Add CVE assigned to 5.5.22 bugs after the release

diff --git a/NEWS b/NEWS
index 081807fe0a3d7efe53243e4de8e31ab8a36b9fd2..d445e2935b66fad66eeb7e1c6d2b182c063f7319 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -133,7 +133,7 @@ PHP                                                                        NEWS
 
 - Enchant: 
   . Fixed bug #68552 (heap buffer overflow in enchant_broker_request_dict()).
-    (Antony)
+    (CVE-2014-9705) (Antony)
 
 - Fileinfo:
   . Fixed bug #68827 (Double free with disabled ZMM). (Joshua Rogers)
@@ -152,7 +152,8 @@ PHP                                                                        NEWS
     named pipes). (steffenb198 at aol dot com)
 
 - Phar:
-  . Fixed bug #68901 (use after free). (bugreports at internot dot info)
+  . Fixed bug #68901 (use after free). (CVE-2015-2301)
+    (bugreports at internot dot info)
 
 - Pgsql:
   . Fixed Bug #65199 'pg_copy_from() modifies input array variable). (Yasuo)