The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade php53-curlUpgrade php53-xmlrpcUpgrade php53-gmpUpgrade php53-gettextUpgrade php53Upgrade php53-ctypeUpgrade php53-exifUpgrade php53-xslUpgrade php53-tokenizerUpgrade apache2-mod_php53Upgrade php53-pcntlUpgrade php53-fileinfoUpgrade php53-soapUpgrade php53-intlUpgrade php53-opensslUpgrade php53-xmlreaderUpgrade php53-gdUpgrade php53-pspellUpgrade php53-xmlwriterUpgrade php53-zipUpgrade php53-domUpgrade php53-sysvmsgUpgrade php53-sysvsemUpgrade php53-bcmathUpgrade php53-fastcgiUpgrade php53-snmpUpgrade php53-dbaUpgrade php53-odbcUpgrade php53-ldapUpgrade php53-wddxUpgrade php53-pgsqlUpgrade php53-calendarUpgrade php53-mysqlUpgrade php53-shmopUpgrade php53-pdoUpgrade php53-mcryptUpgrade php53-suhosinUpgrade php53-zlibUpgrade php53-ftpUpgrade php53-sysvshmUpgrade php53-mbstringUpgrade php53-jsonUpgrade php53-bz2Upgrade php53-pearUpgrade php53-iconv | Jun 21, 2016 | Aug 25, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub