← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to active/CVE-2014-8350

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
active/CVE-2014-8350
1
 
Candidate: CVE-2014-8350
2
 
PublicDate: 2014-11-03
3
 
References:
4
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8350
5
 
Description:
6
 
 Smarty before 3.1.21 allows remote attackers to bypass the secure mode
7
 
 restrictions and execute arbitrary PHP code as demonstrated by
8
 
 "{literal}<{/literal}script language=php>" in a template.
9
 
Ubuntu-Description:
10
 
Notes:
11
 
Bugs:
12
 
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765920
13
 
Priority: medium
14
 
Discovered-by:
15
 
Assigned-to:
16
 
 
17
 
Patches_smarty:
18
 
upstream_smarty: needs-triage
19
 
lucid_smarty: ignored (reached end-of-life)
20
 
precise_smarty: ignored (reached end-of-life)
21
 
precise/esm_smarty: DNE (precise was needed)
22
 
trusty_smarty: DNE
23
 
utopic_smarty: DNE
24
 
vivid_smarty: DNE
25
 
vivid/stable-phone-overlay_smarty: DNE
26
 
vivid/ubuntu-core_smarty: DNE
27
 
wily_smarty: DNE
28
 
xenial_smarty: DNE
29
 
yakkety_smarty: DNE
30
 
zesty_smarty: DNE
31
 
artful_smarty: DNE
32
 
bionic_smarty: DNE
33
 
devel_smarty: DNE
34
 
 
35
 
Patches_moodle:
36
 
upstream_moodle: needs-triage
37
 
lucid_moodle: not-affected (uses system smarty)
38
 
precise_moodle: not-affected (uses system smarty)
39
 
precise/esm_moodle: DNE (precise was not-affected [uses system smarty])
40
 
trusty_moodle: not-affected (uses system smarty)
41
 
utopic_moodle: not-affected (uses system smarty)
42
 
vivid_moodle: not-affected (uses system smarty)
43
 
vivid/stable-phone-overlay_moodle: DNE
44
 
vivid/ubuntu-core_moodle: DNE
45
 
wily_moodle: not-affected (uses system smarty)
46
 
xenial_moodle: not-affected (uses system smarty)
47
 
yakkety_moodle: not-affected (uses system smarty)
48
 
zesty_moodle: not-affected (uses system smarty)
49
 
artful_moodle: not-affected (uses system smarty)
50
 
bionic_moodle: not-affected (uses system smarty)
51
 
devel_moodle: not-affected (uses system smarty)
52
 
 
53
 
Patches_gallery2:
54
 
upstream_gallery2: needs-triage
55
 
lucid_gallery2: not-affected (uses system smarty)
56
 
precise_gallery2: not-affected (uses system smarty)
57
 
precise/esm_gallery2: DNE (precise was not-affected [uses system smarty])
58
 
trusty_gallery2: DNE
59
 
utopic_gallery2: DNE
60
 
vivid_gallery2: DNE
61
 
vivid/stable-phone-overlay_gallery2: DNE
62
 
vivid/ubuntu-core_gallery2: DNE
63
 
wily_gallery2: DNE
64
 
xenial_gallery2: DNE
65
 
yakkety_gallery2: DNE
66
 
zesty_gallery2: DNE
67
 
artful_gallery2: DNE
68
 
bionic_gallery2: DNE
69
 
devel_gallery2: DNE
70
 
 
71
 
Patches_smarty3:
72
 
upstream_smarty3: released (3.1.21-1)
73
 
lucid_smarty3: DNE
74
 
precise_smarty3: ignored (reached end-of-life)
75
 
precise/esm_smarty3: DNE (precise was needed)
76
 
trusty_smarty3: needed
77
 
utopic_smarty3: ignored (reached end-of-life)
78
 
vivid_smarty3: ignored (reached end-of-life)
79
 
vivid/stable-phone-overlay_smarty3: DNE
80
 
vivid/ubuntu-core_smarty3: DNE
81
 
wily_smarty3: ignored (reached end-of-life)
82
 
xenial_smarty3: needed
83
 
yakkety_smarty3: ignored (reached end-of-life)
84
 
zesty_smarty3: ignored (reached end-of-life)
85
 
artful_smarty3: needed
86
 
bionic_smarty3: needed
87
 
devel_smarty3: needed