NEWS: mention 3.8.12 changes

Signed-off-by: Alexander Sosedkin <asosedkin@redhat.com>

diff --git a/NEWS b/NEWS
index de18888af15d02fe870af0b9ca8922f7ae2413f1..44d051a609c10bd48e14607937298f451ac7c178 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,24 @@ Copyright (C) 2000-2016 Free Software Foundation, Inc.
 Copyright (C) 2013-2019 Nikos Mavrogiannopoulos
 See the end for copying conditions.
 
+* Version 3.8.12 (unreleased)
+
+** libgnutls: Fall back to thread-unsafe module initialization
+   Improve fallback handling for PKCS#11 modules that
+   don't support thread-safe initialization (#1774).
+   Also return filename from p11_kit_module_get_name() for unconfigured modules.
+
+** libgnutls: Accept NULL as digest argument for gnutls_hash_output
+   The accelerated implementation of gnutls_hash_output() now
+   properly accepts NULL as the digest argument, matching the
+   behavior of the reference implementation (#1769).
+
+** srptool: Avoid a stack buffer overflow when processing large SRP groups.
+   Reported and fixed by Mikhail Dmitrichenko (#1777).
+
+** API and ABI modifications:
+No changes since last version.
+
 * Version 3.8.11 (released 2025-11-18)
 
 ** libgnutls: Fix stack overwrite in gnutls_pkcs11_token_init