update NEWS, 5.6.2 will be a security-only release
PHP-5.6.3 is next