diff --git a/ChangeLog b/ChangeLog index 8e29f609..b2b4c402 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,7 @@ +2013-09-30 + + * Fixed old vulnerability bug https://bugs.gentoo.org/show_bug.cgi?id=356615 + 2013-07-16 Uwe Tews * Fixed made Smarty_Compiler.class.php compatible with PHP 5.5 diff --git a/libs/Smarty_Compiler.class.php b/libs/Smarty_Compiler.class.php index 686fe65a..49ef7d0d 100644 --- a/libs/Smarty_Compiler.class.php +++ b/libs/Smarty_Compiler.class.php @@ -2122,7 +2122,7 @@ class Smarty_Compiler extends Smarty { return null; case 'template': - $compiled_ref = "'$this->_current_file'"; + $compiled_ref = "'" . addslashes($this->_current_file) . "'"; $_max_index = 1; break;