NEWS: add note about sd-sbsign

diff --git a/NEWS b/NEWS
index 4c6003582008d3834bb63b6d7321458d189635b1..a180ab81e74f7d29d26a6752bb17f0ed3c6ab8c1 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -430,6 +430,11 @@ CHANGES WITH 257 in spe:
           systemd's native systemd-ask-password logic (and take benefit of its
           caching and UI).
 
+        * A new systemd-sbsign tool has been added, that can be used to sign
+          EFI binaries (PE). This tool supports OpenSSL engines and providers,
+          with pin caching support for PKCS11. ukify supports it as an
+          alternative to sbsigntool and pesign.
+
         The journal:
 
         * journalctl can now list invocations of a unit with the