Commit f93c48725d1 for php.net

commit f93c48725d19803eb628d0024b90be33446a8e6c
Author: Ilija Tovilo <ilija.tovilo@me.com>
Date:   Tue Jul 28 11:25:11 2026 +0200

    Add NEWS entries

diff --git a/NEWS b/NEWS
index e9e5b76cea6..c19ccfdc58f 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,17 @@ PHP                                                                        NEWS
 - Date:
   . Fixed leak on double DatePeriod::__construct() call. (ilutov)

+- GD:
+  . Upgrade libgd. (CVE-2026-9672) (Pierre Joye)
+
+- PGSQL:
+  . Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via E'...' backslash breakout).
+    (CVE-2026-17543) (ilutov)
+
+- Phar:
+  . Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260)
+    (Jakub Zelenka)
+
 02 Jul 2026, PHP 8.2.32

 - OpenSSL: