[ci skip] update NEWS

diff --git a/NEWS b/NEWS
index b2682d2bf9aa78e3e3b22f6868143e0212e00266..a2ac9e5c34423779f0f3fe9c30f2c5ad73b674d8 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -56,13 +56,22 @@ PHP                                                                        NEWS
   . Fixed bug #75311 (error: 'zend_hash_key' has no member named 'arKey' in
     apache2handler). (mcarbonneaux)
 
+- Date:
+  . Fixed bug #75055 (Out-Of-Bounds Read in timelib_meridian()). (Derick)
+
 - Intl:
   . Fixed bug #75318 (The parameter of UConverter::getAliases() is not
     optional). (cmb)
 
+- mcrypt:
+  . Fixed bug #72535 (arcfour encryption stream filter crashes php). (Leigh)
+
 - OCI8:
   . Fixed incorrect reference counting. (Dmitry, Tianfang Yang)
 
+- PCRE:
+  . Fixed bug #75207 (applied upstream patch for CVE-2016-1283). (Anatol)
+
 - litespeed:
   . Fixed bug #75248 (Binary directory doesn't get created when building 
     only litespeed SAPI). (petk)