[packages/php-phpmailer] up to 5.2.24 (July 26th 2017)

glen glen at pld-linux.org
Tue Nov 14 20:14:27 CET 2017


commit d5c3878f12c9a2953b3aa8e0f657ab4fc62613bb
Author: Elan Ruusamäe <glen at pld-linux.org>
Date:   Tue Nov 14 21:08:23 2017 +0200

    up to 5.2.24 (July 26th 2017)
    
    - **SECURITY** Fix XSS vulnerability in one of the code examples, [CVE-2017-11503](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11503). The `code_generator.phps` example did not filter user input prior to output. This file is distributed with a `.phps` extension, so it it not normally executable unless it is explicitly renamed, so it is safe by default. There was also an undisclosed potential XSS vulnerability in the default exception handler (unused by default). Patches for both issues kindly provided by Patrick Monnerat of the Fedora Project.
    - Handle bare codes (an RFC contravention) in SMTP server responses
    - Make message timestamps more dynamic - calculate the date separately for each message
    - Include timestamps in HTML-format debug output
    - Improve Turkish, Norwegian, Serbian, Brazilian Portuguese & simplified Chinese translations
    - Correction of Serbian ISO language code from `sr` to `rs`
    - Fix matching of multiple entries in `Host` to match IPv6 literals without breaking port selection (see #1094, caused by a3b4f6b)
    - Better capture and reporting of SMTP connection errors

 php-phpmailer.spec | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
---
diff --git a/php-phpmailer.spec b/php-phpmailer.spec
index 6a563e0..8205233 100644
--- a/php-phpmailer.spec
+++ b/php-phpmailer.spec
@@ -8,12 +8,12 @@
 Summary:	Full featured email transfer class for PHP
 Summary(pl.UTF-8):	W pełni funkcjonalna klasa PHP do przesyłania e-maili
 Name:		php-%{pkgname}
-Version:	5.2.23
+Version:	5.2.24
 Release:	1
 License:	LGPL v2.1
 Group:		Development/Languages/PHP
 Source0:	https://github.com/PHPMailer/PHPMailer/archive/v%{version}/%{pkgname}-%{version}.tar.gz
-# Source0-md5:	f3c3c888820b40687083def0ad48512d
+# Source0-md5:	9640b3de850dafe5741d89cc29cde84e
 URL:		https://github.com/PHPMailer/PHPMailer
 BuildRequires:	php-devel
 BuildRequires:	php-pear-PhpDocumentor
@@ -194,10 +194,10 @@ rm -rf $RPM_BUILD_ROOT
 %lang(pt) %{_appdir}/language/phpmailer.lang-pt.php
 %lang(pt_BR) %{_appdir}/language/phpmailer.lang-pt_br.php
 %lang(ro) %{_appdir}/language/phpmailer.lang-ro.php
+%lang(rs) %{_appdir}/language/phpmailer.lang-rs.php
 %lang(ru) %{_appdir}/language/phpmailer.lang-ru.php
 %lang(sk) %{_appdir}/language/phpmailer.lang-sk.php
 %lang(sl) %{_appdir}/language/phpmailer.lang-sl.php
-%lang(sr) %{_appdir}/language/phpmailer.lang-sr.php
 %lang(sv) %{_appdir}/language/phpmailer.lang-sv.php
 %lang(tr) %{_appdir}/language/phpmailer.lang-tr.php
 %lang(uk) %{_appdir}/language/phpmailer.lang-uk.php
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/php-phpmailer.git/commitdiff/73d2a81ab13855b4a4df2facbcc5c3ea8f04400e



More information about the pld-cvs-commit mailing list