Accepted: smarty,smarty 2.6.14-1ubuntu0.7.04.1 (source,i386)

[Ubuntu Installer]

Accepted:
 OK: smarty_2.6.14.orig.tar.gz
 OK: smarty_2.6.14-1ubuntu0.7.04.1.diff.gz
 OK: smarty_2.6.14-1ubuntu0.7.04.1.dsc
     -> Component: universe Section: web
 OK: smarty_2.6.14-1ubuntu0.7.04.1_all.deb

Format: 1.7
Date: Sat, 15 Mar 2008 07:21:09 +0100
Source: smarty
Binary: smarty
Architecture: all source
Version: 2.6.14-1ubuntu0.7.04.1
Distribution: feisty-security
Urgency: low
Maintainer: Dimitri Fontaine <dim at tapoueh.org>
Changed-By: Emanuele Gentili <emgent at emanuele-gentili.com>
Description:
 smarty     - Template engine for PHP
Changes:
 smarty (2.6.14-1ubuntu0.7.04.1) feisty-security; urgency=low
 .
   * SECURITY UPDATE: (LP: #202422)
    + libs/plugins/modifier.regex_replace.php
     - The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used
       by Serendipity (S9Y) and other products, allows attackers to call arbitrary
       PHP functions via templates, related to a '\0' character in a search string.
 .
   * References
    + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1066
    + http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469492
Files:
 213105dfd1e5ec35cbfd66a70655e5e3 183312 web optional smarty_2.6.14-1ubuntu0.7.04.1_all.deb
 a4764e94212160150fa3be9606b89954 676 web optional smarty_2.6.14-1ubuntu0.7.04.1.dsc
 cd8d70c690372613295f53b8ec47d7c7 3983 web optional smarty_2.6.14-1ubuntu0.7.04.1.diff.gz
Launchpad-Bugs-Fixed: 202422