Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

php-ZendFramework: local file inclusion

Package(s):

php-ZendFramework

CVE #(s):

Created:

June 16, 2009

Updated:

June 17, 2009

Description:

From the Red Hat bugzilla: Upstream Zend Framework 1.7.5 contains a security fix for a potential Local File Inclusion (LFI) vulnerability in the Zend_View::render() method. This fixed is tagged upstream as "controversial", as it breaks backwards compatibility and existing uses of method.

Alerts:

Fedora

FEDORA-2009-2823

2009-03-18

(Log in to post comments)