[skip ci] NEWS

Author: TimWolla

NEWS

@@ -107,6 +107,12 @@ PHP                                                                        NEWS
   . Fixed bug GH-20370 (User stream filters could violate typed property
     constraints). (alexandre-daubois)
 
+- URI:
+  . Fixed bug GH-20366 (ext/uri incorrectly throws ValueError when encountering
+    null byte). (kocsismate)
+  . Fixed CVE-2025-67899 (uriparser through 0.9.9 allows unbounded recursion
+    and stack consumption). (Sebastian Pipping)
+
 - XML:
   . Fixed bug GH-20439 (xml_set_default_handler() does not properly handle
     special characters in attributes when passing data to callback). (ndossche)
@@ -119,10 +125,6 @@ PHP                                                                        NEWS
   . Fix assertion failures resulting in crashes with stream filter
     object parameters. (ndossche)
 
-- URI:
-  . Fixed bug GH-20366 (ext/uri incorrectly throws ValueError when encountering
-    null byte). (kocsismate)
-
 20 Nov 2025, PHP 8.5.0
 
 - Core: