add CVE

smalyshev · smalyshev · commit 53f129a44d3c · 2014-12-16T10:16:31.000-08:00
diff --git a/NEWS b/NEWS
@@ -6,7 +6,7 @@ PHP                                                                        NEWS
   . Upgraded crypt_blowfish to version 1.3. (Leigh)
   . Fixed bug #68545 (NULL pointer dereference in unserialize.c). (Anatol)
   . Fixed bug #68594 (Use after free vulnerability in unserialize()).
-    (Stefan Esser)
+    (CVE-2014-8142) (Stefan Esser)
 
 13 Nov 2014 PHP 5.4.35
 
