1 files changed, 4 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 073911ed80..a23d0e0294 100644
--- a/NEWS
+++ b/NEWS
@@ -7,7 +7,10 @@
 
   Major changes between OpenSSL 1.1.1s and OpenSSL 1.1.1t [under development]
 
-      o
+      o Fixed X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)
+      o Fixed Use-after-free following BIO_new_NDEF (CVE-2023-0215)
+      o Fixed Double free after calling PEM_read_bio_ex (CVE-2022-4450)
+      o Fixed Timing Oracle in RSA Decryption (CVE-2022-4304)
 
   Major changes between OpenSSL 1.1.1r and OpenSSL 1.1.1s [1 Nov 2022]