From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Tue, 8 Dec 2015 09:59:02 +0000 (+0100)
Subject: doc update
X-Git-Tag: gnutls_3_5_0~492
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=6ab2480eeef00a20648df13e2597f8e976c670f4;p=thirdparty%2Fgnutls.git

doc update
---

diff --git a/NEWS b/NEWS
index c9acdfdf25..d507481da1 100644
--- a/NEWS
+++ b/NEWS
@@ -16,6 +16,11 @@ See the end for copying conditions.
    parsing errors in the extensions field and treat it as a typical Hello
    message structure. Reported by Hubert Kario (#40)
 
+** libgnutls: On a rehandshake ensure that the certificate of the peer (if
+   available) is the same as in previous handshakes. That is to protect
+   applications which do not check user credentials on rehandshakes from
+   attacks related to unsafe renegotiation.
+
 ** certtool: Added the --provable option.
 
 ** API and ABI modifications: