1 files changed, 2 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 6d32f751a9..5b7e2ec3ed 100644
--- a/NEWS
+++ b/NEWS
@@ -7,7 +7,8 @@
 
   Major changes between OpenSSL 1.0.2e and OpenSSL 1.0.2f [under development]
 
-      o
+      o DH small subgroups (CVE-2016-0701)
+      o SSLv2 doesn't block disabled ciphers (CVE-2015-3197)
 
   Major changes between OpenSSL 1.0.2d and OpenSSL 1.0.2e [3 Dec 2015]