NEWS: add a notice of insecure-hash filtering ciphersuites on PRF

Signed-off-by: Alexander Sosedkin <asosedkin@redhat.com>

diff --git a/NEWS b/NEWS
index 0ae64100987ed9b6d02b3dc0d3e19fcc79b0dca2..de57ed5dc154f4364d03c7167102e0970f3904d0 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -9,6 +9,9 @@ See the end for copying conditions.
 
 ** certtool: Certtool can now generate, manipulate, and evaluate x25519 and
    x448 public keys, private keys, and certificates.
+** libgnutls: disabling a hashing algorithm through "insecure-hash"
+   configuration directive now also disables TLS ciphersuites that use it
+   as a PRF algorithm.
 
 ** API and ABI modifications:
 GNUTLS_PRIVKEY_FLAG_RSA_PSS_FIXED_SALT_LENGTH: new flag in gnutls_privkey_flags_t