more information on 0.9.5
diff --git a/CHANGES b/CHANGES
index 6a42f94..dbbce58 100644
--- a/CHANGES
+++ b/CHANGES
@@ -520,8 +520,8 @@
code.
[Steve Henson]
- *) Correctly increment the reference count in the SSL_SESSION pointer
- returned from SSL_get_session().
+ *) SSL_get1_session() is like SSL_get_session(), but increments
+ the reference count in the SSL_SESSION returned.
[Geoff Thorpe <geoff@eu.c2.net>]
*) Fix for 'req': it was adding a null to request attributes.
diff --git a/NEWS b/NEWS
index b6a3d41..522b620 100644
--- a/NEWS
+++ b/NEWS
@@ -28,6 +28,9 @@
o TLS/SSL code now "tolerates" MS SGC
o RSA_NULL option that removes RSA patent code but keeps other
RSA functionality
+ o Memory leak detection now allows applications to add extra information
+ via a per-thread stack
+ o PRNG robustness improved
Major changes between OpenSSL 0.9.3 and OpenSSL 0.9.4:
