Summary
[3.4.2-10]
- Fixed CVE-2018-11805
- Resolves: rhbz#1787514
- Fixed CVE-2020-1930
- Resolves: rhbz#1820649
- Fixed CVE-2020-1931
- Resolves: rhbz#1820650
[3.4.2-9]
- Fix CVE-2019-12420
- Resolves: rhbz#1812977
[3.4.2-8]
- Removed the obsolete SOUGHT channel for rule updates
- Resolves: rhbz#1630362
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | spamassassin | 0:3.4.2-10.el8 |
Vulnerabilities 4
-
Unscored —
In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or …
-
Unscored —
In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.…
-
Unscored —
A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configurati…
-
Unscored —
A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.…