1 files changed, 2 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 0332a0c3c3..72b0bc649e 100644
--- a/NEWS
+++ b/NEWS
@@ -7,7 +7,8 @@
 
   Major changes between OpenSSL 1.1.0f and OpenSSL 1.1.0g [under development]
 
-      o
+      o bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
+      o Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)
 
   Major changes between OpenSSL 1.1.0e and OpenSSL 1.1.0f [25 May 2017]