Update NEWS

Author: cmb69

NEWS

@@ -1,6 +1,6 @@
 PHP                                                                        NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
-18 Apr 2019, PHP 7.3.5RC1
+02 May 2019, PHP 7.3.5
 
 - Core:
   . Fixed bug #77903 (ArrayIterator stops iterating after offsetSet call).
@@ -10,6 +10,10 @@ PHP                                                                        NEWS
   . Fixed bug #77794 (Incorrect Date header format in built-in server).
     (kelunik)
 
+- EXIF
+  . Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). 
+    (CVE-2019-11036) (Stas)
+
 - Interbase:
   . Fixed bug #72175 (Impossibility of creating multiple connections to
     Interbase with php 7.x). (Nikita)
@@ -25,6 +29,9 @@ PHP                                                                        NEWS
 - LDAP:
   . Fixed bug #77869 (Core dump when using server controls) (mcmic)
 
+- Mail
+  . Fixed bug #77821 (Potential heap corruption in TSendMail()). (cmb)
+
 - mbstring:
   . Implemented FR #72777 (Implement regex stack limits for mbregex functions).
     (Yasuo Ohgaki, Stas)
@@ -86,8 +93,10 @@ PHP                                                                        NEWS
   . Fixed bug #77578 (Crash when php unload). (cmb)
 
 - EXIF:
-  . Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). (Stas)
-  . Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). (Stas)
+  . Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). (CVE-2019-11034)
+    (Stas)
+  . Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). 
+    (CVE-2019-11035) (Stas)
 
 - FPM:
   . Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).