1 files changed, 2 insertions, 0 deletions

diff --git a/NEWS b/NEWS
index ea33c44ab3..d38f3c2cfa 100644
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,8 @@ PHP                                                                        NEWS
 
 - GD
   . Made fontFetch's path parser thread-safe. (Sara)
+  . Fixed bug #67730 (Null byte injection possible with imagexxx functions).
+    (CVE-2014-5120) (Ryan Mauger)
 
 14 Aug 2014, PHP 5.6.0 Release Candidate 4