Port the 0.9.1 changelog over to master
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index c99a566..7e0f8a8 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -16,6 +16,13 @@
:class:`~cryptography.hazmat.primitives.twofactor.totp.TOTP` for generating
provisioning URIs.
+0.9.1 - 2015-06-06
+~~~~~~~~~~~~~~~~~~
+
+* **SECURITY ISSUE**: Fixed a double free in the OpenSSL backend when using DSA
+ to verify signatures. Note that this only affects PyPy 2.6.0 and (presently
+ unreleased) CFFI versions greater than 1.1.0.
+
0.9 - 2015-05-13
~~~~~~~~~~~~~~~~