From 38bd30547391f8afb07a790ee0922170aabda2be Mon Sep 17 00:00:00 2001
From: Pierrick Charron <pierrick@php.net>
Date: Mon, 13 Feb 2023 11:07:53 -0500
Subject: [PATCH] Update NEWS

---
 NEWS | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/NEWS b/NEWS
index 0d736780c37..ecd0a8e3785 100644
--- a/NEWS
+++ b/NEWS
@@ -2,10 +2,15 @@ PHP                                                                        NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 ?? ??? ????, PHP 8.2.3
 
+- Core:
+  . Fixed bug #81744 (Password_verify() always return true with some hash).
+    (CVE-2023-0567) (Tim Düsterhus)
+  . Fixed bug #81746 (1-byte array overrun in common path resolve code).
+    (CVE-2023-0568) (Niels Dossche)
+
 - FPM:
   . Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart
-    request body). (Jakub Zelenka)
-
+    request body). (CVE-2023-0662) (Jakub Zelenka)
 
 02 Feb 2023, PHP 8.2.2