dev-php/smarty-4.3.1 — Security Advisories

▸ GLSA 202209-09 Smarty: Multiple vulnerabilities this version unaffected normal remote 2022-09-25

Multiple vulnerabilities have been found in Smarty, the worst of which could result in remote code execution

Announced: 2022-09-25
Revised: 2022-09-25
Access: remote
Bugs: #830980 #845180 #870100
Advisory: https://security.gentoo.org/glsa/202209-09

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-php/smarty	*	< 4.2.1	>= 4.2.1

Background

Smarty is a template engine for PHP. The "template security" feature of Smarty is designed to help reduce the risk of a system compromise when you have untrusted parties editing templates.

Description

Multiple vulnerabilities have been discovered in Smarty. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Smarty users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-php/smarty-4.2.1"

References

▸ GLSA 202105-06 Smarty: Multiple vulnerabilities this version unaffected normal local, remote 2021-05-26

Multiple vulnerabilities in the Smarty template engine might allow remote attackers to execute arbitrary PHP code.

Announced: 2021-05-26
Revised: 2021-05-26
Access: local, remote
Bugs: #772206
Advisory: https://security.gentoo.org/glsa/202105-06

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-php/smarty	*	< 3.1.39	>= 3.1.39

Background

Smarty is a template engine for PHP.

Description

Multiple vulnerabilities have been discovered in Smarty template engine. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Smarty template engine users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-php/smarty-3.1.39"

References

▸ GLSA 201006-13 Smarty: Multiple vulnerabilities this version unaffected normal remote 2010-06-02

Multiple vulnerabilities in the Smarty template engine might allow remote attackers to execute arbitrary PHP code.

Announced: 2010-06-02
Revised: 2010-06-02
Access: remote
Bugs: #212147 #243856 #270494
Advisory: https://security.gentoo.org/glsa/201006-13

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-php/smarty	*	< 2.6.23	>= 2.6.23

Background

Smarty is a template engine for PHP.

Description

Multiple vulnerabilities have been discovered in Smarty:

The vendor reported that the modifier.regex_replace.php plug-in contains an input sanitation flaw related to the ASCII NUL character (CVE-2008-1066).
The vendor reported that the _expand_quoted_text() function in libs/Smarty_Compiler.class.php contains an input sanitation flaw via multiple vectors (CVE-2008-4810, CVE-2008-4811).
Nine:Situations:Group::bookoo reported that the smarty_function_math() function in libs/plugins/function.math.php contains input sanitation flaw (CVE-2009-1669).

Impact

These issues might allow a remote attacker to execute arbitrary PHP code.

Workaround

There is no known workaround at this time.

Resolution

All Smarty users should upgrade to an unaffected version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-php/smarty-2.6.23"

NOTE: This is a legacy GLSA. Updates for all affected architectures are available since June 2, 2009. It is likely that your system is already no longer affected by this issue.

References

▸ GLSA 200503-35 Smarty: Template vulnerability this version unaffected high remote 2005-03-30

Smarty's "Template security" feature can be bypassed, potentially allowing a remote attacker to execute arbitrary PHP code.

Announced: 2005-03-30
Revised: 2006-05-22 (revision 3)
Access: remote
Bugs: #86488
Advisory: https://security.gentoo.org/glsa/200503-35

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-php/smarty	*	< 2.6.9	>= 2.6.9

Background

Smarty is a template engine for PHP. The "template security" feature of Smarty is designed to help reduce the risk of a system compromise when you have untrusted parties editing templates.

Description

A vulnerability has been discovered within the regex_replace modifier of the Smarty templates when allowing access to untrusted users. Furthermore, it was possible to call functions from {if} statements and {math} functions.

Impact

These issues may allow a remote attacker to bypass the "template security" feature of Smarty, and execute arbitrary PHP code.

Workaround

Do not grant template access to untrusted users.

Resolution

All Smarty users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-php/smarty-2.6.9"