NEWS: Add backport from 8.1.29

Jan-E · remicollet · commit e925cc566a42 · 2024-06-10T09:59:05.000+02:00
diff --git a/NEWS b/NEWS
@@ -3,6 +3,10 @@ PHP                                                                        NEWS
 
 Backported from 8.1.29
 
+- CGI:
+  . Fixed bug GHSA-3qgc-jrrr-25jv (Bypass of CVE-2012-1823, Argument Injection
+    in PHP-CGI). (CVE-2024-4577) (nielsdos)
+
 - Filter:
   . Fixed bug GHSA-w8qr-v226-r27w (Filter bypass in filter_var FILTER_VALIDATE_URL).
     (CVE-2024-5458) (nielsdos)
