Skip to content

Mail 1.8.2 released

Compare
Choose a tag to compare
@derickr derickr released this 12 Nov 13:41
· 66 commits to master since this release

This release addresses a security vulnerability (#58). All users are advised to upgrade

The full ChangeLog:

  • Added support for XOAUTH2 authentication method for SMTP transport (Ian Berry).
  • Fixed a bug with a space around file names in Content-Disposition headers (Alexey Alyoshin)
  • Allow ezcMailVirtualFile and ezcMailStreamFile to be handled in ezcMail::walkParts (Brend Rathmanner)
  • Fixed empty filename in file_parser (Michael Kliewe)
  • Update STARTTLS parsing to allow "250 STARTTLS" (John Corser)
  • Fixed issue #58: Restrict the set of characters that can be used as the email address for the ezcMail returnPath property. (CVE-2017-15806, reported by "Kay")

Contributors are:

  • Alexey Alyoshin
  • Brend Rathmanner
  • Ian Berry
  • John Corser
  • "Kay"
  • Michael Kliewe