FEDORA-2016-6941d25875

security update in Fedora 25 for php-PHPMailer

Status: stable 2 years ago

Version 5.2.21 (December 28th 2016)

  • Fix missed number update in version file - no functional changes

Version 5.2.20 (December 28th 2016)

  • SECURITY Critical security update for CVE-2016-10045 please update now! Thanks to Dawid Golunski and Paul Buonopane (Zenexer).

Version 5.2.19 (December 26th 2016)

  • Minor cleanup

Version 5.2.18 (December 24th 2016)

  • SECURITY Critical security update for CVE-2016-10033 please update now! Thanks to Dawid Golunski.
  • Add ability to extract the SMTP transaction ID from some common SMTP success messages
  • Minor documentation tweaks

Version 5.2.17 (December 9th 2016)

  • This is officially the last feature release of 5.2. Security fixes only from now on; use PHPMailer 6.0!
  • Allow DKIM private key to be provided as a string
  • Provide mechanism to allow overriding of boundary and message ID creation
  • Improve Brazilian Portuguese, Spanish, Swedish, Romanian, and German translations
  • PHP 7.1 support for Travis-CI
  • Fix some language codes
  • Add security notices
  • Improve DKIM compatibility in older PHP versions
  • Improve trapping and capture of SMTP connection errors
  • Improve passthrough of error levels for debug output
  • PHPDoc cleanup

How to install

sudo dnf upgrade --advisory=FEDORA-2016-6941d25875

Comments 8

This update has been submitted for testing by remi.

This update has obsoleted php-PHPMailer-5.2.19-1.fc25, and has inherited its bugs and notes.

This update has been pushed to testing.

Works for me (+CVE fixed).

Thanks for quick upgrade while I was away.

Happy new year.

Patrick

karma: +1

monnerat edited this update.

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for stable by remi.

This update has been pushed to stable.

Add Comment & Feedback

Please login to add feedback.

Content Type
RPM
Status
stable
Test Gating
Submitted by
Update Type
security
Update Severity
unspecified
Karma
+1
stable threshold: 3
unstable threshold: -3
Autopush (karma)
Enabled
Autopush (time)
Disabled
Dates
submitted 2 years ago
in testing 2 years ago
in stable 2 years ago
modified 2 years ago

Related Bugs 2

00 #1409489 CVE-2016-10033 phpmailer: Parameter injection via mail() function
00 #1409490 CVE-2016-10033 php-PHPMailer: phpmailer: Parameter injection via mail() function [fedora-all]

Automated Test Results