diff --git a/NEWS b/NEWS
index ad3f475a0ef..2de677bfa21 100644
--- a/NEWS
+++ b/NEWS
@@ -47,6 +47,10 @@ PHP                                                                        NEWS
   . Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
     (Jakub Zelenka, loveharmful)
 
+- mysqlnd:
+  . Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
+    (c dot fol at ambionics dot io)
+
 - OPcache:
   . Fixed bug GH-8461 (tracing JIT crash after function/method change).
     (Arnaud, Dmitry)
@@ -58,6 +62,10 @@ PHP                                                                        NEWS
 - Pcntl:
   . Fixed Haiku build. (David Carlier)
 
+- pgsql
+  . Fixed bug #81720: Uninitialized array in pg_query_params().
+    (CVE-2022-31625) (cmb)
+
 - Soap:
   . Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
     (robertnisipeanu)