{"action":"published","release":{"url":"https://api.github.com/repos/PHPMailer/PHPMailer/releases/2053006","assets_url":"https://api.github.com/repos/PHPMailer/PHPMailer/releases/2053006/assets","upload_url":"https://uploads.github.com/repos/PHPMailer/PHPMailer/releases/2053006/assets{?name,label}","html_url":"https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.14","id":2053006,"tag_name":"v5.2.14","target_commitish":"master","name":"PHPMailer 5.2.14","draft":false,"author":{"login":"Synchro","id":81561,"avatar_url":"https://avatars.githubusercontent.com/u/81561?v=3","gravatar_id":"","url":"https://api.github.com/users/Synchro","html_url":"https://github.com/Synchro","followers_url":"https://api.github.com/users/Synchro/followers","following_url":"https://api.github.com/users/Synchro/following{/other_user}","gists_url":"https://api.github.com/users/Synchro/gists{/gist_id}","starred_url":"https://api.github.com/users/Synchro/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Synchro/subscriptions","organizations_url":"https://api.github.com/users/Synchro/orgs","repos_url":"https://api.github.com/users/Synchro/repos","events_url":"https://api.github.com/users/Synchro/events{/privacy}","received_events_url":"https://api.github.com/users/Synchro/received_events","type":"User","site_admin":false},"prerelease":false,"created_at":"2015-11-01T10:15:28Z","published_at":"2015-11-01T10:47:36Z","assets":[],"tarball_url":"https://api.github.com/repos/PHPMailer/PHPMailer/tarball/v5.2.14","zipball_url":"https://api.github.com/repos/PHPMailer/PHPMailer/zipball/v5.2.14","body":"This release contains an important security update.\r\n\r\n## Security update\r\nTakeshi Terada discovered that PHPMailer accepted addresses containing line breaks. This is valid in RFC5322, but allowing such addresses resulted in invalid RFC5321 SMTP commands, permitting a kind of message injection attack. These addresses were allowed by the 'pcre8' validator pattern (the default in recent PHP versions). This has been mitigated by rejecting line breaks during address validation, and also by rejecting line breaks in SMTP commands, which addresses the problem for applications using the SMTP class directly.\r\n\r\n## Internationalized domain names\r\nIn better news, this release also introduces support for internationalized domain names (IDNs) thanks to @fbonzon. A significant effect of this is that the point at which addresses are validated may change; since an IDN may depend on the current value of `CharSet` (which can be changed at any time), validations of addresses potentially containing IDNs are queued and not actually checked until `send()` is called rather than when the address is added. You may now use addresses like `test@françois.ch` and pre-punycoded addreses like `test@xn--franois-xxa.ch` everywhere that addresses are used in PHPMailer.\r\n\r\n## POP3\r\nThere is now better access to POP3 errors (when using POP-before-SMTP), and can now access POP3 properties and methods from subclasses.\r\n\r\nUpdated Russian and Brazilian Portuguese translations."}}