[COMMITTED] advisories: Update GLIBC-SA-2026-0007.

[Carlos O'Donell]

Update NEWS to include GLIBC-SA-2026-0007.
---
 NEWS                          | 4 ++++
 advisories/GLIBC-SA-2026-0007 | 1 +
 2 files changed, 5 insertions(+)

diff --git a/NEWS b/NEWS
index c6e9a83923..d72c1efccb 100644
--- a/NEWS
+++ b/NEWS
@@ -42,6 +42,10 @@ found in the advisories directory of the release tarball:
     gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames
     (CVE-2026-4438)
 
+  GLIBC-SA-2026-0007:
+    iconv crash due to assertion failure with untrusted input
+    (CVE-2026-4046)
+
 The following bugs were resolved with this release:
 
   [The release manager will add the list generated by
diff --git a/advisories/GLIBC-SA-2026-0007 b/advisories/GLIBC-SA-2026-0007
index b960525e7f..b880fb5544 100644
--- a/advisories/GLIBC-SA-2026-0007
+++ b/advisories/GLIBC-SA-2026-0007
@@ -11,4 +11,5 @@ and IBM1399 character sets from systems that do not need them.
 CVE-Id: CVE-2026-4046
 Public-Date: 2026-03-12
 Vulnerable-Commit: 0ecb606cb6cf65de1d9fc8a919bceb4be476c602 (2.3.3-1501)
+Fix-Commit: d6f08d1cf027f4eb2ba289a6cc66853722d4badc (2.44)
 Reported-by: Rocket Ma
-- 
2.53.0