1 files changed, 2 insertions, 0 deletions

diff --git a/NEWS b/NEWS
index 3e5b9a5cd1..a192b92ea4 100644
--- a/NEWS
+++ b/NEWS
@@ -9,6 +9,8 @@ PHP                                                                        NEWS
   . Fixed bug #70153 (\DateInterval incorrectly unserialized). (Maksim Iakunin)
 
 - FPM:
+  . Fixed bug #78599 (env_path_info underflow in fpm_main.c can lead to RCE).
+    (CVE-2019-11043) (Jakub Zelenka)
   . Fixed bug #74083 (master PHP-fpm is stopped on multiple reloads).
     (Maksim Nikulin)