Prepare for 1.0.0t release

[openssl.git] / NEWS

diff --git a/NEWS b/NEWS
index e87b07f46e3c1b9161c407cba39445c4d766fa45..c7f96f7fd22a14ce1a805b6424ea2e3f33e16143 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,9 +5,18 @@
   This file gives a brief overview of the major changes between each OpenSSL
   release. For more details please read the CHANGES file.
 
-  Major changes between OpenSSL 1.0.0r and OpenSSL 1.0.0s [under development]
+  Major changes between OpenSSL 1.0.0s and OpenSSL 1.0.0t [3 Dec 2015]
 
-      o
+      o X509_ATTRIBUTE memory leak (CVE-2015-3195)
+      o Race condition handling PSK identify hint (CVE-2015-3196)
+
+  Major changes between OpenSSL 1.0.0r and OpenSSL 1.0.0s [11 Jun 2015]
+
+      o Malformed ECParameters causes infinite loop (CVE-2015-1788)
+      o Exploitable out-of-bounds read in X509_cmp_time (CVE-2015-1789)
+      o PKCS7 crash with missing EnvelopedContent (CVE-2015-1790)
+      o CMS verify infinite loop with unknown hash function (CVE-2015-1792)
+      o Race condition handling NewSessionTicket (CVE-2015-1791)
 
   Major changes between OpenSSL 1.0.0q and OpenSSL 1.0.0r [19 Mar 2015]