diff --git a/NEWS b/NEWS
index 6d734bc458e..6d05e07496f 100644
--- a/NEWS
+++ b/NEWS
@@ -33,6 +33,9 @@ PHP 4.0                                                                    NEWS
 
 ?? ??? 200?, Version 4.0.6
 - Fixed readfile/passthru losing resources during connection abort (Sascha)
+- Fixed bug in the mcrypt extension that caused segfaults when using a key
+  that is too large for the used algorithm, and a bug that caused
+  mcrypt_generic() to segfault PHP (Derick)
 - Fixed race in writing session files. (Sascha)
 - Fixed a possible crash in the PHP CGI when no input file is
   specified. (Zeev)