From: Stanislav Malyshev <stas@php.net>
Date: Tue, 17 Dec 2019 07:45:11 +0000 (-0800)
Subject: [ci skip] Update NEWS
X-Git-Tag: php-7.3.14RC1~25
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=0e413241ec08aa3c13d55c802d9b78feccaef3ef;p=php

[ci skip] Update NEWS
---

diff --git a/NEWS b/NEWS
index 4c32080d3b..db9d5fa8cf 100644
--- a/NEWS
+++ b/NEWS
@@ -2,6 +2,10 @@ PHP                                                                        NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 ?? ??? ????, PHP 7.3.14
 
+- Core:
+  . Fixed bug #78943 (mail() may release string with refcount==1 twice).
+    (CVE-2019-11049). (cmb)
+
 - CURL:
   . Implemented FR #77711 (CURLFile should support UNICODE filenames). (cmb)