From 09e211cbfd89ccad3c79253c189455ee12594092 Mon Sep 17 00:00:00 2001 From: Simon Wisselink Date: Tue, 28 May 2024 23:45:58 +0200 Subject: [PATCH] version bump --- CHANGELOG.md | 4 ++++ changelog/GHSA-4rmg-292m-wg3w.md | 1 - libs/Smarty.class.php | 2 +- 3 files changed, 5 insertions(+), 2 deletions(-) delete mode 100644 changelog/GHSA-4rmg-292m-wg3w.md diff --git a/CHANGELOG.md b/CHANGELOG.md index e6a5c20be..97355b6df 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [4.5.3] - 2024-05-28 +- Fixed a code injection vulnerability in extends-tag. This addresses CVE-2024-35226. + + ## [4.5.2] - 2024-04-06 - Fixed argument must be passed by reference error introduced in v4.5.1 [#964](https://github.com/smarty-php/smarty/issues/964) diff --git a/changelog/GHSA-4rmg-292m-wg3w.md b/changelog/GHSA-4rmg-292m-wg3w.md deleted file mode 100644 index cd15f3e69..000000000 --- a/changelog/GHSA-4rmg-292m-wg3w.md +++ /dev/null @@ -1 +0,0 @@ -- Fixed a code injection vulnerability in extends-tag. This addresses CVE-2024-35226. diff --git a/libs/Smarty.class.php b/libs/Smarty.class.php index 13dcb1118..b285a99e0 100644 --- a/libs/Smarty.class.php +++ b/libs/Smarty.class.php @@ -107,7 +107,7 @@ class Smarty extends Smarty_Internal_TemplateBase /** * smarty version */ - const SMARTY_VERSION = '4.5.2'; + const SMARTY_VERSION = '4.5.3'; /** * define variable scopes */