Update NEWS

diff --git a/NEWS b/NEWS
index f8f7b8604ee7e822f49c71bb1df63a619ce4bd39..226e76f8f878fbe407e092ad0bc482a9ddb267de 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -2,6 +2,13 @@ PHP                                                                        NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 ?? ??? ????, PHP 7.2.33
 
+- Core:
+  . Fixed bug #79877 (getimagesize function silently truncates after a null 
+    byte) (cmb)
+
+- Phar:
+  . Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile
+    function). (CVE-2020-7068) (cmb)
 
 09 Jul 2020, PHP 7.2.32