Accepted: smarty 2.6.18-1ubuntu3 (source)

[Emanuele Gentili]

Accepted:
 OK: smarty_2.6.18.orig.tar.gz
 OK: smarty_2.6.18-1ubuntu3.diff.gz
 OK: smarty_2.6.18-1ubuntu3.dsc
     -> Component: universe Section: web

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat, 15 Mar 2008 06:54:31 +0100
Source: smarty
Binary: smarty
Architecture: source
Version: 2.6.18-1ubuntu3
Distribution: hardy
Urgency: low
Maintainer: Ubuntu MOTU Developers <ubuntu-motu at lists.ubuntu.com>
Changed-By: Emanuele Gentili <emgent at emanuele-gentili.com>
Description: 
 smarty     - Template engine for PHP
Launchpad-Bugs-Fixed: 202422
Changes: 
 smarty (2.6.18-1ubuntu3) hardy; urgency=low
 .
   * SECURITY UPDATE: (LP: #202422)
    + libs/plugins/modifier.regex_replace.php
     - The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used
       by Serendipity (S9Y) and other products, allows attackers to call arbitrary
       PHP functions via templates, related to a '\0' character in a search string.
 .
   * References
    + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1066
    + http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469492
Files: 
 58892a402bfa2434761050b9b98c2582 781 web optional smarty_2.6.18-1ubuntu3.dsc
 7cbbf10cdae9faf69fa8029867c22c72 4328 web optional smarty_2.6.18-1ubuntu3.diff.gz
Original-Maintainer: Dimitri Fontaine <dim at tapoueh.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFH4StPnXjXEYa8KlARAn+3AKCq+7jWg7sGIyfNLHnisp59s566sQCgreUW
5O3a9DrEtS6KtGSgKl7y5zA=
=FRKN
-----END PGP SIGNATURE-----