FEDORA-2021-ecf4fed550 — security update for php-phpmailer6

stable

php-phpmailer6-6.4.1-1.fc33

FEDORA-2021-ecf4fed550 created by remi 4 years ago for Fedora 33

Version 6.4.1 (April 29th, 2021)

SECURITY Fixes CVE-2020-36326, a regression of CVE-2018-19296 object injection introduced in 6.1.8, see SECURITY.md for details
Reject more file paths that look like URLs, matching RFC3986 spec, blocking URLS using schemes such as ssh2
Ensure method signature consistency in doCallback calls
Ukrainian language update
Add composer scripts for checking coding standards and running tests

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-ecf4fed550

This update has been submitted for testing by remi.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

This update can be pushed to stable now if the maintainer wishes

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

3 years ago

Builds

php-phpmailer6-6.4.1-1.fc33

BZ#1955757 CVE-2020-36326 php-phpmailer6: Object injection through Phar Deserialization via addAttachment with a UNC pathname [fedora-all]

php-phpmailer6-6.4.1-1.fc33

Automated Test Results

ignored