|
|
@@ -7,28 +7,12 @@ Master: [.
|
|
|
-
|
|
|
-- **ZF2015-08**: ZF2014-06 uncovered an issue in the sqlsrv adapter provided by
|
|
|
- the framework whereby null bytes were not filtered correctly when generating
|
|
|
- SQL. A reporter discovered the same vulnerability is present in our PDO implementation
|
|
|
- when used with pdo_dblib, and could potentially be applied to other PDO adapters.
|
|
|
- This release contains a patch to properly escape null bytes used in SQL queries
|
|
|
- across all PDO adapters shipped with the framework.
|
|
|
-
|
|
|
See http://framework.zend.com/changelog for full details.
|
|
|
|
|
|
NEW FEATURES
|