X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=blobdiff_plain;f=NEWS;h=6d2b97dcbaa9c670e6ee40962564e4f138382e57;hp=4026385dd7fc926783d4a224c6ec5e182a91b458;hb=f9ad0abb29aca7e765b041c3a13457a58ce66314;hpb=fc4e1ab4708a3eb87a107df7e085d0d8125c5171;ds=sidebyside

diff --git a/NEWS b/NEWS
index 4026385dd7..6d2b97dcba 100644
--- a/NEWS
+++ b/NEWS
@@ -5,10 +5,15 @@
   This file gives a brief overview of the major changes between each OpenSSL
   release. For more details please read the CHANGES file.
 
-  Major changes between OpenSSL 1.1.1 and OpenSSL 1.1.1a [under development]
+  Major changes between OpenSSL 1.1.1a and OpenSSL 1.1.1b [under development]
 
       o
 
+  Major changes between OpenSSL 1.1.1 and OpenSSL 1.1.1a [20 Nov 2018]
+
+      o Timing vulnerability in DSA signature generation (CVE-2018-0734)
+      o Timing vulnerability in ECDSA signature generation (CVE-2018-0735)
+
   Major changes between OpenSSL 1.1.0i and OpenSSL 1.1.1 [11 Sep 2018]
 
       o Support for TLSv1.3 added (see https://wiki.openssl.org/index.php/TLS1.3