ELSA-2018-2916 — Important: spamassassin security update (Oracle Linux 7)

Summary

[3.4.0-4]
- Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
- which are no longer auto-generated due to a (expected) change in rpm-build
- Related: rhbz#1632998

[3.4.0-3]
- Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
- Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
- scan timeouts and resulting denial of service
- Resolves: rhbz#1632998

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	spamassassin	0:3.4.0-4.el7_5

Vulnerabilities 2

Unscored —

CVE-2017-15705

A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability ari…

Apache Software Foundation Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine

Sep 17, 2018
Unscored —

CVE-2018-11781

Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.

Apache Software Foundation Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine

Sep 17, 2018

Important: spamassassin security update (Oracle Linux 7)

Summary

Fixed packages 1

Vulnerabilities 2

A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability ari…

Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.