2 files changed, 8 insertions, 0 deletions

diff --git a/NEWS b/NEWS
index 207338cf61..ee10147817 100644
--- a/NEWS
+++ b/NEWS
@@ -10,6 +10,10 @@ PHP                                                                        NEWS
   . Fixed bug #72175 (Impossibility of creating multiple connections to
     Interbase with php 7.x). (Nikita)
 
+- mbstring:
+  . Implemented FR #72777 (Implement regex stack limits for mbregex functions). 
+    (Yasuo Ohgaki, Stas)
+
 - MySQLi:
   . Fixed bug #77773 (Unbuffered queries leak memory - MySQLi / mysqlnd).
     (Nikita)
diff --git a/UPGRADING b/UPGRADING
index 2220efb014..0e44c493ae 100644
--- a/UPGRADING
+++ b/UPGRADING
@@ -727,6 +727,10 @@ LDAP:
   . New INI to set syslog ident string which is prepended to every message. It
     is used only when error_log is set syslog.
 
+- mbstring.regex_stack_limit
+  . New INI directive (since 7.3.6) limiting stack depth of mbstring/oniguruma
+  regular expressions. 
+
 ========================================
 12. Windows Support
 ========================================