update news

diff --git a/NEWS b/NEWS
index 80ed14f28110192aa50a617fcc13ee793e13e05c..fd10e731470be225caad1e7aa02f31ada2f3caf0 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -14,6 +14,8 @@ PHP                                                                        NEWS
   . Fixed bug #65769 (localeconv() broken in TS builds). (Anatol)
   . Fixed bug #65230 (setting locale randomly broken). (Anatol)
   . Fixed bug #68583 (Crash in timeout thread). (Anatol)
+  . Fixed bug #68594 (Use after free vulnerability in unserialize()).
+    (CVE-2014-8142) (Stefan Esser)
 
 - cURL:
   . Fixed bug #67643 (curl_multi_getcontent returns '' when