diff --git a/NEWS b/NEWS
index 341090cb6..365fad2e6 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,7 @@
 == Version 2.6.0 (unreleased) ==
 
+`webauthn-server-core`:
+
 New features:
 
 * Added method `getParsedPublicKey(): java.security.PublicKey` to
@@ -61,6 +63,14 @@ New features:
     version increase.
 * (Experimental) Added `credProps` extension to assertion extension outputs.
 
+`webauthn-server-attestation`:
+
+New features:
+
+* `FidoMetadataDownloader` now parses the CRLDistributionPoints extension on the
+  application level, so the `com.sun.security.enableCRLDP=true` system property
+  setting is no longer necessary.
+
 
 == Version 2.5.4 ==