GHSA-45xg-4w5x-j429 TYPO3 Arbitrary Shell Execution in Swiftmailer library

• Packagist typo3/cms: >= 6.2.0, < 6.2.6 → fixed in 6.2.6 • Packagist typo3/cms: >= 6.1.0, < 6.1.12 → fixed in 6.1.12 • Packagist typo3/cms: >= 4.7.0, < 4.7.20 → fixed in 4.7.20 • Packagist typo3/cms: >= 4.5.0, < 4.5.37 → fixed in 4.5.37

The swiftmailer library in use allows to execute arbitrary shell commands if the "From" header comes from a non-trusted source and no "Return-Path" is configured. Affected are only TYPO3 installation the configuration option ``` $GLOBALS['TYPO3_CONF_VARS']['MAIL']['transport'] ``` is set to "sendmail". Installations with the default configuration are not affected.