update NEWS

diff --git a/NEWS b/NEWS
index aaf308804a010e72f2d77ebd704e4aca5358cb42..5bc0a0464b68e1340962208152a66a1df5ec7fe1 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -15,12 +15,16 @@ PHP                                                                        NEWS
   . Fixed bug #67245 (usage of memcpy() with overlapping src and dst in
     zend_exceptions.c). (Bob)
   . Fixed bug #67247 (spl_fixedarray_resize integer overflow). (Stas)
+  . Fixed bug #67250 (iptcparse out-of-bounds read). (Stas)
+  . Fixed bug #67252 (convert_uudecode out-of-bounds read). (Stas)
 
 - Curl:
   . Fixed bug #64247 (CURLOPT_INFILE doesn't allow reset). (Mike)
 
 - Date:
   . Fixed bug #67118 (DateTime constructor crash with invalid data). (Anatol)
+  . Fixed bug #67251 (date_parse_from_format out-of-bounds read). (Stas)
+  . Fixed bug #67253 (timelib_meridian_with_check out-of-bounds read). (Stas)
 
 - DOM:
   . Fixed bug #67081 (DOMDocumentType->internalSubset returns entire DOCTYPE tag,