It was discovered that there was an escaping issue in libphp-phpmailer, an email generation utility class for the PHP programming language. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2306-1
It was discovered that there was an escaping issue in libphp-phpmailer, an email generation utility class for the PHP programming language. . Package : libphp-phpmailer Version : 5.2.9+dfsg-2+deb8u6 CVE ID : CVE-2020-13625 It was discovered that there was an escaping issue in libphp-phpmailer, an email generation utility class for the PHP programming language. The `Content-Type` and `Content-Disposition` headers could have permitted file attachments that bypassed attachment filters which match on filename extensions. For more information, please see the following URL: https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-f7hx-fqxw-rvvj For Debian 8 "Jessie", this issue has been fixed in libphp-phpmailer version 5.2.9+dfsg-2+deb8u6. We recommend that you upgrade your libphp-phpmailer packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS Regards, - -- ,'`. : :' : Chris Lamb `. `'`
Repairs multibyte string escaping vulnerability.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2006-703 2006-06-13 ---------------------------------------------------------------------Product : Fedora Core 4 Name : mysql Version : 4.1.20 Release : 1.FC4.1 Summary : MySQL client programs and shared libraries. Description : MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the MySQL client programs, the client shared libraries, and generic MySQL files. ---------------------------------------------------------------------Update Information: Repairs multibyte string escaping vulnerability. ---------------------------------------------------------------------* Thu Jun 1 2006 Tom Lane 4.1.20-1.FC4.1 - Update to MySQL 4.1.20 (fixes CVE-2006-2753) ---------------------------------------------------------------------This update can be downloaded from: f9d7512362a9d098339fe1095b1eaf304fd6082e SRPMS/mysql-4.1.20-1.FC4.1.src.rpm f9d7512362a9d098339fe1095b1eaf304fd6082e noarch/mysql-4.1.20-1.FC4.1.src.rpm 292bad3ea934f89db78b3eba2b55bf8ea2bae7f4 ppc/mysql-4.1.20-1.FC4.1.ppc.rpm 758ca4284f66f9ca6e88c41eb3452e7ec209c9a3 ppc/mysql-server-4.1.20-1.FC4.1.ppc.rpm 91d8729a8c8c7f67bdfc3e9bb9ffeebe39f5337e ppc/mysql-devel-4.1.20-1.FC4.1.ppc.rpm 9765d31fccf06a1038aec1bfa03f08917abbeb95 ppc/mysql-bench-4.1.20-1.FC4.1.ppc.rpm 7e7c8a3e17fa30b2f7815d36b92ab3c58555867c ppc/debug/mysql-debuginfo-4.1.20-1.FC4.1.ppc.rpm bf3943073ab82bc5e235b5ab30ade2dd954f17f3 x86_64/mysql-4.1.20-1.FC4.1.x86_64.rpm 5a099047243fb308dcb1c4b207b7d4ddae60e247 x86_64/mysql-server-4.1.20-1.FC4.1.x86_64.rpm 342b58d9388276c9284aa7336927fd5e5e1669f9 x86_64/mysql-devel-4.1.20-1.FC4.1.x86_64.rpm c069cfaa7263fac4152c782c8b0852f9b58c6bf8 x86_64/mysql-bench-4.1.20-1.FC4.1.x86_64.rpm f189ec9fcb823946b597c94ebd8e97cfc806bad9 x86_64/debug/mysql-debuginfo-4.1.20-1.FC4.1.x86_64.rpm 4685407fc3d74c374f303972e8c7d9426251a08e i386/mysql-4.1.20-1.FC4.1.i386.rpm 0d3793c3afa3df8af3dc3db7cef77fc1b6138f31 i386/mysql-server-4.1.20-1.FC4.1.i386.rpm 3edbc9f896f3bc7333883b37387d70739a0236b8 i386/mysql-devel-4.1.20-1.FC4.1.i386.rpm f8922d149279b1e93fa32ad416870b370341565e i386/mysql-bench-4.1.20-1.FC4.1.i386.rpm 1713824ea3a2227e9ac68aa466720c0bcdca9e01 i386/debug/mysql-debuginfo-4.1.20-1.FC4.1.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at . ---------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Get the latest Linux and open source security news straight to your inbox.