[#34783] - Backport CVE-2021-34551 and CVE-2021-3603 for PHPMailer
- Fixed in Code Base
- 25 Jul 2021
- Medium
- Build: staging
- # 34783
- Diff
- zero-24:phpmailer_update
User tests: Successful: Unsuccessful:
Pull Request for Issue joomla-backports/PHPMailer#5
Summary of Changes
Backported the fixes for CVE-2021-34551 and CVE-2021-3603
Testing Instructions
Make sure the phpmailer still works
Actual result BEFORE applying this Pull Request
CVE-2020-34551 and CVE-2021-3603
Expected result AFTER applying this Pull Request
CVE-2020-34551 and CVE-2021-3603 patched
Documentation Changes Required
none
| Status | New | ⇒ | Pending |
joomla-cms-bot
- | Category | ⇒ | External Library Composer Change Libraries |
| Labels |
Added:
?
?
|
||
That should fix it if so i'm doing an upstream PR and update here too.
Drone is happy now will update it on the repo and update here: https://ci.joomla.org/joomla/joomla-cms/45819/2/8
Branch updated with the latest changes from the backports repo.
I have tested this item
I've successfully tested this PR with both methods "PHP Mail" and "SMTP".
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/34783.
I have tested this item
tested with method "PHP Mail"
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/34783.
| Status | Pending | ⇒ | Ready to Commit |
RTC
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/34783.
Merging for now thanks!
| Status | Ready to Commit | ⇒ | Fixed in Code Base |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2021-07-25 08:42:16 |
| Closed_By | ⇒ | zero-24 | |
| Labels |
Added:
?
|
||
@zero-24 Unit tests are failing for PHP 5.3, see e.g. https://ci.joomla.org/joomla/joomla-cms/45817/2/8 :
Can it be that the backport uses short array syntax which is not supported in these old PHP versions?