Smarty Forum Index Smarty
WARNING: All discussion is moving to https://reddit.com/r/smarty, please go there! This forum will be closing soon.

Smarty 3.1.39 is released

 
Post new topic   This topic is locked: you cannot edit posts or make replies.    Smarty Forum Index -> Announcements
View previous topic :: View next topic  
Author Message
AnrDaemon
Administrator


Joined: 03 Dec 2012
Posts: 1755

PostPosted: Sun May 23, 2021 8:56 am    Post subject: Smarty 3.1.39 is released Reply with quote

Smarty 3.1.39 is released (Feb 17, 2021), containing two security patches.

* Prevent access to $smarty.template_object in sandbox mode. Addresses CVE-2021-26119.
* Fixed code injection vulnerability by using illegal function names in {function name='blah'}{/function}. Addresses CVE-2021-26120.

Change log
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   This topic is locked: you cannot edit posts or make replies.    Smarty Forum Index -> Announcements All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group
Protected by Anti-Spam ACP