added CVEs in NEWS
Check for zero-length keys in spl_array_skip_protected and don't skip them.

Fixes bug #67360 (Missing element after ArrayObject::getIterator).
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  Check for zero-length keys in spl_array_skip_protected and don't skip them.
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  Check for zero-length keys in spl_array_skip_protected and don't skip them.
  added CVEs in NEWS