From: Dr. Stephen Henson <steve@openssl.org>
Date: Wed, 6 Aug 2014 13:47:50 +0000 (+0100)
Subject: update NEWS
X-Git-Tag: OpenSSL_1_0_1i~2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=9b649d9a739c96d2599f4481fcfad749ac37482d;p=openssl

update NEWS

Reviewed-by: Kurt Roeckx <kurt@openssl.org>
---

diff --git a/NEWS b/NEWS
index 02f8a55772..07d7602aaa 100644
--- a/NEWS
+++ b/NEWS
@@ -7,12 +7,15 @@
 
   Major changes between OpenSSL 1.0.1h and OpenSSL 1.0.1i [under development]
 
-      o
-
-  Known issues in OpenSSL 1.0.1h:
-
-      o EAP-FAST and other applications using tls_session_secret_cb
-        wont resume sessions. Fixed in 1.0.1i-dev
+      o Fix for CVE-2014-3512
+      o Fix for CVE-2014-3511
+      o Fix for CVE-2014-3510
+      o Fix for CVE-2014-3507
+      o Fix for CVE-2014-3506
+      o Fix for CVE-2014-3505
+      o Fix for CVE-2014-3509
+      o Fix for CVE-2014-5139
+      o Fix for CVE-2014-3508
 
   Major changes between OpenSSL 1.0.1g and OpenSSL 1.0.1h [5 Jun 2014]