From 5b0b760f1f86b7a20afed36fe3287b991e5cefbd Mon Sep 17 00:00:00 2001
From: Stanislav Malyshev <stas@php.net>
Date: Tue, 27 May 2014 12:22:21 -0700
Subject: add CVEs

---
 NEWS | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/NEWS b/NEWS
index ecbfa7660d..c510519af2 100644
--- a/NEWS
+++ b/NEWS
@@ -27,9 +27,10 @@ PHP                                                                        NEWS
 
  - Fileinfo:
    . Fixed bug #66307 (Fileinfo crashes with powerpoint files). (Anatol)
-   . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS). 
+   . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS).
+     (CVE-2014-0238)
    . Fixed bug #67328 (fileinfo: fileinfo: numerous file_printf calls resulting in
-     performance degradation).
+     performance degradation). (CVE-2014-0237)
 
 - FPM:
   . Fixed bug #66908 (php-fpm reload leaks epoll_create() file descriptor). 
-- 
cgit v1.2.1