NEWS: add an entry for #1841

Signed-off-by: Alexander Sosedkin <asosedkin@redhat.com>

diff --git a/NEWS b/NEWS
index 3dc3c2037f3bf0ddcfcaf827614773a195ea3c03..442d55eb8441f91c5a4657cca5e7853346b76154 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -154,6 +154,10 @@ See the end for copying conditions.
    a 2-byte overread past the buffer (#1822).
    Reported by Joshua Rogers of AISLE Research Team.
 
+** libgnutls: Zeroize shared secret derived during hybrid key exchange
+   The derived shared secret was not zeroized before being freed (#1841).
+   Reported by liyue.
+
 ** build: Support building with Nettle 4.0
    Nettle 4.0 was released in Feburary 2026, with API incompatibile
    changes from 3.10. The library can now compile with it, while