[PATCH] Add security bugs to NEWS

[Florian Weimer]

On 02/17/2016 06:18 PM, Joseph Myers wrote:
> On Wed, 20 Jan 2016, Florian Weimer wrote:
> 
>> This patch adds the recent CVE assignments to the NEWS file.
> 
> What happened to this patch - why hasn't it been committed?  We're very 
> close to the release now, and this is a release blocker.

I'm just following the rule that all patches during the hard freeze have
to be approved by the release manager.

Florian