Attachment 199459 Details for Bug 233416 – support all phpmailler ports and tt-rss

[patch] support all phpmailler ports and tt-rss

0001-CVE-2018-19296-applies-for-phpmailer-tt-rss.patch (text/plain), 1.56 KB, created by Derek Schrock on 2018-11-22 23:05:33 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Derek Schrock

Created: 2018-11-22 23:05:33 UTC

Size: 1.56 KB

patch

obsolete

>From 67faab2344fbde62edf0fec5b0879815f9113a19 Mon Sep 17 00:00:00 2001
>From: Derek Schrock <dereks@lifeofadishwasher.com>
>Date: Thu, 22 Nov 2018 17:59:05 -0500
>Subject: [PATCH] CVE-2018-19296 applies for phpmailer* tt-rss
>
>---
> security/vuxml/vuln.xml | 14 ++++++++++++--
> 1 file changed, 12 insertions(+), 2 deletions(-)
>
>diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
>index f30d9fdd67b5..92c56bae1539 100644
>--- a/security/vuxml/vuln.xml
>+++ b/security/vuxml/vuln.xml
>@@ -101,12 +101,20 @@ Notes:
>   </vuln>
> 
>   <vuln vid="b036faba-edd8-11e8-b3b7-00e04c1ea73d">
>-    <topic>phpmailer6 -- Multiple vulnerability</topic>
>+    <topic>phpmailer* -- Multiple vulnerability</topic>
>     <affects>
>       <package>
> 	<name>phpmailer6</name>
> 	<range><lt>6.0.6</lt></range>
>       </package>
>+      <package>
>+	<name>phpmailer</name>
>+	<range><lt>5.2.7</lt></range>
>+      </package>
>+      <package>
>+	<name>tt-rss</name>
>+	<range><le>g20180908</le></range>
>+      </package>
>     </affects>
>     <description>
>       <body xmlns="http://www.w3.org/1999/xhtml">
>@@ -117,8 +125,10 @@ Notes:
>       </body>
>     </description>
>     <references>
>-      <url>https://github.com/PHPMailer/PHPMailer/releases/tag/v6.0.6</url>
>       <cvename>CVE-2018-19296</cvename>
>+      <url>https://github.com/PHPMailer/PHPMailer/releases/tag/v6.0.6</url>
>+	  <url>https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.27</url>
>+	  <url>https://discourse.tt-rss.org/t/phpmailer-cve-2018-19296-update/1635</url>
>     </references>
>     <dates>
>       <discovery>2018-11-16</discovery>
>-- 
>2.19.1
>

Actions: View | Diff

Attachments on bug 233416: 199459