NEWS

diff --git a/NEWS b/NEWS
index b1d56ac0f5bfa8bd8b916f7132d8fef34671ccbd..2b68ac149336eb3387c093126dd8525a9839aa21 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -23,6 +23,8 @@ PHP                                                                        NEWS
   . Fixed bug #66242 (libmagic: don't assume char is signed). (ArdB)
   . Fixed bug #68224 (buffer-overflow in libmagic/readcdf.c caught by
     AddressSanitizer). (Remi)
+  . Fixed bug #68283 (fileinfo: out-of-bounds read in elf note headers).
+    (CVE-2014-3710) (Remi)
 
 - FPM:
   . Fixed bug #65641 (PHP-FPM incorrectly defines the SCRIPT_NAME variable