-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Nov 2026 19:12:58 +0100
Source: smarty4
Binary: smarty4
Architecture: all
Version: 4.5.5-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Description:
 smarty4    -
Closes: 1145020 1150192 1150507
Changes:
 smarty4 (4.5.5-1+deb13u1) trixie; urgency=medium
 .
   * debian/patches:
     + Add CVE-2026-62992+3.patch.
       CVE-2026-62992: Fix resolving symbolic links in Security::_checkDir()
       before validating that a requested path lies within a configured secure
       directory.(Closes: #1145020).
       CVE-2026-62993: Fix validating the initial remote URL against trusted_uri
       under all circumstances when a security policy is active. (Closes:
       #1150507).
     + Add CVE-2026-82531.patch.
       CVE-2026-82531: Fix code injection vulnerability. (Closes: #1150192).
Checksums-Sha1:
 4d24bd0539f2d90f25591424599ef60747ad5275 6561 smarty4_4.5.5-1+deb13u1_all-buildd.buildinfo
 804b58571921308f7b02b3dcb80be90481b44c3e 188172 smarty4_4.5.5-1+deb13u1_all.deb
Checksums-Sha256:
 a87fe7639796655838e9a178adc9b7595778c7dc0b689a5a873512d69470f66b 6561 smarty4_4.5.5-1+deb13u1_all-buildd.buildinfo
 d4c2043119c2f7d57b96d7c516ad88172a4c1d358677ee62789fa89c9233c989 188172 smarty4_4.5.5-1+deb13u1_all.deb
Files:
 95b9ce6e60617063aa689ae49b2c2d4d 6561 web optional smarty4_4.5.5-1+deb13u1_all-buildd.buildinfo
 03cd1a5ff8d3b86362d644372ba83f0d 188172 web optional smarty4_4.5.5-1+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=bmjc
-----END PGP SIGNATURE-----