Update CHANGES and NEWS

[openssl.git] / NEWS

diff --git a/NEWS b/NEWS
index cb5674b39145ab66d9937e62da7b1db5d79c1fd6..6fd1148bd49db893992843310a15fcba4afa3dbf 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -7,11 +7,17 @@
 
   Major changes between OpenSSL 1.0.2d and OpenSSL 1.0.2e [under development]
 
-      o
+      o BN_mod_exp may produce incorrect results on x86_64 (CVE-2015-3193)
+      o Certificate verify crash with missing PSS parameter (CVE-2015-3194)
+      o X509_ATTRIBUTE memory leak (CVE-2015-3195)
+      o Rewrite EVP_DecodeUpdate (base64 decoding) to fix several bugs
+      o In DSA_generate_parameters_ex, if the provided seed is too short,
+        return an error
 
   Major changes between OpenSSL 1.0.2c and OpenSSL 1.0.2d [9 Jul 2015]
 
       o Alternate chains certificate forgery (CVE-2015-1793)
+      o Race condition handling PSK identify hint (CVE-2015-3196)
 
   Major changes between OpenSSL 1.0.2b and OpenSSL 1.0.2c [12 Jun 2015]