update FAQ, NEWS

diff --git a/FAQ b/FAQ
index 584cb9fef97ec9656cb4d379a8ae61c140ee99fb..94e36ab58a1fdd99d92059c2d29ac6de235a1be0 100644 (file)
--- a/FAQ
+++ b/FAQ
@@ -79,7 +79,7 @@ OpenSSL  -  Frequently Asked Questions
 * Which is the current version of OpenSSL?
 
 The current version is available from <URL: http://www.openssl.org>.
 * Which is the current version of OpenSSL?
 
 The current version is available from <URL: http://www.openssl.org>.

-OpenSSL 0.9.8k was released on Mar 25th, 2009.
+OpenSSL 0.9.8m was released on Mar 25th, 2010.

 
 In addition to the current stable release, you can also access daily
 snapshots of the OpenSSL development version at <URL:
 
 In addition to the current stable release, you can also access daily
 snapshots of the OpenSSL development version at <URL:

diff --git a/NEWS b/NEWS
index 007d4cbf74442ed3c8a94e5e2547770d9ad842d5..0e9514a6dbc02ac4fe20239a58ad2815d14a5034 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -7,7 +7,6 @@
 
   Major changes between OpenSSL 0.9.8l and OpenSSL 1.0:
 
 
   Major changes between OpenSSL 0.9.8l and OpenSSL 1.0:
 

-      o Support for RFC5746 TLS renegotiation extension.

       o RFC3280 path validation: sufficient to process PKITS tests.
       o Integrated support for PVK files and keyblobs.
       o Change default private key format to PKCS#8.
       o RFC3280 path validation: sufficient to process PKITS tests.
       o Integrated support for PVK files and keyblobs.
       o Change default private key format to PKCS#8.


@@ -29,6 +28,22 @@
       o Opaque PRF Input TLS extension support.
       o Updated time routines to avoid OS limitations.
 
       o Opaque PRF Input TLS extension support.
       o Updated time routines to avoid OS limitations.
 

+  Major changes between OpenSSL 0.9.8l and OpenSSL 0.9.8m:
+
+      o Cipher definition fixes.
+      o Workaround for slow RAND_poll() on some WIN32 versions.
+      o Remove MD2 from algorithm tables.
+      o SPKAC handling fixes.
+      o Support for RFC5746 TLS renegotiation extension.
+      o Compression memory leak fixed.
+      o Compression session resumption fixed.
+      o Ticket and SNI coexistence fixes.
+      o Many fixes to DTLS handling. 
+
+  Major changes between OpenSSL 0.9.8k and OpenSSL 0.9.8l:
+
+      o Temporary work around for CVE-2009-3555: disable renegotiation.
+

   Major changes between OpenSSL 0.9.8j and OpenSSL 0.9.8k:
 
       o Fix various build issues.
   Major changes between OpenSSL 0.9.8j and OpenSSL 0.9.8k:
 
       o Fix various build issues.