Fixed section

diff --git a/NEWS b/NEWS
index acddf29e466d37b02076d7e2a4090ee3dfe5423e..2f19e20b4cf9046e6f7645df4a848652028edb7c 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -10,6 +10,11 @@ PHP                                                                        NEWS
 - pgsql:
   . Fix bug #67555 (Cannot build against libpq 7.3). (Adam)
 
+- SPL:
+  . Fixed bug #67539 (ArrayIterator use-after-free due to object change during 
+    sorting). (research at insighti dot org, Laruence)
+  . Fixed bug #67538 (SPL Iterators use-after-free). (CVE-2014-4670) (Laruence)
+
 
 03 Jul 2014, PHP 5.6.0 Release Candidate 2
 
@@ -49,9 +54,6 @@ PHP                                                                        NEWS
     (Help entry was missing). (Bob)
 
 - SPL:
-  . Fixed bug #67539 (ArrayIterator use-after-free due to object change during 
-    sorting). (research at insighti dot org, Laruence)
-  . Fixed bug #67538 (SPL Iterators use-after-free). (Laruence)
   . Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type
     Confusion) (CVE-2014-3515). (Stefan Esser)