# CVE-2014-8142 is not mentioned in 5.6.4 changelog

- Thread: https://externals.io/message/79906
- Original archive: https://news-web.php.net/php.internals/79906
- Started by Yasuo Ohgaki on 2014-12-24T04:58:53+00:00
- Messages: 2
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #79906 — Yasuo Ohgaki — 2014-12-24T04:58:53+00:00

URL: https://externals.io/message/79906#79906

Hi,

http://php.net/ChangeLog-5.php#5.4.36
does not mention CVE-2014-8142.

Fixed bug #68594 (Use after free vulnerability in `unserialize()`).
should be
Fixed bug #68594 (Use after free vulnerability in
 `unserialize()`)(CVE-2014-8142).
like 5.5/5.4's changelog.

Regards,

--
Yasuo Ohgaki
yohgaki@ohgaki.net

---

## #79941 — Lior Kaplan — 2014-12-25T19:12:17+00:00

URL: https://externals.io/message/79906#79941 · In reply to: #79906

Fixed.

http://git.php.net/?p=web/php.git;a=commitdiff;h=52cb11fca4c343f0529ceecfdc5372b49b966435

(should be refreshed on the website soon enough)



> Hi,
>
> http://php.net/ChangeLog-5.php#5.4.36
> does not mention CVE-2014-8142.
>
> Fixed bug #68594 (Use after free vulnerability in `unserialize()`).
> should be
> Fixed bug #68594 (Use after free vulnerability in
> `unserialize()`)(CVE-2014-8142).
> like 5.5/5.4's changelog.
>
> Regards,
>
> --
> Yasuo Ohgaki
> yohgaki@ohgaki.net