From 613cd016ee3dca6b894a3cb9ef462dbcce17208f Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 22 Dec 2022 19:58:49 +0100
Subject: [PATCH] NEWS: Add news for 5.9.9

---
 NEWS | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/NEWS b/NEWS
index b671fc8ca1..20d94b8f14 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,22 @@
+strongswan-5.9.9
+----------------
+
+- The charon.reqid_base setting allows specifying the first reqid that's
+  automatically assigned to a CHILD_SA.
+
+- The path/command for resolvconf(8) used by the resolve plugin is now
+  configurable.
+
+- The resolve plugin doesn't generate unique interface names for name servers
+  anymore. Instead, all available name servers are associated with a single,
+  configurable interface name.
+
+- Serial numbers of certificates and CRLs are now always returned in canonical
+  form (i.e. without leading zeros).
+
+- The kernel-netlink plugin now logs extended ACK error/warning messages.
+
+
 strongswan-5.9.8
 ----------------
 
-- 
2.47.2