libphp-phpmailer (5.2.9+dfsg-2+deb8u4) jessie-security; urgency=medium

  New changes with this version
  -----------------------------
  From 5.2.9+dfsg-2+deb8u4 phpmailer explicitly does not support passing
  URLs in addAttachment() ie no remote file attachments. PHPMailer is not
  an HTTP client. If you need to do that, fetch the resource yourself and
  pass it in via a local file or string. This is to avoid object
  injection attack 

 -- Abhijith PA <abhijith@disroot.org>  Thu, 22 Nov 2018 19:40:09 +0530