[PHP-CVS] [php-src] php-8.3.33: Add NEWS entries

Author: Ilija Tovilo (iluuu1994)
Pusher: ericmann
Date: 2026-07-28T11:34:37+02:00

Commit: https://github.com/php/php-src/commit/9e7ffc2b38cbf71748a204ec2dfdf57db7aac36a
Raw diff: https://github.com/php/php-src/commit/9e7ffc2b38cbf71748a204ec2dfdf57db7aac36a.diff

Add NEWS entries

Changed paths:
  M  NEWS


Diff:

diff --git a/NEWS b/NEWS
index 03a3f4f89f7a..875982a3eb9a 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,17 @@ PHP                                                                        NEWS
 - Date:
   . Fixed leak on double DatePeriod::__construct() call. (ilutov)
 
+- GD:
+  . Upgrade libgd. (CVE-2026-9672) (Pierre Joye)
+
+- PGSQL:
+  . Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via E'...' backslash breakout).
+    (CVE-2026-17543) (ilutov)
+
+- Phar:
+  . Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260)
+    (Jakub Zelenka)
+
 02 Jul 2026, PHP 8.3.32
 
 - Streams: