Fix bug #68594 - Use after free vulnerability in unserialize()
Updated NEWS