Lucene search
Gentoo FoundationMGASA-2021-0182HistoryApr 12, 2021 - 10:59 p.m.
Updated spamassassin packages fix security vulnerability
2021-04-1222:59:59
Gentoo Foundation
advisories.mageia.org
13
0.016 Low
EPSS
Percentile
87.6%
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places. (CVE-2020-1946)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 7 | noarch | spamassassin | <Â 3.4.5-1 | spamassassin-3.4.5-1.mga7 |
| Mageia | 7 | noarch | spamassassin-rules | <Â 3.4.5-1 | spamassassin-rules-3.4.5-1.mga7 |
| Mageia | 8 | noarch | spamassassin | <Â 3.4.5-1 | spamassassin-3.4.5-1.mga8 |
| Mageia | 8 | noarch | spamassassin-rules | <Â 3.4.5-1 | spamassassin-rules-3.4.5-1.mga8 |
Related
osv
osv
Moderate: spamassassin security update
2021-11-09 08:58:53
spamassassin vulnerability
2021-04-12 12:21:53
spamassassin - security update
2021-04-02 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: spamassassin-3.4.5-1.fc33
2021-04-04 01:08:25
[SECURITY] Fedora 32 Update: spamassassin-3.4.5-1.fc32
2021-04-04 00:48:10
[SECURITY] Fedora 34 Update: spamassassin-3.4.5-1.fc34
2021-03-31 00:18:05
nessus
nessus
Debian DLA-2615-1 : spamassassin security update
2021-04-02 00:00:00
Amazon Linux 2 : spamassassin (ALAS-2021-1642)
2021-05-24 00:00:00
CentOS 8 : spamassassin (CESA-2021:4315)
2021-11-11 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4899-1)
2021-04-02 00:00:00
Huawei EulerOS: Security Advisory for spamassassin (EulerOS-SA-2021-2230)
2021-07-19 00:00:00
Fedora: Security Advisory for spamassassin (FEDORA-2021-5a4377797c)
2021-04-04 00:00:00
ubuntu
ubuntu
SpamAssassin vulnerability
2021-04-01 00:00:00
SpamAssassin vulnerability
2021-04-12 00:00:00
ubuntucve
ubuntucve
CVE-2020-1946
2020-12-31 00:00:00
redhat
redhat
(RHSA-2021:4315) Moderate: spamassassin security update
2021-11-09 08:58:53
prion
prion
Design/Logic Flaw
2021-03-25 10:15:00
debian
debian
[SECURITY] [DLA 2615-1] spamassassin security update
2021-04-01 21:29:41
[SECURITY] [DSA 4879-1] spamassassin security update
2021-03-27 17:18:38
[SECURITY] [DSA 4879-1] spamassassin security update
2021-03-27 17:18:19
cvelist
cvelist
CVE-2020-1946 Apache SpamAssassin has an OS Command Injection vulnerability
2021-03-25 09:20:11
altlinux
altlinux
Security fix for the ALT Linux 9 package spamassassin version 3.4.5-alt1
2021-03-29 00:00:00
veracode
veracode
Command Injection
2021-03-28 05:51:06
almalinux
almalinux
Moderate: spamassassin security update
2021-11-09 08:58:53
debiancve
debiancve
CVE-2020-1946
2021-03-25 10:15:00
oraclelinux
oraclelinux
spamassassin security update
2021-11-16 00:00:00
redhatcve
redhatcve
CVE-2020-1946
2021-03-25 17:52:55
rocky
rocky
spamassassin security update
2021-11-09 08:58:53
amazon
amazon
Medium: spamassassin
2021-05-20 16:55:00
freebsd
freebsd
alpinelinux
alpinelinux
CVE-2020-1946
2021-03-25 10:15:00
cve
cve
CVE-2020-1946
2021-03-25 10:15:00
gentoo
gentoo
SpamAssassin: Arbitrary command execution
2021-05-26 00:00:00
suse
suse
Security update for spamassassin (important)
2021-04-14 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1973
2021-07-02 18:08:24