|
|
@@ -7,12 +7,28 @@ Master: [.
|
|
|
+
|
|
|
+- **ZF2015-08**: ZF2014-06 uncovered an issue in the sqlsrv adapter provided by
|
|
|
+ the framework whereby null bytes were not filtered correctly when generating
|
|
|
+ SQL. A reporter discovered the same vulnerability is present in our PDO implementation
|
|
|
+ when used with pdo_dblib, and could potentially be applied to other PDO adapters.
|
|
|
+ This release contains a patch to properly escape null bytes used in SQL queries
|
|
|
+ across all PDO adapters shipped with the framework.
|
|
|
+
|
|
|
See http://framework.zend.com/changelog for full details.
|
|
|
|
|
|
NEW FEATURES
|