fix news
5.4.26 next
fix CVE ref for bug #66060