1 files changed, 2 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 2639c5a308..7a47f5ec7e 100644
--- a/NEWS
+++ b/NEWS
@@ -8,6 +8,8 @@ PHP                                                                        NEWS
 - Standard:
   . Fixed bug #80457 (stream_get_contents() fails with maxlength=-1 or default).
     (bruno dot premont at restena dot lu)
+  . Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo). 
+    (CVE-2020-7071) (cmb)
 
 26 Nov 2020, PHP 7.3.25