The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade php53-bcmathUpgrade php53-pgsqlUpgrade php53-odbcUpgrade php53-iconvUpgrade php53-ldapUpgrade php53-snmpUpgrade php53-zlibUpgrade php53-sysvshmUpgrade php53-ftpUpgrade php53-shmopUpgrade php53-calendarUpgrade php53-mbstringUpgrade php53-wddxUpgrade php53-dbaUpgrade php53-jsonUpgrade php53-suhosinUpgrade php53-bz2Upgrade php53-pdoUpgrade php53-mysqlUpgrade php53-mcryptUpgrade php53-fastcgiUpgrade php53-pearUpgrade php53-intlUpgrade php53-fileinfoUpgrade php53-gmpUpgrade php53-gdUpgrade php53-exifUpgrade php53-pspellUpgrade php53-xmlwriterUpgrade php53-sysvmsgUpgrade php53-curlUpgrade php53-pcntlUpgrade php53-tokenizerUpgrade apache2-mod_php53Upgrade php53-xmlrpcUpgrade php53-opensslUpgrade php53-zipUpgrade php53-gettextUpgrade php53-xslUpgrade php53-ctypeUpgrade php53-xmlreaderUpgrade php53-domUpgrade php53Upgrade php53-sysvsemUpgrade php53-soap | Jun 21, 2016 | Aug 25, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub