Bug#429191: [CVE-2007-3215] remote shell command injection in PHPMailer

[Florian Weimer <fw@deneb.enyo.de>]

Package: flyspray
Severity: grave
Tags: security

A security bug has been discovered in PHPMailer:

| PHPMailer 1.7, when configured to use sendmail, allows remote
| attackers to execute arbitrary shell commands via shell metacharacters
| in the SendmailSend function in class.phpmailer.php

<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3215>
<https://sourceforge.net/tracker/index.php?func=detail&aid=1734811&group_id=26031&atid=385707>

Your package contains a copy of PHPMailer.

Please mention the name CVE-2007-3215 in the changelog when fixing
this bug.  A security update for stable may be necessary.

PS: Please remove your copy of PHPMailer and use the package
libphp-phpmailer instead.