From: Anatol Belski <ab@php.net>
Date: Tue, 2 Jan 2018 06:49:09 +0000 (+0100)
Subject: [ci skip] update NEWS
X-Git-Tag: php-7.0.28~9
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=5d8e298ebf9b18787e3dcc4e4d6d0059f4e7480e;p=php

[ci skip] update NEWS
---

diff --git a/NEWS b/NEWS
index 425af6e6c0..7b5d39c1a1 100644
--- a/NEWS
+++ b/NEWS
@@ -17,6 +17,9 @@ PHP                                                                        NEWS
   . Fixed bug #64938 (libxml_disable_entity_loader setting is shared between
     requests). (Remi)
 
+- GD:
+  . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx). (cmb)
+
 - Opcache:
   . Fixed bug #75579 (Interned strings buffer overflow may cause crash).
     (Dmitry)
@@ -25,6 +28,9 @@ PHP                                                                        NEWS
   . Fixed bug #74183 (preg_last_error not returning error code after error).
     (Andrew Nester)
 
+- Phar:
+  . Fixed bug #74782 (Reflected XSS in .phar 404 page). (Stas)
+
 - Standard:
   . Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP
     segment fault). (Nikita)