Bug#806165: jessie-pu: package zendframework/1.12.9+dfsg-2+deb8u5
Control: tags -1 + confirmed
On Tue, 2015-11-24 at 19:12 -0400, David Prévot wrote:
> As agreed with the security team, this update aims to fix a security
> issue in zendframework (request for Wheezy follows) via pu. Please find
> attached the debdiff, as well as the actual patch with some formating
> noise removed.
>
> * Backport security fix from 1.12.17:
> - ZF2015-09: Fixed entropy issue in word CAPTCHA
> http://framework.zend.com/security/advisory/ZF2015-09
Please go ahead.
Regards,
Adam
Reply to: