Skip to content
This repository was archived by the owner on Oct 2, 2019. It is now read-only.

Commit 737ef15

Browse files
committed
1.12.20 readiness
2 parents 73cb94e + 880d6d0 commit 737ef15

File tree

2 files changed

+13
-3
lines changed

2 files changed

+13
-3
lines changed

README.md

Lines changed: 12 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,22 @@ Master: [![Build Status](https://api.travis-ci.org/zendframework/zf1.png?branch=
1818
RELEASE INFORMATION
1919
===================
2020

21-
Zend Framework 1.12.20-dev Release.
22-
Released on MMM DD, YYYY.
21+
Zend Framework 1.12.20 Release.
22+
Released on September 08, 2016.
2323

2424
IMPORTANT FIXES FOR 1.12.20
2525
---------------------------
2626

27+
**This release contains security updates:**
28+
29+
- **ZF2016-03:** The implementation of `ORDER BY` and `GROUP BY` in
30+
`Zend_Db_Select` remained prone to SQL injection when a combination of SQL
31+
expressions and comments were used. This release provides a comprehensive
32+
solution that identifies and removes comments prior to checking validity of
33+
the statement to ensure no SQLi vectors occur. We advise always filtering user
34+
input prior to invoking these methods, however, to further protect your
35+
applications.
36+
2737
See http://framework.zend.com/changelog for full details.
2838

2939
NEW FEATURES

library/Zend/Version.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ final class Zend_Version
3232
/**
3333
* Zend Framework version identification - see compareVersion()
3434
*/
35-
const VERSION = '1.12.20dev';
35+
const VERSION = '1.12.20';
3636

3737
/**
3838
* The latest stable version Zend Framework available

0 commit comments

Comments
 (0)