FYI: Smarty 2.6.8 Released

[mip]

A vulnerability in the regex_replace modifier has been fixed that allowed PHP code to be executed from a template, even with template security enabled. If you are using template security features, it is highly recommended to upgrade, or at least replace the modifier plugin. A problem with the {strip}{/strip} tags (that was introduced in 2.6.7) has been fixed. Casting objects to arrays in the {foreach} "item" attribute has been addressed.

http://smarty.php.net/

[Ted]

Cool.  Thanks.  I'll upgrade it ASAP.