From 42e8b85d94ba11db13ca90b2dd53c17b2d6938df Mon Sep 17 00:00:00 2001
From: Stanislav Malyshev <stas@php.net>
Date: Mon, 29 Jul 2019 00:55:18 -0700
Subject: [PATCH] Update NEWS

---
 NEWS | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/NEWS b/NEWS
index d9c8771670..f2e22b62b6 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,12 @@ PHP                                                                        NEWS
 - SQLite:
   . Upgraded to SQLite 3.28.0. (cmb)
 
+- EXIF:
+  . Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment).
+  (CVE-2019-11042) (Stas)
+  . Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail).
+  (CVE-2019-11041) (Stas)
+
 30 May 2019, PHP 7.1.30
 
 - EXIF:
-- 
2.40.0