Commit 5ec033c497e for php.net

commit 5ec033c497e3d08c0718d0d16b595a40117faaa5
Author: Remi Collet <remi@php.net>
Date:   Wed Jul 8 09:00:43 2026 +0200

    [ci skip] add CVE ref

diff --git a/NEWS b/NEWS
index 5f615701b4a..cdd6a48a487 100644
--- a/NEWS
+++ b/NEWS
@@ -137,7 +137,7 @@ PHP                                                                        NEWS

 - OpenSSL:
   . Fixed bug GH-22187 (Memory corruption (zend_mm_heap corrupted) in
-    openssl_encrypt with AES-WRAP-PAD). (David Carlier)
+    openssl_encrypt with AES-WRAP-PAD). (CVE-2026-14355) (David Carlier)

 - Phar:
   . Fixed a bypass of the magic ".phar" directory protection in
@@ -311,7 +311,7 @@ PHP                                                                        NEWS

 - Streams:
   . Fixed bug GH-21468 (Segfault in file_get_contents w/ a https URL
-    and a proxy set). (ndossche)
+    and a proxy set). (CVE-2026-12184) (ndossche)

 - XSL:
   . Fixed bug GH-21600 (Segfault on module shutdown). (David Carlier)