Fix bug #67249: printf out-of-bounds read
update NEWS