Change log for libphp-phpmailer package in Debian

libphp-phpmailer (6.8.1-1) unstable; urgency=medium

  * New upstream release
  * watch: update to use github API

 -- Paul Gevers <email address hidden>  Sun, 29 Oct 2023 15:05:04 +0100

Available diffs

• diff from 6.6.3-1 to 6.8.1-1 (16.0 KiB)

libphp-phpmailer (6.6.3-1) unstable; urgency=medium

  * New upstream release
    - Fixes CVE-2021-3603 (Closes: #991666)
  * Remove all patches, applied upstream

 -- Paul Gevers <email address hidden>  Thu, 28 Jul 2022 08:37:59 +0200

Available diffs

• diff from 6.2.0-2 to 6.6.3-1 (41.7 KiB)

libphp-phpmailer (6.2.0-2) unstable; urgency=medium

  * Add upstream patches to fix CVE-2020-36326 (Closes: #988732)

 -- Paul Gevers <email address hidden>  Tue, 18 May 2021 21:29:05 +0200

Available diffs

• diff from 6.2.0-1 to 6.2.0-2 (1.1 KiB)

libphp-phpmailer (6.2.0-1) unstable; urgency=medium

  * New upstream release

 -- Paul Gevers <email address hidden>  Wed, 06 Jan 2021 20:59:29 +0100

Available diffs

• diff from 6.1.8-1 to 6.2.0-1 (10.4 KiB)

libphp-phpmailer (6.1.8-1) unstable; urgency=medium

  * New upstream version 6.1.8

 -- Paul Gevers <email address hidden>  Sat, 17 Oct 2020 22:13:09 +0200

Available diffs

• diff from 6.1.7-1 to 6.1.8-1 (4.7 KiB)

libphp-phpmailer (6.1.7-1) unstable; urgency=medium

  * New upstream version 6.1.7

 -- Paul Gevers <email address hidden>  Tue, 28 Jul 2020 09:10:29 +0200

Available diffs

• diff from 6.1.6-1 to 6.1.7-1 (4.1 KiB)

libphp-phpmailer (6.1.6-1) unstable; urgency=medium

  * New upstream version 6.1.6
    - CVE-2020-13625 an output escaping bug when the name of a file
      attachment contains a double quote character. This can result in
      the file type being misinterpreted by the receiver or any mail
      relay processing the message (Closes: #962827)
  * Add myself as uploader
  * Drop Kevin Coyner <email address hidden> as uploader (Closes: #929548)
  * Point Vcs-* fields to the dgit server for now as Alioth is gone

 -- Paul Gevers <email address hidden>  Mon, 22 Jun 2020 20:31:41 +0200

Available diffs

• diff from 6.1.5-0.1 to 6.1.6-1 (4.5 KiB)

libphp-phpmailer (6.1.5-0.1) unstable; urgency=medium

  * Non-maintainer upload
  * New upstream version 6.1.5 (Closes: #956292)

 -- Paul Gevers <email address hidden>  Wed, 22 Apr 2020 22:11:37 +0200

Available diffs

• diff from 6.0.6-0.1 to 6.1.5-0.1 (37.4 KiB)

libphp-phpmailer (5.2.14+dfsg-2.3+deb9u1) stretch-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * object injection vulnerability (CVE-2018-19296) (Closes: #913912)

 -- Salvatore Bonaccorso <email address hidden>  Sat, 01 Dec 2018 15:09:47 +0100

libphp-phpmailer (6.0.6-0.1) unstable; urgency=medium

  * Non-maintainer upload.
  * New upstream release (Closes: #905254)
  * Drop patches, applied upstream

 -- Paul Gevers <email address hidden>  Sun, 13 Jan 2019 09:30:40 +0100

Available diffs

• diff from 5.2.14+dfsg-2.4 to 6.0.6-0.1 (210.2 KiB)

libphp-phpmailer (5.2.14+dfsg-2.4) unstable; urgency=medium

  * Non-maintainer upload.
  * object injection vulnerability (CVE-2018-19296) (Closes: #913912)

 -- Salvatore Bonaccorso <email address hidden>  Sat, 01 Dec 2018 15:09:47 +0100

Available diffs

• diff from 5.2.14+dfsg-2.3 to 5.2.14+dfsg-2.4 (2.1 KiB)

libphp-phpmailer (5.2.14+dfsg-2.3) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix CVE-2017-5223:
    It was discovered that there was a local file disclosure vulnerability in
    libphp-phpmailer, a email transfer class for PHP, where insufficient
    parsing of HTML messages could potentially be used by attacker to read a
    local file. (Closes: #853232)

 -- Markus Koschany <email address hidden>  Sat, 25 Feb 2017 19:15:08 +0100

Available diffs

• diff from 5.2.14+dfsg-2.2 to 5.2.14+dfsg-2.3 (2.3 KiB)

libphp-phpmailer (5.2.9+dfsg-2+deb8u3) jessie-security; urgency=medium

  * Non-maintainer upload by the Security Team.
  * Fix a regression introduced in 5.2.9+dfsg-2+deb8u2, where calling
    isSendmail() method together with a sendmail_path containing command
    line parameters would erroneously throw an error. Upstream commit
    ed4e7ce8.

 -- Thijs Kinkhorst <email address hidden>  Tue, 03 Jan 2017 16:03:56 +0100

libphp-phpmailer (5.2.14+dfsg-2.2) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix regression in previous update: remove check for
    Sendmail binary, upstream commit ed4e7ce8.

 -- Thijs Kinkhorst <email address hidden>  Mon, 02 Jan 2017 14:21:27 +0000

Available diffs

• diff from 5.2.14+dfsg-2.1 to 5.2.14+dfsg-2.2 (1.2 KiB)

libphp-phpmailer (5.2.14+dfsg-2.1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix CVE-2016-10033 (and CVE-2016-10045): apply commits
    4835657c 9743ff5c 833c35fe from upstream. Closes: #849365.

 -- Thijs Kinkhorst <email address hidden>  Fri, 30 Dec 2016 11:22:28 +0000

Available diffs

• diff from 5.2.14+dfsg-2 to 5.2.14+dfsg-2.1 (2.1 KiB)

libphp-phpmailer (5.1-1.1) oldstable-security; urgency=high

  * CVE-2015-8476: Reject line breaks in to, from, and HELO calls to avoid
    command injection. (Closes: #807265)

 -- Chris Lamb <email address hidden>  Thu, 10 Dec 2015 07:55:03 +0200

libphp-phpmailer (5.2.14+dfsg-2) unstable; urgency=medium

  * Team upload
  * Update Standards-Version to 3.9.7
  * Rebuild with latest pkg-php-tools for the PHP 7.0 transition

 -- David Prévot <email address hidden>  Sat, 05 Mar 2016 10:55:42 -0400

Available diffs

• diff from 5.2.14+dfsg-1build1 (in Ubuntu) to 5.2.14+dfsg-2 (760 bytes)

libphp-phpmailer (5.2.9+dfsg-2+deb8u1) jessie-security; urgency=high

  * gbp.conf: Track the jessie branch
  * Backport fix from 5.2.14:
    PHPMailer Message Injection Vulnerability [CVE-2015-8476] (Closes: #807265)

 -- David Prévot <email address hidden>  Mon, 07 Dec 2015 09:32:13 -0400

libphp-phpmailer (5.2.14+dfsg-1) unstable; urgency=medium

  * Team upload

  [ Synchro ]
  * Don't allow line breaks in addresses [CVE-2015-8476] (Closes: #807265)
  * Don't allow line breaks in SMTP commands
  * Bump version to 5.2.14

  [ David Prévot ]
  * Remove self from Uploaders
  * Fix actual autoloader path

 -- David Prévot <email address hidden>  Sun, 06 Dec 2015 19:03:36 -0400

Available diffs

• diff from 5.2.10+dfsg-1 to 5.2.14+dfsg-1 (50.5 KiB)

libphp-phpmailer (5.2.10+dfsg-1) unstable; urgency=medium

  [ David Prévot ]
  * Update description
  * Provide homemade static autoload.php
  * Update copyright

  [ Synchro ]
  * Remove 'advanced' html2text converter
  * Bump version to 5.2.10

 -- David Prévot <email address hidden>  Fri, 08 May 2015 08:25:08 -0400

Available diffs

• diff from 5.2.9+dfsg-2 to 5.2.10+dfsg-1 (65.4 KiB)

libphp-phpmailer (5.2.9+dfsg-2) unstable; urgency=medium


  * Upload to unstable, in coordination with glpi, only package currently in
    testing that is affected by the autoloader change.

 -- David Prévot <email address hidden>  Thu, 02 Oct 2014 22:23:18 -0400

Available diffs

• diff from 5.2.8+dfsg-1 to 5.2.9+dfsg-2 (39.6 KiB)

libphp-phpmailer (5.2.9+dfsg-1) experimental; urgency=medium


  [ Synchro ]
  * Don't load the autoloader automatically - not a class' job!
  * 5.2.9 release

  [ David Prévot ]
  * Use repacksuffix feature of uscan
  * Bump standards version to 3.9.6
  * Install extra classes
  * Upload to experimental since some packages seem to use the autoloader
    (e.g., galette #763082, glpi #763084, and maybe more)
    Investigation in progress

 -- David Prévot <email address hidden>  Sat, 27 Sep 2014 15:27:11 -0400

libphp-phpmailer (5.2.8+dfsg-1) unstable; urgency=medium


  [ Marcus Bointon ]
  * 5.2.8 release

  [ David Prévot ]
  * Convert copyright to format 1.0
  * Track current active source (Closes: #720393):
    - Improved safe_mode detection (Closes: #588122)
    - Correctly handle S/MIME (Closes: #650496)
  * Exclude sourceless minified JavaScript
  * Maintain by the Debian PHP PEAR Maintainers (Closes: #749631)
  * Use dh short rules
  * Use phpcomposer
  * Bump standards version to 3.9.5
  * Update Homepage
  * Document Vcs-*
  * Update description
  * Convert package to format 3.0

 -- David Prévot <email address hidden>  Tue, 08 Jul 2014 19:46:14 -0400

Available diffs

• diff from 5.1-1 (in Ubuntu) to 5.2.8+dfsg-1 (185.3 KiB)

libphp-phpmailer (5.1-1) unstable; urgency=low


  * New upstream version. Closes: #559881.
  * debian/copyright:
    + Included new author Marcus Bointon. and updated
    + Updated copyright date for Andy Prevost.
    + Updated copyright symbols to be lintian clean.
  * Updated debian/watch.
  * Removed line in debian/rules and debian/docs regarding Changelog.txt.

 -- Kevin Coyner <email address hidden>  Thu, 10 Dec 2009 10:27:21 -0500

libphp-phpmailer (2.3-2) unstable; urgency=low


  * Change Section from web to php in debian/control. 

 -- Kevin Coyner <email address hidden>  Mon, 19 Oct 2009 07:34:15 -0400

libphp-phpmailer (2.3-1) unstable; urgency=low


  * New upstream version. Closes: #524445. 
  * debian/control:
    + Updated Standards-Version to 3.8.3.
    + Bumped debhelper version to 7.4~.
  * Bumped debian/compat to 7 from 5.
  * Removed phpdoc from debian/docs as upstream no longer provides it. Similar
    documentation is now found at http://phpmailer.codeworxtech.com.
  * debian/rules:
    + Changed dh_clean -k to dh_prep in the install stanza.
    + Removed reference to phpdoc in the dh_installdocs call.

 -- Kevin Coyner <email address hidden>  Sun, 18 Oct 2009 22:56:03 -0400

libphp-phpmailer (2.1-1) unstable; urgency=low


  * New upstream version. Note that this version is only compatible with php5.
    Closes: #490385
  * debian/control:
    + Updated Standards-Version to 3.8.0.
    + Moved homepage from long description to its own field.
    + Removed dependency on dpatch.
    + Removed php4 entries from Depends.
  * Updated debian/watch.
  * Updated debian/copyright.
  * Removed patch files no longer needed from earlier version. Also removed
    dpatch references in debian/rules.

 -- Kevin Coyner <email address hidden>  Sat, 04 Oct 2008 15:48:18 -0400

libphp-phpmailer (1.73-6) unstable; urgency=low


  * Re-order debian/control Depends: line so php5 dependencies precede php4.

 -- Kevin Coyner <email address hidden>  Sun, 12 Aug 2007 19:58:40 -0400