Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Debian 8: DSA-3416-1 Critical: libphp-phpmailer Email Injection

debian
Calendar Grey December 13, 2015
Debian Logo
Debian enhances libphp-phpmailer to mitigate email injection vulnerability highlighted by Takeshi Terada.
Takeshi Terada discovered a vulnerability in PHPMailer, a PHP library for email transfer, used by many CMSs

Summary

For the oldstable distribution (wheezy), this problem has been fixed in
version 5.1-1+deb6u11.

For the stable distribution (jessie), this problem has been fixed in
version 5.2.9+dfsg-2+deb8u1.

For the unstable distribution (sid), this problem has been fixed in
version 5.2.14+dfsg-1.

We recommend that you upgrade your libphp-phpmailer packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libphp-phpmailer
CVE ID: CVE-2015-8476

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here