[ci skip] Add missing CVE to NEWS

cmb69 · cmb69 · commit 96a5b4e43a67 · 2021-09-21T13:02:42.000+02:00
diff --git a/NEWS b/NEWS
@@ -4,7 +4,7 @@ PHP                                                                        NEWS
 
 - Zip:
   . Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
-    (cmb)
+    (CVE-2021-21706) (cmb)
 
 26 Aug 2021, PHP 7.3.30
 
