Problem/Motivation

In 12.0.0 we've moved away from drupal/swiftmailer to symfony mailer, it's time to remove our dependency.

Comments

ronaldtebrake created an issue. See original summary.

ronaldtebrake’s picture

ronaldtebrake commented
Issue summary: View changes
nkoporec’s picture

nkoporec
Primary language English
Location Slovenia
commented
Status: Active » Needs review

PR: https://github.com/goalgorilla/open_social/pull/3736

ronaldtebrake’s picture

ronaldtebrake commented
Status: Needs review » Fixed

will be in 13.0.0

pefferen’s picture

pefferen commented

thanks for the fix, is there any timeline for the 13.0.0 version

pefferen’s picture

pefferen commented
Related issues: +#3254517: 13.0.0 - Paying off tech-debt - Release plan

reposting gist of response from @ronaldtebrake on Slack. added Version 13 meta issue #3254517

and solved the composer security issue by removing the dependency via the following addition to our projects composer.json:

"replace": {
  "drupal/swiftmailer": "*"
},

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

szato’s picture

szato commented

Because of
https://www.drupal.org/sa-contrib-2024-006

Project: Swift Mailer
Date: 2024-January-24
Security risk: Moderately critical 12∕25 AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: Access bypass
Affected versions: *

All versions are effected, so

"replace": {
  "drupal/swiftmailer": "*"
},

will not solve the composer security issue :(

jpontet’s picture

jpontet commented

@ronaldtebrake just wondered why it is necessary to wait for a v13 to get swiftmailer removed? And do you have a timeline for the v13 release?