Fedora Linux 8608 Published by

A php-phpmailer6 security update has been released for Fedora 38.

[SECURITY] Fedora 38 Update: php-phpmailer6-6.8.1-1.fc38

Fedora Update Notification
2023-09-07 01:27:49.829916

Name : php-phpmailer6
Product : Fedora 38
Version : 6.8.1
Release : 1.fc38
URL : https://github.com/PHPMailer/PHPMailer
Summary : Full-featured email creation and transfer class for PHP
Description :
PHPMailer - A full-featured email creation and transfer class for PHP

Class Features
* Probably the world's most popular code for sending email from PHP!
* Used by many open-source projects:
WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more
* Integrated SMTP support - send without a local mail server
* Send emails with multiple To, CC, BCC and Reply-to addresses
* Multipart/alternative emails for mail clients that do not read HTML email
* Add attachments, including inline
* Support for UTF-8 content and 8bit, base64, binary, and quoted-printable
* SMTP authentication with LOGIN, PLAIN, CRAM-MD5 and XOAUTH2 mechanisms
over SSL and SMTP+STARTTLS transports
* Validates email addresses automatically
* Protect against header injection attacks
* Error messages in 47 languages!
* DKIM and S/MIME signing support
* Compatible with PHP 5.5 and later
* Namespaced to prevent name clashes
* Much more!

Autoloader: /usr/share/php/PHPMailer/PHPMailer6/autoload.php

Update Information:

Minor security note * The DSN support added in 6.8.0 reflects the DSN back to
the user in an error message if it is invalid. If a DSN uses user-supplied input
(a very bad idea), it opens a distant possibility of XSS if the host app does
not escape output. In an abundance of caution, malformed DSNs are no longer
reflected in error messages. Changes * Don't reflect malformed DSNs in
error messages to avert any risk of XSS * Improve Simplified Chinese,
Sinhalese, and Norwegian translations * Don't use setAccessible in PHP >= 8.1
in tests * Avoid a deprecation notice in PHP 8.3 * Fix link in readme

* Tue Aug 29 2023 Remi Collet [remi@remirepo.net] - 6.8.1-1
- update to 6.8.1

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-e51479556c' at the command
line. For more information, refer to the dnf documentation available at

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at