update NEWS

diff --git a/NEWS b/NEWS
index 29a4e7559f9db1805576d307a9f079983dc72d73..8bcb98a1dbbdaa1fafcb071a477bc6af12773bf0 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,7 @@
 
   Major changes between OpenSSL 1.0.1 and OpenSSL 1.0.1a:
 
+      o Fix for ASN1 overflow bug CVE-2012-2110
       o Workarounds for some servers that hang on long client hellos.
       o Fix SEGV in AES code.