1 files changed, 2 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index e3c0c8e112..f7418f769e 100644
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,8 @@ PHP                                                                        NEWS
 07 Jan 2021, PHP 7.3.26
 
 - Standard:
+  . Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo). 
+    (CVE-2020-7071) (cmb)
   . Fixed bug #80457 (stream_get_contents() fails with maxlength=-1 or default).
     (bruno dot premont at restena dot lu)