add missing NEWS entry

diff --git a/NEWS b/NEWS
index 121b67197fcf4df4519eb2a1a29538ba3d1980d0..581f3a62b880ec6da3cc0a30a023a1653183741a 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -10,6 +10,9 @@ PHP                                                                        NEWS
   . Fixed bug #68594 (Use after free vulnerability in unserialize()).
     (CVE-2014-8142) (Stefan Esser)
 
+- Mcrypt:
+  . Fixed possible read after end of buffer and use after free. (Dmitry)
+
 13 Nov 2014 PHP 5.4.35
 
 - Core: