Re: CVE-2014-8142 is not mentioned in 5.6.4 changelog
| From: | Lior Kaplan | Date: | Thu, 25 Dec 2014 19:12:17 +0000 |
| Subject: | Re: CVE-2014-8142 is not mentioned in 5.6.4 changelog | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-79941@lists.php.net to get a copy of this message | ||
Fixed.
http://git.php.net/?p=web/php.git;a=commitdiff;h=52cb11fca4c343f0529ceecfdc5372b49b966435
(should be refreshed on the website soon enough)
On Wed, Dec 24, 2014 at 6:58 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> Hi,
>
> http://php.net/ChangeLog-5.php#5.4.36
> does not mention CVE-2014-8142.
>
> Fixed bug #68594 (Use after free vulnerability in unserialize()).
> should be
> Fixed bug #68594 (Use after free vulnerability in
> unserialize())(CVE-2014-8142).
> like 5.5/5.4's changelog.
>
> Regards,
>
> --
> Yasuo Ohgaki
> yohgaki@ohgaki.net
>