Update NEWS
Fix possible deref in bflsc28
Bump version to 4.6.0