Unscored DLA-2037-1 2 CVEs

spamassassin - security update

Published Dec 16, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	spamassassin	3.4.2-0+deb8u2

Vulnerabilities 2

Unscored —

CVE-2018-11805

In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or …

Apache Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine

Dec 12, 2019
Unscored —

CVE-2019-12420

In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.…

Apache Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine

Dec 12, 2019