From: Julien Pauli <jpauli@php.net>
Date: Wed, 28 May 2014 08:59:57 +0000 (+0200)
Subject: added CVEs in NEWS
X-Git-Tag: php-5.5.14RC1~42
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=4ef561c7bacd76d3221237e52cfcbcef257c9ee7;p=php

added CVEs in NEWS
---

diff --git a/NEWS b/NEWS
index d37a9f17e4..ed7b782317 100644
--- a/NEWS
+++ b/NEWS
@@ -45,9 +45,9 @@ PHP                                                                        NEWS
 
 - Fileinfo:
   . Fixed bug #66307 (Fileinfo crashes with powerpoint files). (Anatol)
-  . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS).
+  . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS) (CVE-2014-0238).
   . Fixed bug #67328 (fileinfo: fileinfo: numerous file_printf calls resulting in
-    performance degradation).
+    performance degradation) (CVE-2014-0237).
 
 - FPM:
   . Fixed bug #66908 (php-fpm reload leaks epoll_create() file descriptor).