Merge branch 'PHP-7.2' into PHP-7.3

* PHP-7.2:
  Update NEWS wrt. sec fixes

diff --cc NEWS
index 4b989e609bffe2169e77cb0d3d633948b2a54119,cc605a6c8ee862da381cfe720360bef163fd799a..63559922bc4e452f46b7081cf8fb3c158da6279e
--- 1/NEWS
--- 2/NEWS
+++ b/NEWS
@@@ -38,6 -27,14 +38,10 @@@ PH
    . Fixed bug #77794 (Incorrect Date header format in built-in server).
      (kelunik)
  
 -- Date:
 -  . Fixed bug #77909 (DatePeriod::__construct() with invalid recurrence count
 -    value). (Ignace Nyamagana Butera)
 -
+ - EXIF
+   . Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). 
+     (CVE-2019-11036) (Stas)
+ 
  - Interbase:
    . Fixed bug #72175 (Impossibility of creating multiple connections to
      Interbase with php 7.x). (Nikita)
@@@ -46,17 -43,13 +50,20 @@@
    . Fixed bug #77895 (IntlDateFormatter::create fails in strict mode if $locale
      = null). (Nikita)
  
 -- litespeed:
 -  . LiteSpeed SAPI 7.3.1, better process management, new API function
 -    litespeed_finish_request(). (George Wang)
 +- LDAP:
 +  . Fixed bug #77869 (Core dump when using server controls) (mcmic)
  
+ - Mail
+   . Fixed bug #77821 (Potential heap corruption in TSendMail()). (cmb)
+ 
 +- mbstring:
 +  . Implemented FR #72777 (Implement regex stack limits for mbregex functions).
 +    (Yasuo Ohgaki, Stas)
 +
 +- MySQLi:
 +  . Fixed bug #77773 (Unbuffered queries leak memory - MySQLi / mysqlnd).
 +    (Nikita)
 +
  - PCRE:
    . Fixed bug #77827 (preg_match does not ignore \r in regex flags). (requinix,
      cmb)
@@@ -109,9 -97,17 +116,11 @@@
  - COM:
    . Fixed bug #77578 (Crash when php unload). (cmb)
  
 -- Date:
 -  . Fixed bug #50020 (DateInterval:createDateFromString() silently fails).
 -    (Derick)
 -  . Fixed bug #75113 (Added DatePeriod::getRecurrences() method). (Ignace
 -    Nyamagana Butera)
 -
  - EXIF:
-   . Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). (Stas)
-   . Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). (Stas)
+   . Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). (CVE-2019-11034)
+     (Stas)
+   . Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). 
+     (CVE-2019-11035) (Stas)
  
  - FPM:
    . Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).