[ GLSA 201804-10 ] Zend Framework

[GLSA]

Gentoo Linux Security Advisory

Title: Zend Framework: Multiple vulnerabilities (GLSA 201804-10)
Severity: normal
Exploitable: remote
Date: 2018-04-09
Bug(s): #604182
ID: 201804-10

Synopsis

Multiple vulnerabilities have been found in Zend Framework, the
worst of which could allow attackers to remotely execute arbitrary
commands.


Background

Zend Framework is a high quality and open source framework for
developing Web Applications.


Affected Packages

Package: dev-php/ZendFramework
Vulnerable: <= 1.12.9
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Zend Framework that
have remain unaddressed. Please review the referenced CVE identifiers for
details.


Impact

Remote attackers could execute arbitrary commands or conduct SQL
injection attacks.


Workaround

There is no known workaround at this time.

Resolution

Gentoo has discontinued support for Zend Framework and recommends that
users unmerge the package: