Zend Framework 1.12.13 * 567: Cast int and float to string when creating headers

Zend Framework 1.12.12 * 493: PHPUnit not being installed * 511: Add PATCH to the list of allowed methods in Zend_Controller_Request_HttpTestCase * 513: Save time and space when cloning PHPUnit * 515: !IE conditional comments bug * 516: Zend_Locale does not honor parentLocale configuration * 518: Run travis build also on PHP 7 builds * 534: Failing unit test: Zend_Validate_EmailAddressTest::testIdnHostnameInEmaillAddress * 536: Zend_Measure_Number convert some decimal numbers to roman with space char * 537: Extend view renderer controller fix (#440) * 540: Fix PHP 7 BC breaks in Zend_XmlRpc/Amf_Server * 541: Fixed errors in tests on PHP7 * 542: Correctly reset the sub-path when processing routes * 545: Fixed path delimeters being stripped by chain routes affecting later routes * 546: TravisCI: Skip memcache(d) on PHP 5.2 * 547: Session Validators throw 'general' Session Exception during Session start * 550: Notice "Undefined index: browser_version" * 557: doc: Zend Framework Dependencies table unreadable * 559: Fixes a typo in Zend_Validate messages for SK * 561: Zend_Date not expected year * 564: Zend_Application tries to load ZendX_Application_Resource_FrontController during instantiation

Security * ZF2015-04: Zend_Mail and Zend_Http were both susceptible to CRLF Injection Attack vectors (for HTTP, this is often referred to as HTTP Response Splitting). Both components were updated to perform header value validations to ensure no values contain characters not detailed in their corresponding specifications, and will raise exceptions on detection. Each also provides new facilities for both validating and filtering header values prior to injecting them into header classes. If you use either Zend_Mail or Zend_Http, we recommend upgrading immediately.

This update has been submitted for testing by remi.

6 years ago

This update is currently being pushed to the Fedora EPEL 7 testing updates repository.

6 years ago

This update has been pushed to testing

6 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been submitted for stable by remi.

6 years ago

This update is currently being pushed to the Fedora EPEL 7 stable updates repository.

6 years ago

This update has been pushed to stable

6 years ago

Please login to add feedback.

Metadata
Type
security
Karma
0
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
disabled
Dates
submitted
6 years ago
in testing
6 years ago
in stable
6 years ago
BZ#1215712 CVE-2015-3154 php-ZendFramework2: ZF2015-04: Potential header and mail injection vulnerability
0
0
BZ#1223763 CVE-2015-3154 php-ZendFramework: php-ZendFramework2: ZF2015-04: Potential header and mail injection vulnerability [epel-all]
0
0

Automated Test Results