Merge branch 'PHP-7.3' into PHP-7.4

* PHP-7.3:
  Update NEWS [ci skip]

diff --cc NEWS
index 40e69e88ed8481a1d3c89810608e06f1b9ae4a76,81c5f4eccd4d5d68d40f137043cc3fb403e24222..9c22f96c1dd1a6d14c45e1302ad2ca68c65999a2
--- 1/NEWS
--- 2/NEWS
+++ b/NEWS
@@@ -25,10 -17,17 +25,20 @@@ PH
  - PCRE:
    . Fixed bug #79188 (Memory corruption in preg_replace/preg_replace_callback
      and unicode). (Nikita)
 +  . Fixed bug #79241 (Segmentation fault on preg_match()). (Nikita)
 +  . Fixed bug #79257 (Duplicate named groups (?J) prefer last alternative even
 +    if not matched). (Nikita)
  
+ - Phar:
+   . Fixed bug #79082 (Files added to tar with Phar::buildFromIterator have
+     all-access permissions). (CVE-2020-7063) (stas)
+   . Fixed bug #79171 (heap-buffer-overflow in phar_extract_file).
+     (CVE-     2020-7061) (cmb)
+ 
+ - Session:
+   . Fixed bug #79221 (Null Pointer Dereference in PHP Session Upload Progress).
+     (CVE-2020-7062) (stas)
+ 
  - Standard:
    . Fixed bug #79254 (getenv() w/o arguments not showing changes). (cmb)