Add CVE to bugs #69545, #69646 and #69667

diff --git a/NEWS b/NEWS
index da342689c99769a8ada5a0f7b520e896f0697c0e..7f1bf5d73233708f0302ab7e651111caaafafdf2 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -6,9 +6,9 @@ PHP                                                                        NEWS
 
 - Core:
   . Imroved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in
-    heap overflow). (Max Spelsberg)
+    heap overflow). (CVE-2015-4643) (Max Spelsberg)
   . Fixed bug #69646 (OS command injection vulnerability in escapeshellarg).
-    (Anatol Belski)
+    (CVE-2015-4642) (Anatol Belski)
   . Fixed bug #69719 (Incorrect handling of paths with NULs). (Stas)
 
 - Litespeed SAPI:
@@ -19,7 +19,7 @@ PHP                                                                        NEWS
     additional headers). (Yasuo)
 
 - Postgres:
-  . Fixed bug #69667 (segfault in php_pgsql_meta_data). (Remi)
+  . Fixed bug #69667 (segfault in php_pgsql_meta_data). (CVE-2015-4644) (Remi)
 
 - Sqlite3:
   . Upgrade bundled sqlite to 3.8.10.2. (CVE-2015-3414, CVE-2015-3415,