Unscored DSA-4584-1 2 CVEs

spamassassin - security update

Published Dec 14, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 10	spamassassin	3.4.2-1+deb10u1
Debian · 9	spamassassin	3.4.2-1~deb9u2

Vulnerabilities 2

Unscored —

CVE-2018-11805

In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or …

Apache Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine

Dec 12, 2019
Unscored —

CVE-2019-12420

In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.…

Apache Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine

Dec 12, 2019