CVE-2016-4861: The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.
Please fix it.
Last update: 2018-01-19
The package has not entered testing even though the delay is over
The package has not entered testing even though the 5-day delay is over.Check why.