diff --git a/NEWS b/NEWS
index 0152f578422..bd411955dcd 100644
--- a/NEWS
+++ b/NEWS
@@ -48,6 +48,10 @@ PHP                                                                        NEWS
 - PCRE:
   . Fixed bug #81424 (PCRE2 10.35 JIT performance regression). (cmb)
 
+- XML:
+  . Fixed bug #79971 (special character is breaking the path in xml function).
+    (CVE-2021-21707) (cmb)
+
 - XMLReader:
   . Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid
     property). (Nikita)