MGASA-2016-0156
Updated php-ZendFramework packages fix security vulnerability
The php-ZendFramework package has been updated to version 1.12.18 to fix a potential information disclosure and insufficient entropy vulnerability in the word CAPTCHA (ZF2015-09) and several other functions (ZF2016-01).
What each source reports
OSV No score
Updated php-ZendFramework packages fix security vulnerability
The php-ZendFramework package has been updated to version 1.12.18 to fix a potential information disclosure and insufficient entropy vulnerability in the word CAPTCHA (ZF2015-09) and several other functions (ZF2016-01).
- Record
MGASA-2016-0156- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php-ZendFrameworkMageia:5 |
before 1.12.18-1.mga5 | 1.12.18-1.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2016-0156 is a vulnerability with no CVSS score yet in php-ZendFramework, published April 29, 2016. No source lists public exploit code. Fixed in php-ZendFramework 1.12.18-1.mga5.
References
advisories.mageia.org/MGASA-2016-0156.html
bugs.mageia.org/show_bug.cgi?id=18258
framework.zend.com/security/advisory/ZF2015-09
framework.zend.com/security/advisory/ZF2016-01
framework.zend.com/blog/zend-framework-1-12-17-and-2-4-9-released.html
framework.zend.com/blog/zend-framework-1-12-18-released.html