Reviewed-by: NStephen Henson <steve@openssl.org>

Updates to CHANGES and NEWS to take account of the latest security fixes.
Reviewed-by: NRich Salz <rsalz@openssl.org>

Resync NEWS with the latest version from 1.0.2
Reviewed-by: NRichard Levitte <levitte@openssl.org>

Reviewed-by: NDr Stephen Henson <steve@openssl.org>

(Various changes from the master branch are now in the 1.0.2 branch too.)

Submitted by: Neel Mehta, Adam Langley, Bodo Moeller

(CVE-2006-4339)

Submitted by: Ben Laurie, Google Security Team
Reviewed by: bmoeller, mjc, shenson

(This were in 0.9.7-stable and 0.9.8-stable, but not in HEAD so far.)