Advisories » MGASA-2017-0438

Updated php-phpmailer packages fix security vulnerability

Publication date: 01 Dec 2017
Modification date: 01 Dec 2017
Type: security
Affected Mageia releases : 5 , 6

Description

Debugoutput wasn't set in constructor according to SAPI in use,
resulting in potential XSS in default debug output.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=22051
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/PJ56RXWJ42PXFZPVRGEDSP4HAE3TNRV6/

SRPMS

6/core

• php-phpmailer-5.2.24-1.1.mga6

5/core

• php-phpmailer-5.2.24-1.1.mga5