[gvfs] Update NEWS for 1.40.0 release

[Ondrej Holy <oholy src gnome org>]

commit a4de94e6267bbb28993ef824ead56bceb7f9bb68
Author: Ondrej Holy <oholy redhat com>
Date:   Mon Mar 11 14:15:21 2019 +0100

    Update NEWS for 1.40.0 release

 NEWS | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)
---
diff --git a/NEWS b/NEWS
index cc2e51c9..3649b95b 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,7 @@
+Major changes in 1.40.0
+=======================
+* No changes
+
 Major changes in 1.39.92
 ========================
 * client: Fix mount info cache invalidation
@@ -14,7 +18,7 @@ Major changes in 1.39.90
 ========================
 * sftp: Always use port 22 if not specified
 * mtp: Don't retry reading an event after failure
-* admin: Prevent access if any authentication agent isn't available
+* admin: Prevent access if any authentication agent isn't available (CVE-2019-3827)
 * build: Several meson improvements
 * Several smaller bugfixes
 * Translation updates