Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | zendframework | 1.11.13-1.1+deb7u3 |
| Debian · 8 | zendframework | 1.12.9+dfsg-2+deb8u3 |
Vulnerabilities 1
-
Medium —CVE-2015-5161 Public exploit
ZendXml and Zend Framework contain XXE and XEE Vulnerabilities
The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external e…