doc update [ci skip]

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

1 files changed, 8 insertions, 0 deletions

diff --git a/NEWS b/NEWS
index 6759c3dc24..a1f9350962 100644
--- a/NEWS
+++ b/NEWS
@@ -13,6 +13,14 @@ See the end for copying conditions.
 ** libgnutls: Corrected infinite loop when an incorrect PIN was provided
    via pin-value or pin-source.
 
+** Improved counter-measures for TLS CBC record padding, when encrypt-then-MAC
+   mode is not used.
+
+** The ciphers utilizing HMAC-SHA384 and SHA256 have been removed from the default
+   priority strings. They are not necessary for compatibility or other purpose and
+   provide no advantage over their SHA1 counter-parts, as they all depend on the legacy
+   TLS CBC block mode.
+
 ** API and ABI modifications:
 No changes since last version.