Unscored DLA-1578-1 4 CVEs

spamassassin - security update

Published Nov 13, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	spamassassin	3.4.2-0+deb8u1

Vulnerabilities 4

Unscored —

CVE-2016-1238

(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scri…

perl perl perl spamassassin Debian Ubuntu Alpine

Aug 2, 2016
Unscored —

CVE-2017-15705

A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability ari…

Apache Software Foundation Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine

Sep 17, 2018
Unscored —

CVE-2018-11780 EPSS 11%

A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.

Apache Software Foundation Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine

Sep 17, 2018
Unscored —

CVE-2018-11781

Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.

Apache Software Foundation Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine

Sep 17, 2018