Update CHANGES/NEWS for new release
@@ -29,6 +29,11 @@ OpenSSL 3.1
OpenSSL 3.0
-----------
+### Major changes between OpenSSL 3.0.1 and OpenSSL 3.0.2
+
+ * Fixed a bug in the BN_mod_sqrt() function that can cause it to loop forever
+ for non-prime moduli ([CVE-2022-0778])
+
### Major changes between OpenSSL 3.0.0 and OpenSSL 3.0.1
* Fixed invalid handling of X509_verify_cert() internal errors in libssl
