Update NEWS.
Add fix for CVE-2013-4353
Sync CHANGES
bn/asm/x86_64-mont5.pl: fix compilation error on Solaris.
(cherry picked from commit eedab5241e32f9f185cfee23a0c67264d3e3ecf2)