From: Stanislav Malyshev <stas@php.net>
Date: Sun, 22 Jun 2014 01:37:08 +0000 (-0700)
Subject: add CVEs
X-Git-Tag: php-5.4.30~9
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=300e0418a4b55cc745c262af8126d3aeb5f189e3;p=php

add CVEs
---

diff --git a/NEWS b/NEWS
index a5eaabcd6b..ce9398e586 100644
--- a/NEWS
+++ b/NEWS
@@ -21,15 +21,15 @@ PHP                                                                        NEWS
 
 - Fileinfo:
   . Fixed bug #67326 (fileinfo: cdf_read_short_sector insufficient boundary 
-    check). 
+    check). (CVE-2014-0207) 
   . Fixed bug #67410 (fileinfo: mconvert incorrect handling of truncated pascal
-    string size). (Francisco Alonso, Jan Kaluza, Remi)
+    string size). (CVE-2014-3478) (Francisco Alonso, Jan Kaluza, Remi) 
   . Fixed bug #67411 (fileinfo: cdf_check_stream_offset insufficient boundary
-    check). (Francisco Alonso, Jan Kaluza, Remi)
+    check). (CVE-2014-3479) (Francisco Alonso, Jan Kaluza, Remi)
   . Fixed bug #67412 (fileinfo: cdf_count_chain insufficient boundary check).
-    (Francisco Alonso, Jan Kaluza, Remi)
+    (CVE-2014-3480) (Francisco Alonso, Jan Kaluza, Remi)
   . Fixed bug #67413 (fileinfo: cdf_read_property_info insufficient boundary
-    check). (Francisco Alonso, Jan Kaluza, Remi)
+    check). (CVE-2014-3487) (Francisco Alonso, Jan Kaluza, Remi)
 
 - Network:
   . Fixed bug #67432 (Fix potential segfault in dns_get_record()).