Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 754
Alerts This Week
Warning Icon 1 754

Mageia: 2021-0335 Moderate: php-smarty Sandbox Escape And Code Injection

mageia
Calendar Grey July 10, 2021
Dist Mageia Esm H88
Mageia 2021-0459 enhances ruby-sinatra to address vulnerabilities related to remote code execution and session hijacking concerns.
Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode (CVE-2021-26119)

Summary

Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode (CVE-2021-26119).
Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring (CVE-2021-26120).

References

- https://bugs.mageia.org/show_bug.cgi?id=28996

- https://github.com/smarty-php/smarty/releases/tag/v3.1.39

- https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html

- https://www.cve.org/CVERecord?id=CVE-2021-26119

- https://www.cve.org/CVERecord?id=CVE-2021-26120

Topics%20covered

Topics Covered

security advisory security issue medium severity code injection sandbox escape Mageia php-smarty

Resolution

SRPMS

- 8/core/php-smarty-3.1.39-1.mga8

- 7/core/php-smarty-3.1.39-1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 10 Jul 2021
URL: https://advisories.mageia.org/MGASA-2021-0335.html
Type: security
CVE: CVE-2021-26119, CVE-2021-26120

Topics%20covered

Topics Covered

security advisory security issue medium severity code injection sandbox escape Mageia php-smarty

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.