feature symfony#22 Added ZF2014-04 advisory (paulofreitas)

fabpot · fabpot · commit 023c95824fc9 · 2014-06-25T12:30:36.000+02:00
This PR was merged into the master branch. Discussion ---------- Added ZF2014-04 advisory Vulnerability: Potential SQL injection in the ORDER implementation of Zend_Db_Select (ZF2014-04) Vendor/product: zendframework/zendframework1 CVE: none Affected versions: v1.12.0 up to v1.12.6 Fixed version: v1.12.7 References: http://framework.zend.com/security/advisory/ZF2014-04, zendframework/zf1@da09186 Commits ------- c994342 Added ZF2014-04 advisory
diff --git a/zendframework/zendframework1/ZF2014-04.yaml b/zendframework/zendframework1/ZF2014-04.yaml
@@ -0,0 +1,8 @@
+title:     Potential SQL injection in the ORDER implementation of Zend_Db_Select
+link:      http://framework.zend.com/security/advisory/ZF2014-04
+cve:       ~
+branches:
+    1.12.x:
+        time:     2014-06-11 13:46:00
+        versions: [>=1.12.0,<1.12.7]
+reference: composer://zendframework/zendframework1
