Mageia alert MGASA-2012-0285 (php-zendframework)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0285:
 php-ZendFramework-1.11.11-1.mga1 (1/core) 
Date:
    	     
 
Sat, 6 Oct 2012 18:01:01 +0200
Message-ID:
    	     
 
<20121006160101.GA26541@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2012-0285
Date: 	October 6th, 2012
Affected releases: 	1


Description:
This security update for php-ZendFramework corrects:

ZF2011-01: Potential XSS in Development Environment Error View Script
ZF2011-02: Potential SQL Injection Vector When Using PDO_MySql


Updated Packages:
php-ZendFramework-1.11.11-1.mga1
php-ZendFramework-demos-1.11.11-1.mga1
php-ZendFramework-tests-1.11.11-1.mga1
php-ZendFramework-extras-1.11.11-1.mga1
php-ZendFramework-Cache-Backend-Apc-1.11.11-1.mga1
php-ZendFramework-Cache-Backend-Memcached-1.11.11-1.mga1
php-ZendFramework-Captcha-1.11.11-1.mga1
php-ZendFramework-Dojo-1.11.11-1.mga1
php-ZendFramework-Feed-1.11.11-1.mga1
php-ZendFramework-Gdata-1.11.11-1.mga1
php-ZendFramework-Pdf-1.11.11-1.mga1
php-ZendFramework-Search-Lucene-1.11.11-1.mga1
php-ZendFramework-Services-1.11.11-1.mga1


References:
http://framework.zend.com/security/advisory/ZF2011-01
http://framework.zend.com/security/advisory/ZF2011-02
https://bugs.mageia.org/show_bug.cgi?id=7083
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...