Add NEWS entry for bug #67492

Included in 5.5.14 with commit d9c5a1d

diff --git a/NEWS b/NEWS
index d38da069efdc1876d05029eeacda0d213273f886..d087fbe254d69a298014b13ae9b030305fcee077 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -189,6 +189,8 @@ PHP                                                                        NEWS
   . Fixed bug #66127 (Segmentation fault with ArrayObject unset). (Stas)
   . Fixed bug #67359 (Segfault in recursiveDirectoryIterator). (Laruence)
   . Fixed bug #67360 (Missing element after ArrayObject::getIterator). (Adam)
+  . Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type
+    Confusion). (CVE-2014-3515) (Stefan Esser)
 
 29 May 2014, PHP 5.5.13