NEWS: add new release 4.0-beta4
As suggested, I checked all the feeds, however, I'm not quite sure if you will like how I wrote CVEs for hostapd.
If I do this, it doesn't look so good as it is too long.
* hostapd: fixed CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, CVE-2019-11555