Changelog for
php7-smarty3-3.1.48-lp156.7.2.noarch.rpm :
* Sun Apr 23 2023 Carsten Ziepke
- New upstream release 3.1.48 - Fixed Cross site scripting vulnerability in Javascript escaping. This addresses CVE-2023-28447. - Output buffer is now cleaned for internal PHP errors as well, not just for Exceptions.
* Sat Feb 04 2023 Aeneas Jaißle - Make package PHP version independent
* Thu Dec 22 2022 Aeneas Jaißle - New upstream release 3.1.47 - Applied appropriate javascript and html escaping in mailto plugin to counter injection attacks - Fixed use of rand() without a parameter in math function - Fixed unselected year/month/day not working in html_select_date- Includes fixes for CVE-2021-29454, CVE-2021-21408, CVE-2022-29221
* Mon Nov 29 2021 Aeneas Jaißle - New upstream release 3.1.40
* Sun Nov 28 2021 Aeneas Jaißle - New upstream release 3.1.39
* includes fixes for CVE-2021-26119, CVE-2021-26120
* Sat Oct 27 2018 Aeneas Jaißle - New upstream release 3.1.33
* includes fixes for CVE-2018-16831, CVE-2018-13982 [boo#1108741]
* Wed Sep 06 2017 ecsosAATTopensuse.org- package renamed to php7-smarty3
* Sat Nov 19 2016 ajAATTajaissle.de- New upstream release 3.1.30
* Many minor bug fixes and enhancements. One {math} shell injection vulnerability patch provided by Tim Weber. Note this is only vulnerable to those with template write access using security features.- Changes of 3.1.29:
* Mostly bug fixes- Changes of 3.1.28:
* Many bug fixes and new features, namely PHP 7 support and run-time inheritance compiling.
* Wed Sep 16 2015 ajAATTajaissle.de- New upstream release 3.1.27
* Mostly bug fixes- Changes of 3.1.25:
* Mostly bug fixes- Changes of 3.1.24:
* New features, bug fixes and improvements
* Most notably, compiling speed has been improved by 30-40%
* Wed Mar 25 2015 ajAATTajaissle.de- Use update-alternatives to create symlinks to %phpdir/Smarty- Adjust spec to match php5-smarty2- Added -doc sub package
* Thu Feb 19 2015 jweberhoferAATTweberhofer.at- Moved into Smarty3 directory- Changed provides sections not to conflict with Smarty2
* Fri Jan 09 2015 ajAATTajaissle.de- License changed to LGPL 3.0 with Smarty 3
* Tue Dec 09 2014 ajAATTajaissle.de- New upstream release 3.1.21 (2014-10-18) - various bugfixes - composer moved to github - add COMPOSER_RELEASE_NOTES - improvement cache is_file(file_exists) results of loadPlugin() to avoid unnecessary calls during compilation (Issue 201} - enhancement remove BOM automatically from template source (topic 25161)
