diff --git a/RELEASE_NOTES b/RELEASE_NOTES
index 283f1f9f..2cc9896b 100644
--- a/RELEASE_NOTES
+++ b/RELEASE_NOTES
@@ -1,3 +1,8 @@
+2.6.7
+-----
+
+Those using Smarty with security enabled: a hole was found that allowed PHP code to be executed from within a template file. This has been fixed and you are engouraged to upgrade immediately. Note that this hole does NOT affect the security of your web server or PHP applications, only the ability for someone editing a template to execute PHP code. Other changes in this release can be found in the NEWS file.
+
 2.5.0
 -----
 
diff --git a/libs/Config_File.class.php b/libs/Config_File.class.php
index 72acda14..0abbd388 100644
--- a/libs/Config_File.class.php
+++ b/libs/Config_File.class.php
@@ -18,7 +18,7 @@
  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  *
  * @link http://smarty.php.net/
- * @version 2.6.7-dev
+ * @version 2.6.8-dev
  * @copyright Copyright: 2001-2005 New Digital Group, Inc.
  * @author Andrei Zmievski <andrei@php.net>
  * @access public
diff --git a/libs/Smarty.class.php b/libs/Smarty.class.php
index f640aa6b..506c6b2e 100644
--- a/libs/Smarty.class.php
+++ b/libs/Smarty.class.php
@@ -27,7 +27,7 @@
  * @author Monte Ohrt <monte at ohrt dot com>
  * @author Andrei Zmievski <andrei@php.net>
  * @package Smarty
- * @version 2.6.7-dev
+ * @version 2.6.8-dev
  */
 
 /* $Id$ */
@@ -464,7 +464,7 @@ class Smarty
      *
      * @var string
      */
-    var $_version              = '2.6.7-dev';
+    var $_version              = '2.6.8-dev';
 
     /**
      * current template inclusion depth
diff --git a/libs/Smarty_Compiler.class.php b/libs/Smarty_Compiler.class.php
index 28fc3e6b..bfd88e37 100644
--- a/libs/Smarty_Compiler.class.php
+++ b/libs/Smarty_Compiler.class.php
@@ -21,7 +21,7 @@
  * @link http://smarty.php.net/
  * @author Monte Ohrt <monte at ohrt dot com>
  * @author Andrei Zmievski <andrei@php.net>
- * @version 2.6.7-dev
+ * @version 2.6.8-dev
  * @copyright 2001-2005 New Digital Group, Inc.
  * @package Smarty
  */