Add NEWS entry for CVE-2020-29562 (BZ #26923)

BZ #26923 now has a CVE entry, so add a NEWS entry for it.

diff --git a/NEWS b/NEWS
index aa7bbf033bf585fa84f1ae99dc65a02849fff24b..21d2f14995f58bd1ef37e951d1eab0fb3743bf30 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -66,6 +66,9 @@ Security related changes:
   invoked with input containing redundant shift sequences in the IBM1364,
   IBM1371, IBM1388, IBM1390, or IBM1399 character sets.
 
+  CVE-2020-29562: An assertion failure has been fixed in the iconv function
+  when invoked with UCS4 input containing an invalid character.
+
 The following bugs are resolved with this release:
 
   [The release manager will add the list generated by