[packages/php-phpmailer] up to 5.2.27; disallows urls in addAttachment; CVE-2018-19296 fix

glen glen at pld-linux.org
Thu Jan 17 23:00:23 CET 2019


commit c457dd8d39be119ae206204b2a7073d258f6156a
Author: Elan Ruusamäe <glen at pld-linux.org>
Date:   Thu Jan 17 22:05:08 2019 +0200

    up to 5.2.27; disallows urls in addAttachment; CVE-2018-19296 fix
    
    - https://knasmueller.net/5-answers-about-php-phar-exploitation
    - https://github.com/PHPMailer/PHPMailer/commit/8e653bb79643abad30ae60b1aad6966c0810b896
    - https://github.com/PHPMailer/PHPMailer/commit/f1231a9771505f4f34da060390d82eadb8448271

 php-phpmailer.spec | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/php-phpmailer.spec b/php-phpmailer.spec
index b1f1d36..7de0c3d 100644
--- a/php-phpmailer.spec
+++ b/php-phpmailer.spec
@@ -8,12 +8,12 @@
 Summary:	Full featured email transfer class for PHP
 Summary(pl.UTF-8):	W pełni funkcjonalna klasa PHP do przesyłania e-maili
 Name:		php-%{pkgname}
-Version:	5.2.26
+Version:	5.2.27
 Release:	1
 License:	LGPL v2.1
 Group:		Development/Languages/PHP
 Source0:	https://github.com/PHPMailer/PHPMailer/archive/v%{version}/%{pkgname}-%{version}.tar.gz
-# Source0-md5:	d3090f8b15600bd858292656e360af22
+# Source0-md5:	a2e45c0fdacea30e4b582b37880ca53e
 URL:		https://github.com/PHPMailer/PHPMailer
 BuildRequires:	php-devel
 BuildRequires:	php-pear-PhpDocumentor
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/php-phpmailer.git/commitdiff/c457dd8d39be119ae206204b2a7073d258f6156a



More information about the pld-cvs-commit mailing list