Ubuntu notice USN-8986-1 flags email address sanitisation flaw in Swift Mailer

Ubuntu Security Notice USN-8986-1 reports that Swift Mailer does not properly sanitise e-mail addresses in its mail transport, allowing a remote attacker to inject extra parameters into the mail command and possibly execute arbitrary code. Dawid Golunski is credited with the discovery. No CVE ID, affected package versions or fixed versions are given in the text provided. Defenders should identify applications using Swift Mailer and apply the update referenced in USN-8986-1 once confirmed for their releases.

For security analysts · Written by AI from 1 source · Wrong?