update NEWS

Author: smalyshev

NEWS

@@ -45,13 +45,13 @@ PHP                                                                        NEWS
 - Installation
   . Fixed bug #61172 (Add Apache 2.4 support). (Chris Jones)
 
-- mbstring:
-  . MFH mb_ereg_replace_callback() for security enhancements. (Rui)
-
 - Libxml:
-  . Fixed bug #61367 (open_basedir bypass using libxml RSHUTDOWN). 
+  . Fixed bug #61367 (open_basedir bypass using libxml RSHUTDOWN).
     (Tim Starling)
 
+- mbstring:
+  . MFH mb_ereg_replace_callback() for security enhancements. (Rui)
+
 - mysqli
   . Fixed bug #61003 (mysql_stat() require a valid connection). (Johannes).