Make the -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION pass tests

[openssl.git] / NEWS.md

diff --git a/NEWS.md b/NEWS.md
index c9355d52ae968cb4be2a6c7ced8e401921f18d8e..c269e370e088e446624cafea72c088bab99d38c0 100644 (file)
--- a/NEWS.md
+++ b/NEWS.md
@@ -71,7 +71,7 @@ OpenSSL 3.0
   * Changed our version number scheme and set the next major release to
     3.0.0
   * Added EVP_MAC, an EVP layer MAC API, and a generic EVP_PKEY to EVP_MAC
-    bridge.  Support MACs are: BLAKE2, CMAC, GMAC, HMAC, KMAC, POLY1305
+    bridge.  Supported MACs are: BLAKE2, CMAC, GMAC, HMAC, KMAC, POLY1305
     and SIPHASH.
   * Removed the heartbeat message in DTLS feature.
   * Added EVP_KDF, an EVP layer KDF and PRF API, and a generic EVP_PKEY to
@@ -89,7 +89,12 @@ OpenSSL 3.0
 OpenSSL 1.1.1
 -------------
 
-### Major changes between OpenSSL 1.1.1j and OpenSSL 1.1.1k [under development]
+### Major changes between OpenSSL 1.1.1k and OpenSSL 1.1.1l [24 Aug 2021]
+
+  * Fixed an SM2 Decryption Buffer Overflow ([CVE-2021-3711])
+  * Fixed various read buffer overruns processing ASN.1 strings ([CVE-2021-3712])
+
+### Major changes between OpenSSL 1.1.1j and OpenSSL 1.1.1k [25 Mar 2021]
 
   * Fixed a problem with verifying a certificate chain when using the
     X509_V_FLAG_X509_STRICT flag ([CVE-2021-3450])