News: Add notes for bugs fixed during the 1.1.0 release candidate

NEWS.md

@@ -32,7 +32,7 @@ ClamAV 1.1.0 includes the following improvements and changes:
   - GitHub pull request: https://github.com/Cisco-Talos/clamav/pull/867
 
 - Added a new function `cl_engine_set_clcb_vba()` to the libclamav API.
-  Use this function to set a `cb_vba` callback function. 
+  Use this function to set a `cb_vba` callback function.
   The cb_vba callback function will be run whenever VBA is extracted from
   office documents. The provided data will be a normalized copy of the
   extracted VBA.
@@ -135,9 +135,36 @@ ClamAV 1.1.0 includes the following improvements and changes:
   This issue is not a vulnerability.
   - GitHub pull request: https://github.com/Cisco-Talos/clamav/pull/812
 
+- Fixed a possible heap overflow read in javascript normalizer module.
+  This issue is not a vulnerability.
+  - GitHub pull request: https://github.com/Cisco-Talos/clamav/pull/868
+
+- Fixed two bugs that would cause Freshclam to fail update when applying a
+  CDIFF database patch if that patch adds a file to the database archive
+  or removes a file from the database archive.
+  This bug also caused Sigtool to fail to create such a patch.
+  - GitHub pull request: https://github.com/Cisco-Talos/clamav/pull/893
+
+- Fixed an assortment of complaints identified by Coverity static analysis.
+  - GitHub pull requests:
+    - https://github.com/Cisco-Talos/clamav/pull/891
+    - https://github.com/Cisco-Talos/clamav/pull/899
+
+- Fixed one of the Freshclam tests that was failing on some Fedora systems
+  due to a bug printing debug-level log messages to stdout.
+  Fix courtesy of Arjen de Korte.
+  - GitHub pull request: https://github.com/Cisco-Talos/clamav/pull/881
+
+- Correctly remove temporary files generated by the VBA and XLM extraction
+  modules so that the files are not leaked in patched versions of ClamAV
+  where temporary files are written directly to the temp-directory instead
+  of writing to a unique subdirectory.
+  - GitHub pull request: https://github.com/Cisco-Talos/clamav/pull/894
+
 ### Acknowledgments
 
 Special thanks to the following people for code contributions and bug reports:
+- Arjen de Korte
 - Craig Andrews
 - Ged Haywood
 - Matt Jolly