Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 10: FEDORA-2009-5525 Critical: php-Smarty Command Execution

fedora
Calendar Grey May 27, 2009
Dist Fedora Esm H88
Important security patch for php-Smarty on Fedora 10 resolved vulnerability allowing execution of unauthorized commands linked to CVE-2009-1669.
CVE-2009-1669

Summary

Although Smarty is known as a "Template Engine", it would be more accurately

described as a "Template/Presentation Framework." That is, it provides the

programmer and template designer with a wealth of tools to automate tasks

commonly dealt with at the presentation layer of an application. I stress the

word Framework because Smarty is not a simple tag-replacing template engine.

Although it can be used for such a simple purpose, its focus is on quick and

painless development and deployment of your application, while maintaining

high-performance, scalability, security and future growth.

Update Information:

CVE-2009-1669

Topics%20covered

Topics Covered

security advisory critical Fedora command execution php-Smarty

Change Log

* Mon May 25 2009 Christopher Stone 2.6.25-1 - Upstream sync * Thu Feb 26 2009 Fedora Release Engineering - 2.6.20-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Sun Nov 2 2008 Christopher Stone 2.6.20-2 - Add security patch (bz #469648) - Add RHL dist tag conditional for Requires

References


[ 1 ] Bug #501564 - CVE-2009-1669 Smarty: arbitrary commands execution via shell metacharacters in the equation attribute of the math function https://bugzilla.redhat.com/show_bug.cgi?id=501564

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-Smarty' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php-Smarty
Product: Fedora 10
Version: 2.6.25
Release: 1.fc10
URL: Summary : Template/Presentation Framework for PHP

Topics%20covered

Topics Covered

security advisory critical Fedora command execution php-Smarty

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here