Merge pull request symfony#16 from robertboloc/ZF2014-01

fabpot · fabpot · commit cb20faf34085 · 2014-03-07T11:16:34.000+01:00
Added ZF2014-01 for zendframework/zendframework
diff --git a/zendframework/zend-json/ZF2014-01.yaml b/zendframework/zend-json/ZF2014-01.yaml
@@ -0,0 +1,11 @@
+title:     Potential XXE/XEE attacks using PHP functions: simplexml_load_*, DOMDocument::loadXML, and xml_parse
+link:      http://framework.zend.com/security/advisory/ZF2014-01
+cve: ~
+branches:
+    2.1.x:
+        time:     2014-02-26 16:02:02
+        versions: [>=2.1.0,<2.1.6]
+    2.2.x:
+        time:     2014-02-26 16:02:02
+        versions: [>=2.2.0,<2.2.6]
+reference: composer://zendframework/zend-json
diff --git a/zendframework/zend-xmlrpc/ZF2014-01.yaml b/zendframework/zend-xmlrpc/ZF2014-01.yaml
@@ -0,0 +1,11 @@
+title:     Potential XXE/XEE attacks using PHP functions: simplexml_load_*, DOMDocument::loadXML, and xml_parse
+link:      http://framework.zend.com/security/advisory/ZF2014-01
+cve: ~
+branches:
+    2.1.x:
+        time:     2014-02-26 16:02:02
+        versions: [>=2.1.0,<2.1.6]
+    2.2.x:
+        time:     2014-02-26 16:02:02
+        versions: [>=2.2.0,<2.2.6]
+reference: composer://zendframework/zend-xmlrpc
diff --git a/zendframework/zendframework/ZF2014-01.yaml b/zendframework/zendframework/ZF2014-01.yaml
@@ -0,0 +1,11 @@
+title:     Potential XXE/XEE attacks using PHP functions: simplexml_load_*, DOMDocument::loadXML, and xml_parse
+link:      http://framework.zend.com/security/advisory/ZF2014-01
+cve: ~
+branches:
+    2.1.x:
+        time:     2014-02-26 16:02:02
+        versions: [>=2.1.0,<2.1.6]
+    2.2.x:
+        time:     2014-02-26 16:02:02
+        versions: [>=2.2.0,<2.2.6]
+reference: composer://zendframework/zendframework
diff --git a/zendframework/zendframework1/ZF2014-01.yaml b/zendframework/zendframework1/ZF2014-01.yaml
@@ -0,0 +1,8 @@
+title:     Potential XXE/XEE attacks using PHP functions: simplexml_load_*, DOMDocument::loadXML, and xml_parse
+link:      http://framework.zend.com/security/advisory/ZF2014-01
+cve: ~
+branches:
+    1.12.x:
+        time:     2014-02-26 16:02:02
+        versions: [>=1.12.0,<1.12.4]
+reference: composer://zendframework/zendframework1
