From: Xinchen Hui <laruence@php.net>
Date: Wed, 2 Jul 2014 09:58:37 +0000 (+0800)
Subject: Update NEWs
X-Git-Tag: PRE_PHPNG_MERGE~137^2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=05cc46a96b44c4b0ead2909864c9b683103c5946;p=php

Update NEWs
---

diff --git a/NEWS b/NEWS
index 29c5642350..7481c7f0a1 100644
--- a/NEWS
+++ b/NEWS
@@ -40,6 +40,9 @@ PHP                                                                        NEWS
     (Help entry was missing). (Bob)
 
 - SPL:
+  . Fixed bug #67539 (ArrayIterator use-after-free due to object change during 
+    sorting). (research at insighti dot org, Laruence)
+  . Fixed bug #67538 (SPL Iterators use-after-free). (Laruence)
   . Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type
     Confusion) (CVE-2014-3515). (Stefan Esser)