diff --git a/NEWS b/NEWS
index d40815a..869808d 100644
--- a/NEWS
+++ b/NEWS
@@ -71,3 +71,5 @@ v1.2.3:
 * fix an important regression introduced in pull request #55 regarding I/O in main.c
 * slightly enlargen the SAIS buffer beyond the documented recommended size to avoid some memory errors in libsais
 * properly handle a scenario where the individual block original size is larger than the block size declared in the file header
+* further security fixes: strict check for size_src overflow of badly bounded b1, store mode: checking for truncation
+  mRLE: decoding bounds, bz3_bound in bz3_decompress