Smarty Template Engine 'Smarty_Compiler.class.php' Security Bypass Vulnerability

Smarty Template Engine 'Smarty_Compiler.class.php' Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

MandrakeSoft Linux Mandrake 2008.1 x86_64

Mandriva php-smarty-2.6.22-0.1mdv2008.1.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva php-smarty-manual-2.6.22-0.1mdv2008.1.noarch.rpm
http://www.mandriva.com/en/download/

Debian Linux 4.0 arm

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

MandrakeSoft Linux Mandrake 2008.1

Mandriva php-smarty-manual-2.6.22-0.1mdv2008.1.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva php-smarty-2.6.22-0.1mdv2008.1.noarch.rpm
http://www.mandriva.com/en/download/

Debian Linux 5.0 ia-64

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

Ubuntu moodle_1.8.2-1ubuntu4.2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/moodle/moodle_1.8.2-1ubu ntu4.2_all.deb

Ubuntu Ubuntu Linux 8.10 powerpc

Ubuntu moodle_1.8.2-1.2ubuntu2.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/moodle/moodle_1.8.2-1.2u buntu2.1_all.deb

Debian Linux 4.0 powerpc

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Ubuntu Ubuntu Linux 8.10 i386

Ubuntu moodle_1.8.2-1.2ubuntu2.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/moodle/moodle_1.8.2-1.2u buntu2.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

Ubuntu moodle_1.8.2-1ubuntu4.2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/moodle/moodle_1.8.2-1ubu ntu4.2_all.deb

Debian Linux 4.0 m68k

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Debian Linux 5.0 alpha

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

Debian Linux 5.0 ia-32

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

MandrakeSoft Linux Mandrake 2008.0 x86_64

Mandriva php-smarty-manual-2.6.22-0.1mdv2008.0.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva php-smarty-2.6.22-0.1mdv2008.0.noarch.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS amd64

Ubuntu moodle_1.8.2-1ubuntu4.2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/moodle/moodle_1.8.2-1ubu ntu4.2_all.deb

Debian Linux 5.0 s/390

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

MandrakeSoft Linux Mandrake 2008.0

Mandriva php-smarty-manual-2.6.22-0.1mdv2008.0.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva php-smarty-2.6.22-0.1mdv2008.0.noarch.rpm
http://www.mandriva.com/en/download/

Debian Linux 5.0 mipsel

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

Ubuntu moodle_1.8.2-1ubuntu4.2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/moodle/moodle_1.8.2-1ubu ntu4.2_all.deb

Ubuntu Ubuntu Linux 8.10 lpia

Ubuntu moodle_1.8.2-1.2ubuntu2.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/moodle/moodle_1.8.2-1.2u buntu2.1_all.deb

Debian Linux 4.0 amd64

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

Debian Linux 4.0 ia-32

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

Debian Linux 5.0 hppa

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

Debian Linux 4.0 hppa

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

Debian Linux 4.0 sparc

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

Debian Linux 4.0 s/390

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Ubuntu Ubuntu Linux 8.10 sparc

Ubuntu moodle_1.8.2-1.2ubuntu2.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/moodle/moodle_1.8.2-1.2u buntu2.1_all.deb

Debian Linux 5.0 m68k

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

MandrakeSoft Linux Mandrake 2009.0

Mandriva php-smarty-manual-2.6.22-0.1mdv2009.0.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva php-smarty-2.6.22-0.1mdv2009.0.noarch.rpm
http://www.mandriva.com/en/download/

Debian Linux 5.0 arm

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

Debian Linux 4.0 alpha

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Debian Linux 4.0 armel

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Debian Linux 5.0 armel

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

Debian Linux 5.0

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

MandrakeSoft Corporate Server 4.0

Mandriva php-smarty-2.6.22-0.1.20060mlcs4.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva php-smarty-manual-2.6.22-0.1.20060mlcs4.noarch.rpm
http://www.mandriva.com/en/download/

Debian Linux 4.0

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

Ubuntu moodle_1.8.2-1ubuntu4.2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/moodle/moodle_1.8.2-1ubu ntu4.2_all.deb

Debian Linux 4.0 mipsel

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Debian Linux 5.0 amd64

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

MandrakeSoft Linux Mandrake 2009.0 x86_64

Mandriva php-smarty-2.6.22-0.1mdv2009.0.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva php-smarty-manual-2.6.22-0.1mdv2009.0.noarch.rpm
http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

Ubuntu Ubuntu Linux 8.10 amd64

Ubuntu moodle_1.8.2-1.2ubuntu2.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/moodle/moodle_1.8.2-1.2u buntu2.1_all.deb

Debian Linux 5.0 powerpc

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

Debian Linux 4.0 ia-64

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

Debian Linux 4.0 mips

Debian moodle_1.6.3-2+etch1_all.deb
http://security.debian.org/pool/updates/main/m/moodle/moodle_1.6.3-2+e tch1_all.deb

Debian smarty_2.6.14-1etch2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.14-1e tch2_all.deb

Debian Linux 5.0 sparc

Debian smarty_2.6.20-1.2_all.deb
http://security.debian.org/pool/updates/main/s/smarty/smarty_2.6.20-1. 2_all.deb

MandrakeSoft Corporate Server 4.0 x86_64

Mandriva php-smarty-2.6.22-0.1.20060mlcs4.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva php-smarty-manual-2.6.22-0.1.20060mlcs4.noarch.rpm
http://www.mandriva.com/en/download/