From 46aa264430e37de5843697c90bf168bb7203d07f Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 15 Nov 2023 14:23:56 +0100
Subject: [PATCH] NEWS: Add info about CVE-2023-41913

---
 NEWS | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/NEWS b/NEWS
index c75bf1f14..6c50f1fcb 100644
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,10 @@
 strongswan-5.9.12
 -----------------
 
+- Fixed a vulnerability in charon-tkm related to processing DH public values
+  that can lead to a buffer overflow and potentially remote code execution.
+  This vulnerability has been registered as CVE-2023-41913.
+
 - The new `pki --ocsp` command produces OCSP responses based on certificate
   status information provided by plugins.