8000 Add ZF2014-05 and ZF2014-06 for ZF2 · jderusse/symfony@17efd42 · GitHub
[go: up one dir, main page]
Skip to content

Commit 17efd42

Browse files
minkbearfabpot
minkbear
authored and
fabpot
committed
Add ZF2014-05 and ZF2014-06 for ZF2
1 parent 2786277 commit 17efd42

File tree

2 files changed

+34
-0
lines changed

2 files changed

+34
-0
lines changed

‎zendframework/zendframework/ZF2014-05.yaml‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
title: Anonymous authentication in ldap_bind() function of PHP, using null byte
2+
link: http://framework.zend.com/security/advisory/ZF2014-05
3+
cve: ~
4+
branches:
5+
2.0.x:
6+
time: 2014-09-16 22:00:00
7+
versions: [>=2.0.0,<2.0.99]
8+
2.1.x:
9+
time: 2014-09-16 22:00:00
10+
versions: [>=2.1.0,<2.1.99]
11+
2.2.x:
12+
time: 2014-09-16 22:00:00
13+
versions: [>=2.2.0,<2.2.8]
14+
2.3.x:
15+
time: 2014-09-16 22:00:00
16+
versions: [>=2.3.0,<2.3.3]
17+
reference: composer://zendframework/zendframework

‎zendframework/zendframework/ZF2014-06.yaml‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
title: SQL injection vector when manually quoting values for sqlsrv extension, using null byte
2+
link: http://framework.zend.com/security/advisory/ZF2014-06
3+
cve: ~
4+
branches:
5+
2.0.x:
6+
time: 2014-09-16 22:00:00
7+
versions: [>=2.0.0,<2.0.99]
8+
2.1.x:
9+
time: 2014-09-16 22:00:00
10+
versions: [>=2.1.0,<2.1.99]
11+
2.2.x:
12+
time: 2014-09-16 22:00:00
13+
versions: [>=2.2.0,<2.2.8]
14+
2.3.x:
15+
time: 2014-09-16 22:00:00
16+
versions: [>=2.3.0,<2.3.3]
17+
reference: composer://zendframework/zendframework

0 commit comments

Comments
 (0)
0