From: Dr. Stephen Henson <steve@openssl.org>
Date: Tue, 6 Sep 2011 12:56:21 +0000 (+0000)
Subject: update NEWS
X-Git-Tag: OpenSSL_1_0_0e~1
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=b493a057206aedefeb1156e0fe4de9bd4184ee28;p=oweals%2Fopenssl.git

update NEWS
---

diff --git a/NEWS b/NEWS
index 5cb75f2513..672810dcc7 100644
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,8 @@
 
   Major changes between OpenSSL 1.0.0d and OpenSSL 1.0.0e:
 
+      o Fix for CRL vulnerability issue CVE-2011-3207
+      o Fix for ECDH crashes CVE-2011-3210
       o Protection against EC timing attacks.
       o Support ECDH ciphersuites for certificates using SHA2 algorithms.
       o Various DTLS fixes.