[#33952] - [4.0] Composer update phpmailer to version 6.4.1
- Fixed in Code Base
- 18 May 2021
- Medium
- Build: 4.0-dev
- # 33952
- Diff
- richard67:4.0-dev-composer-update-phpmailer
User tests: Successful: Unsuccessful:
Pull Request for Issue # .
Summary of Changes
This pull request (PR) updates the PHP Mailer to version 6.4.1.
The reason for that is the reported security issue here: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36326 .
Joomla 3.x is not affected by this issue because in 3.x we use version 5.
Testing Instructions
-
On a 4.0 site with current 4.0-dev branch where composer and npm have been run, configure mailing so that it works (SMTP, mail() or sendmail doesn't matter).
-
Check that mail works by sending the test mail from Global Configuration.
Result: The email is sent.
-
Apply the patch of this PR.
-
Run
composer install.
Result: Only the phpmailer/phpmailer is updated, nothing else.
- Repeat step 2.
Result: The email is sent.
Actual result BEFORE applying this Pull Request
Mail works, phpmailer version is 6.4.0.
Expected result AFTER applying this Pull Request
Mail works, phpmailer version is 6.4.1.
Documentation Changes Required
None.
| Status | New | ⇒ | Pending |
joomla-cms-bot
- | Category | ⇒ | External Library Composer Change |
I don't think this is right - I believe Joomla has forked phpMailer right? and therefore someone has to manually merge upstream changes https://github.com/joomla-backports/PHPMailer
@PhilETaylor What you write applies to Joomla 3, but this here is for 4 and as you can see we have it in composer.json
yup - almost bedtime - sorry.
@PhilETaylor P.S.: The backport was moved to this repo for Joomla 3 with PR #33772 .
| Status | Pending | ⇒ | Fixed in Code Base |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2021-05-18 22:06:58 |
| Closed_By | ⇒ | wilsonge | |
| Labels |
Added:
?
?
|
||
Simple version bump merging on review
Thanks!
I don't think this is right - I believe Joomla has forked phpMailer right? and therefore someone has to manually merge upstream changes https://github.com/joomla-backports/PHPMailer