Add missing NEWS entry, update UPGRADING

This was done back in January, but never noted in the NEWS file.
References:

https://github.com/php/php-src/pull/2312
https://github.com/php/php-src/pull/2321

diff --git a/NEWS b/NEWS
index f5664f5a7214e2ddd8952eff5cc8e094f1d71b6b..275e3b8650b950c36c84747a65b23930ccdaf294 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -235,6 +235,8 @@ PHP                                                                        NEWS
   . Fixed bug #73961 (environmental build dependency in hash sha3 source).
     (krakjoe)
   . Changed HashContext from resource to object. (Rouven Weßling, Sara)
+  . Disallowed usage of non-cryptographic hash functions with HMAC and PBKDF2.
+    (Andrey Andreev, Nikita)
 
 - intl:
   . Fixed bug #74433 (wrong reflection for Normalizer methods). (villfa)

diff --git a/UPGRADING b/UPGRADING
index 9813574a18ecd3754009658f81b39339917aa77c..56a07bba289d77c41393d54b883d60f4ac3247d7 100644 (file)
--- a/UPGRADING
+++ b/UPGRADING
@@ -49,8 +49,8 @@ PHP 7.2 UPGRADE NOTES
     example `bcmod('4', '3.5')` now returns '0.5' instead of '1'.
 
 - Hash:
-  . The hash_hmac(), hash_hmac_file() and hash_pbkdf2() functions no longer
-    accept non-cryptographic hashes.
+  . The hash_hmac(), hash_hmac_file(), hash_pbkdf2() and hash_init() (with
+    HASH_HMAC) functions no longer accept non-cryptographic hashes.
 
 - JSON
   . The json_decode() option JSON_OBJECT_AS_ARRAY is used if the second