diff --git a/NEWS b/NEWS index fe0b3f261d7..3a2b6be6ea2 100644 --- a/NEWS +++ b/NEWS @@ -63,8 +63,9 @@ PHP NEWS partial CVE-2022-31629 fix). (CVE-2024-2756) (nielsdos) . Fixed bug GHSA-h746-cjrr-wfmr (password_verify can erroneously return true, opening ATO risk). (CVE-2024-3096) (Jakub Zelenka) - Fixed bug GHSA-fjp9-9hwx-59fq (mb_encode_mimeheader runs endlessly for some + . Fixed bug GHSA-fjp9-9hwx-59fq (mb_encode_mimeheader runs endlessly for some inputs). (CVE-2024-2757) (Alex Dowad) + . Fix bug GH-13932 (Attempt to fix mbstring on windows build) (msvc). (David Carlier) 14 Mar 2024, PHP 8.3.4