Your message dated Mon, 03 Dec 2018 16:38:24 +0000
with message-id <[email protected]>
and subject line Bug#913912: fixed in libphp-phpmailer 5.2.14+dfsg-2.4
has caused the Debian Bug report #913912,
regarding libphp-phpmailer: CVE-2018-19296
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
913912: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=913912
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libphp-phpmailer
Version: 5.2.14+dfsg-2.3
Severity: grave
Tags: patch security upstream
Hi,
The following vulnerability was published for libphp-phpmailer.
CVE-2018-19296[0]:
| PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object
| injection attack.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2018-19296
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19296
[1]
https://github.com/PHPMailer/PHPMailer/commit/f1231a9771505f4f34da060390d82eadb8448271
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: libphp-phpmailer
Source-Version: 5.2.14+dfsg-2.4
We believe that the bug you reported is fixed in the latest version of
libphp-phpmailer, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <[email protected]> (supplier of updated libphp-phpmailer
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 01 Dec 2018 15:09:47 +0100
Source: libphp-phpmailer
Binary: libphp-phpmailer
Architecture: source
Version: 5.2.14+dfsg-2.4
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <[email protected]>
Changed-By: Salvatore Bonaccorso <[email protected]>
Description:
libphp-phpmailer - full featured email transfer class for PHP
Closes: 913912
Changes:
libphp-phpmailer (5.2.14+dfsg-2.4) unstable; urgency=medium
.
* Non-maintainer upload.
* object injection vulnerability (CVE-2018-19296) (Closes: #913912)
Checksums-Sha1:
3b31513c9bf37763bbc4635c3915d990a51317d6 2243
libphp-phpmailer_5.2.14+dfsg-2.4.dsc
28beff68c75a1a7a6c1cb10e348a964327e7c9e5 10960
libphp-phpmailer_5.2.14+dfsg-2.4.debian.tar.xz
4a0f40f28d6a2c26a40dfacbaf0a2aaffa3e1e45 6158
libphp-phpmailer_5.2.14+dfsg-2.4_source.buildinfo
Checksums-Sha256:
19eb33fe34aeb1f0d4ad62b8dbef31e145764432b0b9a1301615e351dd138278 2243
libphp-phpmailer_5.2.14+dfsg-2.4.dsc
a7089b46160f273a0a769be1dfab95ee5292201d4dba82ac161b2c449f25a516 10960
libphp-phpmailer_5.2.14+dfsg-2.4.debian.tar.xz
ea083005319d244ed78e1d3acf3bcaa36c91225c145ea9a24aac7f1d83905df0 6158
libphp-phpmailer_5.2.14+dfsg-2.4_source.buildinfo
Files:
56695e2d32929d3498e955fa9802443b 2243 php optional
libphp-phpmailer_5.2.14+dfsg-2.4.dsc
f664cdaa28e6f46eb591ce336b4c855c 10960 php optional
libphp-phpmailer_5.2.14+dfsg-2.4.debian.tar.xz
6e9e87693e3ff63a06d617224b979c1f 6158 php optional
libphp-phpmailer_5.2.14+dfsg-2.4_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=e1mA
-----END PGP SIGNATURE-----
--- End Message ---
