diff --git a/NEWS b/NEWS
index 20c1a55cd44..5674921d5d5 100644
--- a/NEWS
+++ b/NEWS
@@ -28,6 +28,9 @@
   . Fixed bug #68750 (PDOMysql with mysqlnd does not allow the usage of
     named pipes). (steffenb198@aol.com)
 
+- Phar:
+  . Fixed bug #68901 (use after free). (bugreports at internot dot info)
+
 - Sqlite3:
   . Fixed bug #68260 (SQLite3Result::fetchArray declares wrong 
     required_num_args). (Julien)