FEDORA-EPEL-2015-ad1b660a4d — security update for php-ZendFramework

stable

php-ZendFramework-1.12.16-1.el7

FEDORA-EPEL-2015-ad1b660a4d created by heffer 8 years ago for Fedora EPEL 7

Update to 1.12.16

fixes CVE-2015-5161: http://framework.zend.com/security/advisory/ZF2015-06
fixes CVE-2015-5723: http://framework.zend.com/security/advisory/ZF2015-07
removed services: DeveloperGarden, Technorati

This update has been submitted for testing by heffer.

8 years ago

This update has been pushed to testing.

8 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

8 years ago

This update has been submitted for stable by pbrobinson.

8 years ago

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

php-ZendFramework-1.12.16-1.el7

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

BZ#1253251 CVE-2015-5161 php-ZendFramework: XML external entity injection (XXE) on PHP FPM [fedora-all]

BZ#1253253 CVE-2015-5161 php-ZendFramework: XML external entity injection (XXE) on PHP FPM [epel-6]

BZ#1253255 CVE-2015-5161 php-ZendFramework: XML external entity injection (XXE) on PHP FPM [epel-7]

BZ#1269080 CVE-2015-5723 php-ZendFramework: various flaws [epel-all]

BZ#1269081 CVE-2015-5723 php-ZendFramework: various flaws [fedora-all]

php-ZendFramework-1.12.16-1.el7

Automated Test Results

None