.1 and OpenSSL 1.1.1a [20 Nov 2018]
 
       o Timing vulnerability in DSA signature generation (CVE-2018-0734)