update NEWS

Author: weltling

NEWS

@@ -46,6 +46,8 @@ PHP                                                                        NEWS
   . Fixed bug #74658 (Undefined constants in array properties result in broken
     properties). (Laruence)
   . Fixed misparsing of abstract unix domain socket names. (Sara)
+  . Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in
+    zval_get_type). (Nikita)
 
 - Date:
   . Fixed bug #74639 (implement clone for DatePeriod and DateInterval).