Install
Works with Drupal: 7.xUsing Composer to manage Drupal site dependencies
Downloads
Release notes
Fixes PHPmailer 3rd party library -- DRUPAL-SA-PSA-2016-004
This is a patch release of the SwiftMailer Module.
The release contains a security hardening for e-mail validation during email delivery. Please make sure that you update the SwiftMailer (the PHP Library) as well. SwiftMailer had an important security release in version 5.4.5.
Prior to 5.4.5, the mail transport (Swift_Transport_MailTransport) was vulnerable to passing arbitrary shell arguments if the "From", "ReturnPath" or "Sender" header came from a non-trusted source, potentially allowing Remote Code Execution
Please read the SwiftMailer CHANGELOG and CVE-2016-10074 for more information.
The default path of the library is sites/all/libraries/swiftmailer
.