Debian: DSA-4351-1: libphp-phpmailer security update
(Dec 7) It was discovered that PHPMailer, a library to send email from PHP applications, is prone to a PHP object injection vulnerability, potentially allowing a remote attacker to execute arbitrary code.