add CVE

diff --git a/NEWS b/NEWS
index 8510caaf1eba9cb42cf6eec1c54ca5cbbc0a77f0..0186c560b6841e185ac6bd373bfb3c81f9027918 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -18,6 +18,7 @@ PHP                                                                        NEWS
   . Fixed bug #54454 (substr_compare incorrectly reports equality in some 
     cases). (Pierrick)
   . Fixed bug #54238 (use-after-free in substr_replace()). (Stas)
+    (CVE-2011-1148)
   . Fixed bug #54180 (parse_url() incorrectly parses path when ? in fragment).
     (tomas dot brastavicius at quantum dot lt, Pierrick)
   . Fixed bug #48465 (sys_get_temp_dir() possibly inconsistent when using