diff --git a/CHANGELOG.md b/CHANGELOG.md index e6a5c20be..97355b6df 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [4.5.3] - 2024-05-28 +- Fixed a code injection vulnerability in extends-tag. This addresses CVE-2024-35226. + + ## [4.5.2] - 2024-04-06 - Fixed argument must be passed by reference error introduced in v4.5.1 [#964](https://github.com/smarty-php/smarty/issues/964) diff --git a/changelog/GHSA-4rmg-292m-wg3w.md b/changelog/GHSA-4rmg-292m-wg3w.md deleted file mode 100644 index cd15f3e69..000000000 --- a/changelog/GHSA-4rmg-292m-wg3w.md +++ /dev/null @@ -1 +0,0 @@ -- Fixed a code injection vulnerability in extends-tag. This addresses CVE-2024-35226. diff --git a/libs/Smarty.class.php b/libs/Smarty.class.php index 13dcb1118..b285a99e0 100644 --- a/libs/Smarty.class.php +++ b/libs/Smarty.class.php @@ -107,7 +107,7 @@ class Smarty extends Smarty_Internal_TemplateBase /** * smarty version */ - const SMARTY_VERSION = '4.5.2'; + const SMARTY_VERSION = '4.5.3'; /** * define variable scopes */