X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=NEWS;h=e88c5f470b8a0d9db58b9ee24f7a20be52834af0;hp=82d1cb18b911c11b0dcf5b58dddd4a3638576b4b;hb=bc349281880c3f1da784cbc76b28f34d8ab10601;hpb=3133c2d3067c6add91cf370b0b8342d891b8e97a

diff --git a/NEWS b/NEWS
index 82d1cb18b9..e88c5f470b 100644
--- a/NEWS
+++ b/NEWS
@@ -11,6 +11,9 @@
 
   Major changes between OpenSSL 1.1.0a and OpenSSL 1.1.0b [26 Sep 2016]
 
+      o ChaCha20/Poly1305 heap-buffer-overflow (CVE-2016-7054)
+      o CMS Null dereference (CVE-2016-7053)
+      o Montgomery multiplication may produce incorrect results (CVE-2016-7055)
       o Fix Use After Free for large message sizes (CVE-2016-6309)
 
   Major changes between OpenSSL 1.1.0 and OpenSSL 1.1.0a [22 Sep 2016]