Add test for resetting SM2 dist ID

[openssl.git] / NEWS.md

diff --git a/NEWS.md b/NEWS.md
index 0b1fc5fe9705a8229e9b5a463506d399782f037a..87968cc0a4a705a394cb97ad4a9ec4c8fb7b60f1 100644 (file)
--- a/NEWS.md
+++ b/NEWS.md
@@ -18,9 +18,21 @@ OpenSSL Releases
 OpenSSL 3.0
 -----------
 
-### Major changes between OpenSSL 3.0.0 and OpenSSL 3.0.1 [under development]
+### Major changes between OpenSSL 3.0.2 and OpenSSL 3.0.3 [under development]
 
- *
+  * none
+
+### Major changes between OpenSSL 3.0.1 and OpenSSL 3.0.2 [15 Mar 2022]
+
+  * Fixed a bug in the BN_mod_sqrt() function that can cause it to loop forever
+    for non-prime moduli ([CVE-2022-0778])
+
+### Major changes between OpenSSL 3.0.0 and OpenSSL 3.0.1 [14 Dec 2021]
+
+  * Fixed invalid handling of X509_verify_cert() internal errors in libssl
+    ([CVE-2021-4044])
+  * Allow fetching an operation from the provider that owns an unexportable key
+    as a fallback if that is still allowed by the property query.
 
 ### Major changes between OpenSSL 1.1.1 and OpenSSL 3.0.0 [7 sep 2021]