diff --git a/NEWS b/NEWS
index c34d7f1d..6bdf6a34 100644
--- a/NEWS
+++ b/NEWS
@@ -9,8 +9,9 @@
 - When multiple authentication methods are set and the primary includes
   a certificate, no longer require a certificate for all clients.
 - When receiving non-minimal DPD messages, reflect their contents.
-- try-mtu-discovery config option was fixed to not set the DF bit if
-  it is unset.
+- The 'try-mtu-discovery' config option was fixed to affect the DF bit
+  setting in UDP packets.
+- Invalidate cookies when the user terminates the session explicitly.
 - sec-mod: Do not impose timeouts on reads from main. That would prevent
   issues when reading in a very busy system.