From: Anatol Belski <ab@php.net>
Date: Tue, 5 Jan 2016 12:06:00 +0000 (+0100)
Subject: add NEWS entries for 7.0.2
X-Git-Tag: php-7.0.3RC1~72^2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=af960fcba4b4b5845294d2679366da5eac601cf8;p=php

add NEWS entries for 7.0.2
---

diff --git a/NEWS b/NEWS
index cc43981a50..2eefcfb564 100644
--- a/NEWS
+++ b/NEWS
@@ -69,10 +69,17 @@ PHP                                                                        NEWS
 - Filter:
   . Fixed bug #71063 (filter_input(INPUT_ENV, ..) does not work). (Reeze Xia)
 
+- FPM:
+  . Fixed bug #70755 (fpm_log.c memory leak and buffer overflow). (Stas)
+
 - FTP:
   . Implemented FR #55651 (Option to ignore the returned FTP PASV address).
     (abrender at elitehosts dot com)
 
+- GD:
+  . Fixed bug #70976 (Memory Read via gdImageRotateInterpolated Array Index
+    Out of Bounds). (emmanuel dot law at gmail dot com).
+
 - Mbstring:
   . Fixed bug #71066 (mb_send_mail: Program terminated with signal SIGSEGV,
     Segmentation fault). (Laruence)
@@ -97,6 +104,16 @@ PHP                                                                        NEWS
   . Fixed bug #71153 (Performance Degradation in ArrayIterator with large
     arrays). (Nikita)
 
+- WDDX:
+  . Fixed bug #70661 (Use After Free Vulnerability in WDDX Packet Deserialization).
+    (taoguangchen at icloud dot com)
+  . Fixed bug #70741 (Session WDDX Packet Deserialization Type Confusion
+    Vulnerability). (taoguangchen at icloud dot com)
+
+- XMLRPC
+  . Fixed bug #70728 (Type Confusion Vulnerability in PHP_to_XMLRPC_worker).
+    (Julien)
+
 17 Dec 2015, PHP 7.0.1
 
 - Core: