CVE-2014-8142 is not mentioned in 5.6.4 changelog
| From: | Yasuo Ohgaki | Date: | Wed, 24 Dec 2014 04:58:53 +0000 |
| Subject: | CVE-2014-8142 is not mentioned in 5.6.4 changelog | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-79906@lists.php.net to get a copy of this message | ||
Hi,
http://php.net/ChangeLog-5.php#5.4.36
does not mention CVE-2014-8142.
Fixed bug #68594 (Use after free vulnerability in unserialize()).
should be
Fixed bug #68594 (Use after free vulnerability in
unserialize())(CVE-2014-8142).
like 5.5/5.4's changelog.
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net