Mandriva Linux Security Advisory 2014-145 - The implementation of the ORDER BY SQL statement in Zend_Db_Select of Zend Framework 1 contains a potential SQL injection when the query string passed contains parentheses. The updated packages have been upgraded to the latest ZendFramework version which is not vulnerable to this issue.
1d38288d465713a37f02a8977e8f2b34e2ce109cc91ccc1ab5fc49854a8f79f9