coderchina
diff --git a/‎NEWS
Lines changed: 18 additions & 1 deletion b/‎NEWS
Lines changed: 18 additions & 1 deletion
@@ -1,6 +1,8 @@
 PHP                                                                        NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
-?? ??? 2014, PHP 5.6.0 Release Candidate 2
+?? ??? 2014, PHP 5.6.0 Release Candidate 3
+
+03 Jul 2014, PHP 5.6.0 Release Candidate 2
 
 - Core:
   . Fixed bug #67368 (Memory leak with immediately dereferenced array in class
@@ -9,12 +11,23 @@ PHP                                                                        NEWS
     (Andreas Ferber)
   . Fixed bug #67091 (make install fails to install libphp5.so on FreeBSD 10.0).
     (Ferenc)
+  . Fixed bug #67498 (phpinfo() Type Confusion Information Leak Vulnerability).
+    (Stefan Esser)
 
 - FPM:
   . Fix bug #67531 (syslog cannot be set in pool configuration). (Remi)
   . Fix bug #67541 (Fix Apache 2.4.10+ SetHandler proxy:fcgi://
     incompatibilities). (David Zuelke)
 
+- Intl:
+  . Fixed bug #67349 (Locale::parseLocale Double Free). (Stas)
+  . Fixed bug #67397 (Buffer overflow in locale_get_display_name and
+    uloc_getDisplayName (libicu 4.8.1)). (Stas)
+
+- pgsql:
+  . Fix bug #67550 (Error in code "form" instead of "from", pgsql.c, line 756),
+    which affected builds against libpq < 7.3. (Adam)
+
 - phpdbg:
   . Fix Bug #67499 (readline feature not enabled when build with libedit). (Remi)
   . Fix issue krakjoe/phpdbg#94 (List behavior is inconsistent). (Bob)
@@ -26,6 +39,10 @@ PHP                                                                        NEWS
   . Fix issue krakjoe/phpdbg#100 (No way to list the current stack/frames)
     (Help entry was missing). (Bob)
 
+- SPL:
+  . Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type
+    Confusion) (CVE-2014-3515). (Stefan Esser)
+
 19 Jun 2014, PHP 5.6.0 Release Candidate 1
 
 - Core: