Skip to content
OpenAdvisories
Unscored USN-4265-2 2 CVEs

spamassassin vulnerabilities

Published Feb 4, 2020 · Updated Feb 10, 2026

Summary

USN-4265-1 fixed several vulnerabilities in SpamAssassin. This update provides
the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM.

Original advisory details:

It was discovered that SpamAssassin incorrectly handled certain CF files.
If a user or automated system were tricked into using a specially-crafted
CF file, a remote attacker could possibly run arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS spamassassin 3.4.2-0ubuntu0.14.04.1+esm2

Vulnerabilities 2

References

  • report
    https://ubuntu.com/security/CVE-2020-1930
  • report
    https://ubuntu.com/security/CVE-2020-1931