update NEWS

diff --git a/NEWS b/NEWS
index 4be12a5547ac877c07aa6cce7e76143fe3d7545e..ede10a8827695d41640e32b4a7e3939ba7608de1 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -7,9 +7,16 @@ PHP                                                                        NEWS
 - Core:
   . Fixed bug #72172 (zend_hex_strtod should not use strlen).
     (bwitz at hotmail dot com )
+  . Fixed bug #72114 (Integer underflow / arbitrary null write in
+    fread/gzread). (Stas)
+  . Fixed bug #72135 (Integer Overflow in php_html_entities). (Stas)
+
+- GD:
+  . Fixed bug #72227 (imagescale out-of-bounds read). (Stas)
 
 - Intl
   . Fixed bug #64524 (Add intl.use_exceptions to php.ini-*). (Anatol)
+  . Fixed bug #72241 (get_icu_value_internal out-of-bounds read). (Stas)
 
 - Postgres:
   . Fixed bug #72151 (mysqli_fetch_object changed behaviour). (Anatol)