NEWS: add bug entry for BZ #28769 and BZ #28770

diff --git a/NEWS b/NEWS
index 8d7467d2c1b65833defadcc8113db73c0720c364..c063c78b151ee62348fd5066f561f4396aed7553 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -52,6 +52,8 @@ The following bugs are resolved with this release:
   [28744] A64FX string functions are selected without SVE HWCAP
   [28771] %ebx optimization macros are incompatible with .altmacro
   [28768] CVE-2022-23218: Buffer overflow in sunrpc svcunix_create
+  [28769] CVE-2021-3999: Off-by-one buffer overflow/underflow in getcwd()
+  [28770] CVE-2021-3998: Unexpected return value from realpath() for too long results
   [28784] x86: crash in 32bit memset-sse2.s when the cache size can not be determined
 
 \f