"CVE-2018-5712" appears many times in PHP changelogs, which makes me confused...