[PATCH] Add security bugs to NEWS

[Adhemerval Zanella]

On 17-02-2016 15:27, Joseph Myers wrote:
> On Wed, 17 Feb 2016, Florian Weimer wrote:
> 
>> On 02/17/2016 06:18 PM, Joseph Myers wrote:
>>> On Wed, 20 Jan 2016, Florian Weimer wrote:
>>>
>>>> This patch adds the recent CVE assignments to the NEWS file.
>>>
>>> What happened to this patch - why hasn't it been committed?  We're very 
>>> close to the release now, and this is a release blocker.
>>
>> I'm just following the rule that all patches during the hard freeze have
>> to be approved by the release manager.
> 
> I don't think that should apply to NEWS updates.

This is also my understanding since the patches itself is upstream
(although some wording/spelling corrections may apply).

> 
> More generally, has anyone reviewed the changes since 2.22 for any 
> significant non-bug-fix changes that ought to have NEWS entries but don't?
> 

Good question, I will check this out.