[ci skip] add CVE ref

remicollet · remicollet · commit 427089cd9423 · 2026-07-08T08:58:36.000+02:00
diff --git a/NEWS b/NEWS
@@ -11,7 +11,7 @@ PHP                                                                        NEWS
 
 - OpenSSL:
   . Fixed bug GH-22187 (Memory corruption (zend_mm_heap corrupted) in
-    openssl_encrypt with AES-WRAP-PAD). (David Carlier)
+    openssl_encrypt with AES-WRAP-PAD). (CVE-2026-14355) (David Carlier)
 
 07 May 2026, PHP 8.3.31
 
