[ci skip] add CVE ref

remicollet · remicollet · commit ee0f2b9e5111 · 2026-07-08T08:57:05.000+02:00
diff --git a/NEWS b/NEWS
@@ -7,7 +7,7 @@ PHP                                                                        NEWS
 
 - OpenSSL:
   . Fixed bug GH-22187 (Memory corruption (zend_mm_heap corrupted) in
-    openssl_encrypt with AES-WRAP-PAD). (David Carlier)
+    openssl_encrypt with AES-WRAP-PAD). (CVE-2026-14355) (David Carlier)
 
 07 May 2026, PHP 8.2.31
 
