Accepted: smarty,smarty 2.6.14-1ubuntu0.6.10.1 (source,i386)

Ubuntu Installer archive at
Mon Mar 24 12:55:36 GMT 2008

 OK: smarty_2.6.14.orig.tar.gz
 OK: smarty_2.6.14-1ubuntu0.6.10.1.diff.gz
 OK: smarty_2.6.14-1ubuntu0.6.10.1.dsc
     -> Component: universe Section: web
 OK: smarty_2.6.14-1ubuntu0.6.10.1_all.deb

Format: 1.7
Date: Sat, 15 Mar 2008 07:21:09 +0100
Source: smarty
Binary: smarty
Architecture: all source
Version: 2.6.14-1ubuntu0.6.10.1
Distribution: edgy-security
Urgency: low
Maintainer: Dimitri Fontaine <dim at>
Changed-By: Emanuele Gentili <emgent at>
 smarty     - Template engine for PHP
 smarty (2.6.14-1ubuntu0.6.10.1) edgy-security; urgency=low
   * SECURITY UPDATE: (LP: #202422)
    + libs/plugins/modifier.regex_replace.php
     - The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used
       by Serendipity (S9Y) and other products, allows attackers to call arbitrary
       PHP functions via templates, related to a '\0' character in a search string.
   * References
 871360e38b600d976636e57c5b3b9216 183306 web optional smarty_2.6.14-1ubuntu0.6.10.1_all.deb
 96cb0c8b7677218e0347be0ecff6435c 676 web optional smarty_2.6.14-1ubuntu0.6.10.1.dsc
 ab61328c2132b18c6347d1c7bd8aaac4 3981 web optional smarty_2.6.14-1ubuntu0.6.10.1.diff.gz

More information about the edgy-changes mailing list