1 files changed, 2 insertions, 0 deletions

diff --git a/NEWS b/NEWS
index 602f92264d..1d3e771eb7 100644
--- a/NEWS
+++ b/NEWS
@@ -34,6 +34,8 @@ PHP                                                                        NEWS
 - Phar:
   . Fixed bug #79082 (Files added to tar with Phar::buildFromIterator have
     all-access permissions). (CVE-2020-7063) (stas)
+  . Fixed bug #79171 (heap-buffer-overflow in phar_extract_file).
+    (CVE-	2020-7061) (cmb)
   . Fixed bug #76584 (PharFileInfo::decompress not working). (cmb)
 
 - Reflection: