Update CHANGES and NEWS for new release

[openssl.git] / NEWS

diff --git a/NEWS b/NEWS
index 846ca1d2737ca9499c861d25a2da7c0b26d6a114..e04a7f4840368b561834faa93c3073bd6cffd8bc 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -11,6 +11,11 @@
       o Add a STORE module (OSSL_STORE)
       o Claim the namespaces OSSL and OPENSSL, represented as symbol prefixes
 
+  Major changes between OpenSSL 1.1.0f and OpenSSL 1.1.0g [2 Nov 2017]
+
+      o bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
+      o Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)
+
   Major changes between OpenSSL 1.1.0e and OpenSSL 1.1.0f [25 May 2017]
 
       o config now recognises 64-bit mingw and chooses mingw64 instead of mingw