Update CHANGES and NEWS for the new release

[openssl.git] / NEWS

diff --git a/NEWS b/NEWS
index 5a652841cfcd7dce60b7eab32f91042862fe36b5..412a2effc76c0fad596d3d7ebaaba76cff78c30a 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,10 @@
   This file gives a brief overview of the major changes between each OpenSSL
   release. For more details please read the CHANGES file.
 
+  Major changes between OpenSSL 1.0.2i and OpenSSL 1.0.2j [under development]
+
+      o Fix Use After Free for large message sizes (CVE-2016-6309)
+
   Major changes between OpenSSL 1.0.2h and OpenSSL 1.0.2i [22 Sep 2016]
 
       o OCSP Status Request extension unbounded memory growth (CVE-2016-6304)