Commit 8db314629a1 for php.net
commit 8db314629a12bac94ddb198cedc9568b3fa399d7
Author: Daniel Scherzer <daniels@php.net>
Date: Mon Apr 27 19:17:32 2026 -0700
Update NEWS for URI cherry-pick to 8.5.6
diff --git a/NEWS b/NEWS
index 42cbe1c875c..c5edd065734 100644
--- a/NEWS
+++ b/NEWS
@@ -85,6 +85,10 @@ PHP NEWS
. Fixed bug GH-21468 (Segfault in file_get_contents w/ a https URL
and a proxy set). (ndossche)
+- URI:
+ . Fixed CVE-2026-42371 (uriparser before 1.0.1 has numeric truncation in
+ text range comparison). (CVE-2026-42371) (Joshua W. Windle)
+
26 Mar 2026, PHP 8.5.5
- Core: