NEWS: Add info about CVE-2023-41913

diff --git a/NEWS b/NEWS
index c75bf1f140ba1697ed03f72892f374df10340b68..6c50f1fcbd13a94beb3af6ff352749cfdf76db68 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,10 @@
 strongswan-5.9.12
 -----------------
 
+- Fixed a vulnerability in charon-tkm related to processing DH public values
+  that can lead to a buffer overflow and potentially remote code execution.
+  This vulnerability has been registered as CVE-2023-41913.
+
 - The new `pki --ocsp` command produces OCSP responses based on certificate
   status information provided by plugins.