update NEWS

diff --git a/NEWS b/NEWS
index e6be533904194d5e6f86018d802dcc2c4be7becd..eb0f3ae9107c4a2ccc48b58c7b760f108709b0ef 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -4,20 +4,22 @@ PHP                                                                        NEWS
 
 - Core:
   . Fixed bug (Low probability segfault in zend_arena). (Laruence)
-  . Fixed bug #71485 (Return typehint on internal func causes Fatal error
-    when it throws exception). (Laruence)
-  . Fixed bug #71474 (Crash because of VM stack corruption on Magento2).
-    (Dmitry)
-  . Fixed bug #71450 (An integer overflow bug in php_str_to_str_ex()). (Stas)
-  . Fixed bug #71449 (An integer overflow bug in php_implode()). (Stas)
-  . Fixed bug #71443 (Segfault using built-in webserver with intl using
-    symfony). (Laruence)
-  . Fixed bug #71442 (forward_static_call crash). (Laruence)
   . Fixed bug #71441 (Typehinted Generator with return in try/finally crashes).
     (Bob)
+  . Fixed bug #71442 (forward_static_call crash). (Laruence)
+  . Fixed bug #71443 (Segfault using built-in webserver with intl using
+    symfony). (Laruence)
+  . Fixed bug #71449 (An integer overflow bug in php_implode()). (Stas)
+  . Fixed bug #71450 (An integer overflow bug in php_str_to_str_ex()). (Stas)
+  . Fixed bug #71474 (Crash because of VM stack corruption on Magento2).
+    (Dmitry)
+  . Fixed bug #71485 (Return typehint on internal func causes Fatal error
+    when it throws exception). (Laruence)
   . Fixed bug #71529 (Variable references on array elements don't work when
     using count). (Nikita)
   . Fixed bug #71601 (finally block not executed after yield from). (Bob)
+  . Fixed bug #71637 (Multiple Heap Overflow due to integer overflows in 
+    xml/filter_url/addcslashes). (Stas)
 
 - CLI server:
   . Fixed bug #71559 (Built-in HTTP server, we can download file in web by bug).
@@ -51,6 +53,10 @@ PHP                                                                        NEWS
   . Fixed inherited functions from unspecified files being included in
     phpdbg_get_executable(). (Bob)
 
+- SOAP:
+  . Fixed bug #71610 (Type Confusion Vulnerability - SOAP /
+    make_http_soap_request()). (Stas)
+
 - Standard:
   . Fixed bug #71603 (compact() maintains references in php7). (Laruence)
   . Fixed bug #70720 (strip_tags improper php code parsing). (Julien)