Univention Bugzilla – Bug 52095
(ES 4.3) libphp-phpmailer
Last modified: 2020-11-30 12:20:51 CET
Provide libphp-phpmailer version 5.2.14+dfsg-2.3+deb9u2 for UCS 4.3 First imported at bug #51760 This update addresses the following issue: * PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message. (CVE-2020-13625)
-> apt-cache policy libphp-phpmailer libphp-phpmailer: Installiert: 5.2.14+dfsg-2.3+deb9u2 Installationskandidat: 5.2.14+dfsg-2.3+deb9u2 Versionstabelle: *** 5.2.14+dfsg-2.3+deb9u2 500 500 http://192.168.0.10/build2 ucs_4.3-0-extsec4.3/all/ Packages
CLOSED: Released as extsec4.3 update