update NEWS for 7.2.5

diff --git a/NEWS b/NEWS
index b1a485f0b0e2e4d9789f6c7fa390a88d63132bea..27a35772bd78b8eaddefd8a69a6a6984d48ddedf 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -26,6 +26,10 @@ PHP                                                                        NEWS
 - Date:
   . Fixed bug #76131 (mismatch arginfo for date_create). (carusogabriel)
 
+- Exif:
+  . Fixed bug#76130 (Heap Buffer Overflow (READ: 1786) in exif_iif_add_value).
+    (Stas)
+
 - FPM:
   . Fixed bug #68440 (ERROR: failed to reload: execvp() failed: Argument list
     too long). (Jacob Hipps)
@@ -35,9 +39,16 @@ PHP                                                                        NEWS
   . Fixed bug #52070 (imagedashedline() - dashed line sometimes is not visible).
     (cmb)
 
+- iconv:
+  . Fixed bug #76249 (stream filter convert.iconv leads to infinite loop on
+    invalid sequence). (Stas)
+
 - intl:
   . Fixed bug #76153 (Intl compilation fails with icu4c 61.1). (Anatol)
 
+- ldap:
+  . Fixed bug #76248 (Malicious LDAP-Server Response causes Crash). (Stas)
+
 - mbstring:
   . Fixed bug #75944 (Wrong cp1251 detection). (dmk001)
   . Fixed bug #76113 (mbstring does not build with Oniguruma 6.8.1).
@@ -50,6 +61,9 @@ PHP                                                                        NEWS
 - Opcache:
   . Fixed bug #76094 (Access violation when using opcache). (Laruence)
 
+- Phar:
+  . Fixed bug #76129 (fix for CVE-2018-5712 may not be complete). (Stas)
+
 - phpdbg:
   . Fixed bug #76143 (Memory corruption: arbitrary NUL overwrite). (Laruence)