MHonArc before 2.6.19 is vulnerable to PHP code injection via commentized subjects. This update fixes it.
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2017-0141.json"