The php-ZendFramework package has been updated to version 1.12.18 to fix a potential information disclosure and insufficient entropy vulnerability in the word CAPTCHA (ZF2015-09) and several other functions (ZF2016-01).
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2016-0156.json"