update news with CVE