libphp-phpmailer vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

* Ubuntu 18.04 LTS

Summary

Attachments with specially crafted filenames could bypass
filename-based mail attachment filters.

Software Description

* libphp-phpmailer - full featured email transfer class for PHP

Details

Elar Lang discovered that PHPMailer did not properly escape double
quote characters in filenames. A remote attacker could possibly
exploit this with a crafted filename to bypass attachment filters
that are based on matching filename extensions. (CVE-2020-13625)

Update instructions

The problem can be corrected by updating your system to the
following package versions:

Ubuntu 18.04 LTS
libphp-phpmailer - 5.2.14+dfsg-2.3+deb9u2build0.18.04.1

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

In general, a standard system update will make all the necessary
changes.

References

* CVE-2020-13625

--- Mystic BBS v1.12 A46 (Linux/64)
* Origin: BZ&BZ BBS (21:4/110)