diff --git a/NEWS b/NEWS
index e62e25685..be5d44361 100644
--- a/NEWS
+++ b/NEWS
@@ -55,6 +55,16 @@ What's new in Sudo 1.8.28
    the value of "ipa_hostname" from sssd.conf, if specified, when
    matching the host name.
 
+ * Fixed a bug introduced in 1.8.21 that prevented the core dump
+   resource limit set in the pam_limits module from taking effect.
+   Bug #894.
+
+ * Fixed parsing of double-quoted Defaults group and netgroup bindings.
+
+ * The user ID is now used when matching sudoUser attributes in LDAP.
+   Previously, the user name, group name and group IDs were used
+   when matching but not the user ID.
+
 What's new in Sudo 1.8.27
 
  * On HP-UX, sudo will now update the utmps file when running a command