diff --git a/NEWS b/NEWS
index 50d72d33083..ebf3dcebe74 100644
--- a/NEWS
+++ b/NEWS
@@ -94,7 +94,7 @@ PHP                                                                        NEWS
   . Fixed bug #72094 (Out of bounds heap read access in exif header processing). (Stas)
 
 - GD:
-  . Fixed bug #71912 (libgd: signedness vulnerability). (Stas)
+  . Fixed bug #71912 (libgd: signedness vulnerability). (CVE-2016-3074) (Stas)
 
 - Intl:
   . Fixed bug #71516 (IntlDateFormatter looses locale if pattern is set via