documented fix

diff --git a/NEWS b/NEWS
index e10b52ff583a1353baedad8f76946f284005097a..efb460ee6e86205f4da98ee5a604a959c292f5b1 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -20,6 +20,9 @@ API.
 
 ** libgnutls: DN variable 'T' was expanded to 'title'.
 
+** libgnutls: Fixes in record padding parsing to prevent a timing attack. 
+Issue reported by Kenny Patterson and Nadhem Alfardan.
+
 ** libgnutls: Added functions to directly set the DN in a certificate
 or request from an RFC4514 string.