Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 11: CVE-2009-1669 Critical: Php-Smarty Command Execution Issue

fedora
Calendar Grey May 27, 2009
Dist Fedora Esm H88
Fedora 11 users, a new php-Smarty update is available to fix vulnerabilities linked to CVE-2009-1669. Updating is vital for your system's security and integrity
CVE-2009-1669

Summary

Although Smarty is known as a "Template Engine", it would be more accurately

described as a "Template/Presentation Framework." That is, it provides the

programmer and template designer with a wealth of tools to automate tasks

commonly dealt with at the presentation layer of an application. I stress the

word Framework because Smarty is not a simple tag-replacing template engine.

Although it can be used for such a simple purpose, its focus is on quick and

painless development and deployment of your application, while maintaining

high-performance, scalability, security and future growth.

Update Information:

CVE-2009-1669

Topics%20covered

Topics Covered

security advisory critical Fedora command execution php-Smarty arbitrary commands execution

Change Log

* Mon May 25 2009 Christopher Stone 2.6.25-1 - Upstream sync

References


[ 1 ] Bug #501564 - CVE-2009-1669 Smarty: arbitrary commands execution via shell metacharacters in the equation attribute of the math function https://bugzilla.redhat.com/show_bug.cgi?id=501564

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-Smarty' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php-Smarty
Product: Fedora 11
Version: 2.6.25
Release: 1.fc11
URL: Summary : Template/Presentation Framework for PHP

Topics%20covered

Topics Covered

security advisory critical Fedora command execution php-Smarty arbitrary commands execution

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here