Add CVE for bugs in 5.5.25

diff --git a/NEWS b/NEWS
index 2cae7404e9863a4f7d54a98a85eb00d17da0e8ab..0ccc88c8ac1e22b7f47f01ed5a95409df680e07e 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -30,10 +30,12 @@ PHP                                                                        NEWS
 14 May 2015, PHP 5.5.25
 
 - Core:
-  . Fixed bug #69364 (PHP Multipart/form-data remote dos Vulnerability). (Stas)
+  . Fixed bug #69364 (PHP Multipart/form-data remote dos Vulnerability).
+    (CVE-2015-4024) (Stas)
   . Fixed bug #69403 (str_repeat() sign mismatch based memory corruption). 
     (Stas)
-  . Fixed bug #69418 (CVE-2006-7243 fix regressions in 5.4+). (Stas)
+  . Fixed bug #69418 (CVE-2006-7243 fix regressions in 5.4+). (CVE-2015-4025)
+    (Stas)
   . Fixed bug #69522 (heap buffer overflow in unpack()). (Stas)
   . Fixed bug #69467 (Wrong checked for the interface by using Trait). 
     (Laruence)
@@ -50,7 +52,7 @@ PHP                                                                        NEWS
 
 - FTP:
   . Fixed bug #69545 (Integer overflow in ftp_genlist() resulting in heap
-    overflow). (Stas)
+    overflow). (CVE-2015-4022) (Stas)
 
 - ODBC:
   . Fixed bug #69474 (ODBC: Query with same field name from two tables returns
@@ -63,11 +65,12 @@ PHP                                                                        NEWS
     (Daniel Lowrey)
 
 - PCNTL:
-  . Fixed bug #68598 (pcntl_exec() should not allow null char). (Stas)
+  . Fixed bug #68598 (pcntl_exec() should not allow null char). (CVE-2015-4026)
+    (Stas)
 
 - Phar:
-  . Fixed bug #69453 (Memory Corruption in phar_parse_tarfile when entry filename
-    starts with null). (Stas)
+  . Fixed bug #69453 (Memory Corruption in phar_parse_tarfile when entry
+    filename starts with null). (CVE-2015-4021) (Stas)
 
 16 Apr 2015, PHP 5.5.24