Update copyright year

[openssl.git] / NEWS

diff --git a/NEWS b/NEWS
index 3cf97937f81a737af794c51bdb0f6c8f82448f19..38fe668ffa7ef261e3a8a631f0cb1d58f0441b60 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,7 +5,17 @@
   This file gives a brief overview of the major changes between each OpenSSL
   release. For more details please read the CHANGES file.
 
-  Major changes between OpenSSL 1.0.2n and OpenSSL 1.0.2o [under development]
+  Major changes between OpenSSL 1.0.2p and OpenSSL 1.0.2q [under development]
+
+      o Microarchitecture timing vulnerability in ECC scalar multiplication (CVE-2018-5407)
+      o Timing vulnerability in DSA signature generation (CVE-2018-0734)
+
+  Major changes between OpenSSL 1.0.2o and OpenSSL 1.0.2p [14 Aug 2018]
+
+      o Client DoS due to large DH parameter (CVE-2018-0732)
+      o Cache timing vulnerability in RSA Key Generation (CVE-2018-0737)
+
+  Major changes between OpenSSL 1.0.2n and OpenSSL 1.0.2o [27 Mar 2018]
 
       o Constructed ASN.1 types with a recursive definition could exceed the
         stack (CVE-2018-0739)