From: Stanislav Malyshev <stas@php.net>
Date: Wed, 13 Apr 2011 17:33:00 +0000 (+0000)
Subject: add CVE
X-Git-Tag: php-5.3.7RC1~181
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=833ec62d7cb7b327dbb4a77dda32b10d76dad396;p=php

add CVE
---

diff --git a/NEWS b/NEWS
index 8510caaf1e..0186c560b6 100644
--- a/NEWS
+++ b/NEWS
@@ -18,6 +18,7 @@ PHP                                                                        NEWS
   . Fixed bug #54454 (substr_compare incorrectly reports equality in some 
     cases). (Pierrick)
   . Fixed bug #54238 (use-after-free in substr_replace()). (Stas)
+    (CVE-2011-1148)
   . Fixed bug #54180 (parse_url() incorrectly parses path when ? in fragment).
     (tomas dot brastavicius at quantum dot lt, Pierrick)
   . Fixed bug #48465 (sys_get_temp_dir() possibly inconsistent when using