From 7eff7d6fb00aab264b2bfe33211285082934cbcf Mon Sep 17 00:00:00 2001 From: Simon Wisselink Date: Mon, 16 May 2022 13:31:15 +0200 Subject: [PATCH] Changelog --- CHANGELOG.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 8fdc26cf5..d952a7359 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,10 +6,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] -### Changed -- Exclude docs and demo from export and composer [#751](https://github.com/smarty-php/smarty/pull/751) +### Security +- Prevent PHP injection through malicious block name or include file name. This addresses CVE-2022- ### Fixed +- Exclude docs and demo from export and composer [#751](https://github.com/smarty-php/smarty/pull/751) - PHP 8.1 deprecation notices in demo/plugins/cacheresource.pdo.php [#706](https://github.com/smarty-php/smarty/issues/706) - PHP 8.1 deprecation notices in truncate modifier [#699](https://github.com/smarty-php/smarty/issues/699) - Math equation `max(x, y)` didn't work anymore [#721](https://github.com/smarty-php/smarty/issues/721)