Add NEWS entry for bug #71331 (fixed in PHP 5.6.18)

diff --git a/NEWS b/NEWS
index 4905156bc5a1b6e2c0cd1e06b5aacb8cb7c3ec3d..e54e83aa20b90bf65ab33860481a703fcdbdf62b 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -186,6 +186,8 @@ PHP                                                                        NEWS
 
 - Phar:
   . Fixed bug #71354 (Heap corruption in tar/zip/phar parser). (Stas)
+  . Fixed bug #71331 (Uninitialized pointer in phar_make_dirstream()).
+    (CVE-2016-4343) (Stas)
   . Fixed bug #71391 (NULL Pointer Dereference in phar_tar_setupmetadata()).
     (Stas)
   . Fixed bug #71488 (Stack overflow when decompressing tar archives). (Stas)