The fix for CVE-2018-5712 in 5.6.33 was incomplete and got finally fixed
in 5.6.36 together with a new CVE id (CVE-2018-10547).

Update secfixes comment and remove duplicate entry for CVE-2018-5712.

ref #11914
upstream ref: https://bugs.php.net/bug.php?id=76129