Update NEWs

diff --git a/NEWS b/NEWS
index 29c5642350a854d830b214ab1edc836137439251..7481c7f0a10de81f7ced74024962179061d5d225 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -40,6 +40,9 @@ PHP                                                                        NEWS
     (Help entry was missing). (Bob)
 
 - SPL:
+  . Fixed bug #67539 (ArrayIterator use-after-free due to object change during 
+    sorting). (research at insighti dot org, Laruence)
+  . Fixed bug #67538 (SPL Iterators use-after-free). (Laruence)
   . Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type
     Confusion) (CVE-2014-3515). (Stefan Esser)