Lucene search

K
debianDebianDEBIAN:DLA-1591-1:BE93D
HistoryNov 23, 2018 - 9:41 a.m.

[SECURITY] [DLA 1591-1] libphp-phpmailer security update

2018-11-2309:41:54
lists.debian.org
190

Package : libphp-phpmailer
Version : 5.2.9+dfsg-2+deb8u4
CVE IDs : CVE-2017-5223 CVE-2018-19296

It was discovered that there were two vulnerabilities libphp-phpmailer, an
email library for the PHP programming language:

  • CVE-2017-5223: Local file disclosure vulnerability via relative path
    HTML transformations.

  • CVE-2018-19296: Object injection attack.

For Debian 8 "Jessie", this issue has been fixed in libphp-phpmailer version
5.2.9+dfsg-2+deb8u4.

We recommend that you upgrade your libphp-phpmailer packages.

Regards,


  ,''`.
 : :'  :     Chris Lamb
 `. `'`      [email protected] / chris-lamb.co.uk
   `-
OSVersionArchitecturePackageVersionFilename
Debian8alllibphp-phpmailer< 5.2.9+dfsg-2+deb8u4libphp-phpmailer_5.2.9+dfsg-2+deb8u4_all.deb