update NEWS

diff --git a/NEWS b/NEWS
index 5e5ae2ff268fba0b9b39833aae0a6b678c0964b8..03031668d1019dfc851782e7287ba1ac5259b9f4 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -79,6 +79,10 @@ PHP                                                                        NEWS
   . Fixed bug #71980 (Decorated/Nested Generator is Uncloseable in Finally).
     (Nikita)
 
+- BCmath:
+  . Fixed bug #72093 (bcpowmod accepts negative scale and corrupts
+    _one_ definition). (Stas)
+
 - Curl:
   . Fixed bug #71831 (CURLOPT_NOPROXY applied as long instead of string).
     (Michael Sierks)
@@ -86,6 +90,12 @@ PHP                                                                        NEWS
 - Date:
   . Fixed bug #71889 (DateInterval::format Segmentation fault). (Thomas Punt)
 
+- EXIF:
+  . Fixed bug #72094 (Out of bounds heap read access in exif header processing). (Stas)
+
+- GD:
+  . Fixed bug #71912 (libgd: signedness vulnerability). (Stas)
+
 - Intl:
   . Fixed bug #71516 (IntlDateFormatter looses locale if pattern is set via
     constructor). (Anatol)
@@ -97,6 +107,8 @@ PHP                                                                        NEWS
     is empty). (Anatol)
   . Fixed bug #70484 (selectordinal doesn't work with named parameters).
     (Anatol)
+  . Fixed bug #72061 (Out-of-bounds reads in zif_grapheme_stripos with negative
+    offset). (Stas)
 
 - ODBC:
   . Fixed bug #63171 (Script hangs after max_execution_time). (Remi)
@@ -154,6 +166,12 @@ PHP                                                                        NEWS
   . Fixed bug #67512 (php_crypt() crashes if crypt_r() does not exist or
     _REENTRANT is not defined). (Nikita)
 
+- XML:
+  . Fixed bug #72099 (xml_parse_into_struct segmentation fault). (Stas)
+
+- Zip:
+  . Fixed bug #71923 (integer overflow in ZipArchive::getFrom*). (Stas)
+
 31 Mar 2016 PHP 7.0.5
 
 - Core: