Medium ELSA-2021-4315 1 CVE

Moderate: spamassassin security update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Ecosystem: Oracle Linux

Summary

[3.4.4-4.el4]
- Fix header parsing

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	spamassassin	0:3.4.4-4.el8

Vulnerabilities 1

Unscored —

CVE-2020-1946

Apache SpamAssassin has an OS Command Injection vulnerability

In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, us…

Apache Software Foundation Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine

Mar 25, 2021