Package: owl-dms Severity: grave Tags: security A security bug has been discovered in PHPMailer:
| PHPMailer 1.7, when configured to use sendmail, allows remote | attackers to execute arbitrary shell commands via shell metacharacters | in the SendmailSend function in class.phpmailer.php <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3215> <https://sourceforge.net/tracker/index.php?func=detail&aid=1734811&group_id=26031&atid=385707> Your package contains a copy of PHPMailer. Please mention the name CVE-2007-3215 in the changelog when fixing this bug. A security update for stable may be necessary. PS: Please remove your copy of PHPMailer and use the package libphp-phpmailer instead. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]