From: Ferenc Kovacs <tyrael@php.net>
Date: Wed, 17 Dec 2014 00:59:38 +0000 (+0100)
Subject: add NEWS entry for #68594
X-Git-Tag: PRE_NATIVE_TLS_MERGE~2^2~3
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=c6a7d1eaed6c0d6bc83c8147018e28e2f28ba4a5;p=php

add NEWS entry for #68594
---

diff --git a/NEWS b/NEWS
index 64ab8e2af4..ce88105444 100644
--- a/NEWS
+++ b/NEWS
@@ -80,6 +80,8 @@ PHP                                                                        NEWS
   . Fixed bug #68545 (NULL pointer dereference in unserialize.c). (Anatol)
   . Fixed bug #68446 (Array constant not accepted for array parameter default).
     (Bob, Dmitry)
+  . Fixed bug #68594 (Use after free vulnerability in unserialize()).
+    (CVE-2014-8142) (Stefan Esser)
 
 - Date:
   . Fixed day_of_week function as it could sometimes return negative values