add NEWS entries

diff --git a/NEWS b/NEWS
index c512da958621b5a98f0b742a7d5cad4385fd661c..f7a1246567962b90ec21b62eb6b306904faf24ed 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -40,6 +40,12 @@ PHP                                                                        NEWS
   . Fixed bug #77621 (Already defined constants are not properly reported).
     (cmb)
 
+- EXIF:
+  . Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF). (Stas)
+  . Fixed bug #77540 (Invalid Read on exif_process_SOFn). (Stas)
+  . Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE). (Stas)
+  . Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE). (Stas)
+
 - PDO_OCI:
   . Support Oracle Database tracing attributes ACTION, MODULE,
     CLIENT_INFO, and CLIENT_IDENTIFIER. (Cameron Porter)
@@ -47,6 +53,7 @@ PHP                                                                        NEWS
 - SPL:
   . Fixed bug #51068 (DirectoryIterator glob:// don't support current path
     relative queries). (Ahmed Abdou)
+  . Fixed bug #77431 (openFile() silently truncates after a null byte). (cmb)
 
 - Standard:
   . Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions).
@@ -57,6 +64,10 @@ PHP                                                                        NEWS
     mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE
     attribute for pdo_mysql. (Darek Slusarczyk)
 
+- PHAR:
+  . Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename).
+    (bishop)
+
 07 Feb 2019, PHP 7.2.15
 
 - Core: