lp:ubuntu/dapper-updates/smarty

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

6. By Emanuele Gentili on 2008-03-15

* SECURITY UPDATE: (LP: #202422)
 + libs/plugins/modifier.regex_replace.php
  - The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used
    by Serendipity (S9Y) and other products, allows attackers to call arbitrary
    PHP functions via templates, related to a '\0' character in a search string.

* References
 + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1066
 + http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469492

5. By Igor Genibel <email address hidden> on 2006-01-12

* New upstream release
* Added myself to Uploaders
* Ack previous NMU (Closes: #332098)

4. By Igor Genibel <email address hidden> on 2005-11-02

* Non-maintainer upload (with maintainer permission: 0-day NMU).
* Change Maintainer address

3. By Dimitri Fontaine <email address hidden> on 2005-04-11

* New upstream release
* disallow variable function calls in {if} statements
* disallow variable function calls in {math} equations

2. By Dimitri Fontaine <email address hidden> on 2005-03-29

New upstream release

1. By Dimitri Fontaine <email address hidden> on 2004-04-16

* Adapted dependencies to allow running smarty with apache 2 (Closes: #241147)
* Prepared the template for i18n (Closes: #233098)