added CVEs in NEWS

diff --git a/NEWS b/NEWS
index d37a9f17e4d881913da266d9d14ea347a7b390d5..ed7b7823176557420210f5c9f7850709c1e84f5c 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -45,9 +45,9 @@ PHP                                                                        NEWS
 
 - Fileinfo:
   . Fixed bug #66307 (Fileinfo crashes with powerpoint files). (Anatol)
-  . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS).
+  . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS) (CVE-2014-0238).
   . Fixed bug #67328 (fileinfo: fileinfo: numerous file_printf calls resulting in
-    performance degradation).
+    performance degradation) (CVE-2014-0237).
 
 - FPM:
   . Fixed bug #66908 (php-fpm reload leaks epoll_create() file descriptor).