1 files changed, 3 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 3ee514f80e..d8f02ba0c8 100644
--- a/NEWS
+++ b/NEWS
@@ -17,6 +17,9 @@ X520countryName element.
 ** libgnutls: gnutls_pkcs12_verify_mac() will not fail in other than SHA1
 algorithms.
 
+** libgnutls: when checking the hostname of a certificate with multiple CNs
+ensure that the "most specific" CN is being used.
+
 ** p11tool: will not implicitly enable so-login for certain types of
 objects. That avoids issues with tokens that require different login
 types.