From: Stanislav Malyshev <stas@php.net>
Date: Mon, 29 Jul 2019 07:55:18 +0000 (-0700)
Subject: Update NEWS
X-Git-Tag: php-7.1.31~2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=42e8b85d94ba11db13ca90b2dd53c17b2d6938df;p=php

Update NEWS
---

diff --git a/NEWS b/NEWS
index d9c8771670..f2e22b62b6 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,12 @@ PHP                                                                        NEWS
 - SQLite:
   . Upgraded to SQLite 3.28.0. (cmb)
 
+- EXIF:
+  . Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment).
+  (CVE-2019-11042) (Stas)
+  . Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail).
+  (CVE-2019-11041) (Stas)
+
 30 May 2019, PHP 7.1.30
 
 - EXIF: