NEWS: add merge request numbers for security fixes

diff --git a/NEWS b/NEWS
index 000103e479f2f2a38698b3e4b00754b38076d1ea..e5b8aea4c12a90e6ac80c7973b024c455394e3b5 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -3,7 +3,8 @@ Knot Resolver 4.1.0 (2019-07-10)
 
 Security
 --------
-- fix CVE-2019-10191: caching negative answer with forged QNAME+QTYPE
+- fix CVE-2019-10190: do not pass bogus negative answer to client (!827)
+- fix CVE-2019-10191: do not cache negative answer with forged QNAME+QTYPE (!839)
 
 Improvements
 ------------