Add ZF2014-05 and ZF2014-06 for ZF2

This indicates that 2.0.9 is not affected by the issue, but it is. You should use `2.0.99`.