-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Nov 2026 18:45:00 +0100 Source: smarty4 Architecture: source Version: 4.5.8-1 Distribution: unstable Urgency: medium Maintainer: Mike Gabriel <sunweaver@debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Closes: 1145020 1150192 1150507 Changes: smarty4 (4.5.8-1) unstable; urgency=medium . * New upstream release. - CVE-2026-62992: Fix resolving symbolic links in Security::_checkDir() before validating that a requested path lies within a configured secure directory.(Closes: #1145020). - CVE-2026-62993: Fix validating the initial remote URL against trusted_uri under all circumstances when a security policy is active. (Closes: #1150507). - CVE-2026-82531: Fix code injection vulnerability. (Closes: #1150192). * debian/control: + Bump Standards-Version: to 4.7.4; drop Priority: field; drop R³: field. * debian/watch: + Switch to format version 5. Checksums-Sha1: 4a21ed973dae663f465e1d60273f91ff4a83a01d 1973 smarty4_4.5.8-1.dsc 94821275fcb110b8e2fb492454a09002fe80044c 366102 smarty4_4.5.8.orig.tar.gz df90fef33adc992ab824fe3cf6df9c7f2601998f 9568 smarty4_4.5.8-1.debian.tar.xz 6a3fcecce2210ab31957adeb9c57eae4e8599ee3 7520 smarty4_4.5.8-1_source.buildinfo Checksums-Sha256: d9411b8256e774cfc8e1de23c533c058af236037e00d30f86e8c81baeeb6ea10 1973 smarty4_4.5.8-1.dsc 304d5b96d14be1de6d971ed036d8d648de4c063945a4ec2b9f2a38197c13cba8 366102 smarty4_4.5.8.orig.tar.gz 09811203a4b0c830c9e5eb8fe4a4705b7797154b05560142a80026ab91610526 9568 smarty4_4.5.8-1.debian.tar.xz 0035836ea4940dcca27f1970285a64cd5d9dd40955598e834368a104b96ba663 7520 smarty4_4.5.8-1_source.buildinfo Files: 164700b8c49516d38226a64562ce0769 1973 web optional smarty4_4.5.8-1.dsc 7759dc4063a3e12c82b40d7026bd7c2d 366102 web optional smarty4_4.5.8.orig.tar.gz 16c187c9b5b2e72ab7e5dfc61d4fb8c0 9568 web optional smarty4_4.5.8-1.debian.tar.xz 9e63343b97e1288f35aa32185d823f9c 7520 web optional smarty4_4.5.8-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJJBAEBCgAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAmrqHqoVHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxxVAP/j8DYyJeZBh153PfW/L24mvuS8GS GGrDk+LI7HMccqYGDX7UbqeCPkEqcX+MuvvnckuXxYc2ZPdCKuN6V/Wp58RiZakb woyww0kXz96H+O6us5+7MeYw+3ny0Yx5g2kWGNIJn1OEjc9iKy5wRojaSvE0SSaG sMXldUK/JbTkb6zjWsXKbgccRhrS7I5ZiZAwCpmnH/VkxR+Y9Z2yRD6b+C985Krh QLGgSSyZaouB7w0xZf9nn8HzsHosP6CrxV7ZooWxI0rrWJAX2XHGcBE7IqNQGp0h kM8bhPpLVTZpgVFpR7PVrkIAaDWQD+D6bpazsd88k5xUTN0AM8W4+swg8Sskz/Cy 4o8niucEHhFDLlarzcZxSBm53ARCnEXA9plNRnDNJXhTEwWeFCZshDUlmx2KLSJm Djo6e2Esq/sFKacx7+BjRHMZdEmHzIsYu0q4hM+8kfLt59JkkvaMegCABOTEF/T2 ry9QiLoWwN0gjF0vtOEoffcJlPz+XrEmU+Xv7bHcp5UBt7sZtKA/eJmTlWDReknM gShc3D2l6+Z0BVwMaJtKE1uBVsNb/a2k6Zjgf2Co/l2Ar7znbpx2aWKfniiVzi2u uzzA++pvVJOs95QP0H+z4B045WIKZw4ZBS7loEzFkBwHY5kdCy4Wlzz3ebqE+Jm4 jjfJoIS2not8RGVY =3Kj+ -----END PGP SIGNATURE-----
