FEDORA-EPEL-2014-1011 — security update for php-ZendFramework

stable

php-ZendFramework-1.12.5-1.el6

FEDORA-EPEL-2014-1011 created by heffer 12 years ago for Fedora EPEL 6

update to 1.12.5 fixes http://framework.zend.com/security/advisory/ZF2014-01 fixes http://framework.zend.com/security/advisory/ZF2014-02 removed: InfoCards, Services/Nirvanix

Remove direct dependency on PHP. Fixes BZ#1045904

This update has been submitted for testing by heffer.

12 years ago

This update is currently being pushed to the Fedora EPEL 6 testing updates repository.

12 years ago

This update has been pushed to testing

12 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

12 years ago

This update has been submitted for stable by heffer.

12 years ago

This update is currently being pushed to the Fedora EPEL 6 stable updates repository.

12 years ago

This update has been pushed to stable

12 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

12 years ago

in testing

12 years ago

in stable

12 years ago

Builds

php-ZendFramework-1.12.5-1.el6

BZ#1045904 php-ZendFramework requires httpd

BZ#1081287 CVE-2014-2681 CVE-2014-2682 CVE-2014-2683 php-ZendFramework: XML eXternal Entity (XXE) and XML Entity Expansion (XEE) flaws fixed in 1.12.4, 2.1.6, and 2.2.6 (ZF2014-01)

BZ#1081288 CVE-2014-2684 CVE-2014-2685 php-ZendFramework: OpenID identity provider could be used to spoof other identity providers (ZF2014-02)

BZ#1081292 php-ZendFramework: XML eXternal Entity (XXE) and XML Entity Expansion (XEE) flaws fixed in 1.12.4, 2.1.6, and 2.2.6 (ZF2014-01) [epel-6]

BZ#1081295 php-ZendFramework: OpenID identity provider could be used to spoof other identity providers (ZF2014-02) [epel-6]

php-ZendFramework-1.12.5-1.el6

Automated Test Results

None