NEWS entries for Nettle-3.9.1.

diff --git a/NEWS b/NEWS
index b7b608800fa7b570a5d5eb2b95438266ac0c76fd..413538c6190fc65d86ddeb92c3b5c6ca6618a2d4 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,27 @@
+NEWS for the Nettle 3.9.1 release
+
+       This is a bugfix release, fixing a few bugs reported for
+       Nettle-3.9. The bug in the new OCB code may be exploitable for
+       denial of service or worse, since triggering it leads to
+       memory corruption. Upgrading from Nettle-3.9 to the new
+       version is strongly recommended.
+
+       The new version is intended to be fully source and binary
+       compatible with Nettle-3.6. The shared library names are
+       libnettle.so.8.8 and libhogweed.so.6.8, with sonames
+       libnettle.so.8 and libhogweed.so.6.
+
+       Bug fixes:
+
+       * Fix OCB loop for processing messages of size 272 bytes or
+         larger. Reported and fixed by Jussi Kivilinna.
+
+       * Fix alignment bug in the new x86_64 non-pclmul assembly
+         implementation of ghash. Reported by Henrik Grubbström.
+
+       * Fix build-time memory leak in eccdata. Reported by Noah
+         Watkins.
+
 NEWS for the Nettle 3.9 release
 
        This release includes bug fixes, several new features, a few