fix cve number
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  fix cve number