840 matches found
Fedora Update for spamassassin FEDORA-2019-dbc586f724
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 31 : spamassassin (2019-dbc586f724)
Update to 3.4.3, with bugfixes and several security fixes. See https://svn.apache.org/repos/asf/spamassassin/branches/3.4/build/annou ncements/3.4.3.txt for the full announcement. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update syst...
[SECURITY] Fedora 31 Update: spamassassin-3.4.3-1.fc31
SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...
PT-2020-2098
Name of the Vulnerable Software and Affected Versions Apache SpamAssassin versions prior to 3.4.3 Description A command execution issue was found in Apache SpamAssassin, where carefully crafted configuration files can be used to run system commands. This issue is less stealthy and attempts to...
PT-2020-2097
Name of the Vulnerable Software and Affected Versions Apache SpamAssassin versions prior to 3.4.3 Description The issue is related to a command execution problem in the spam filter, potentially allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of...
Fedora 30 : spamassassin (2019-3230b2aae9)
Update to 3.4.3, with bugfixes and several security fixes. See https://svn.apache.org/repos/asf/spamassassin/branches/3.4/build/annou ncements/3.4.3.txt for the full announcement. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update syst...
MGASA-2019-0406 Updated spamassassin packages fix security vulnerabilities
The updated packages fix security vulnerabilities: In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that...
Updated spamassassin packages fix security vulnerabilities
The updated packages fix security vulnerabilities: In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that...
CVE-2019-12420
In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly...
CVE-2018-11805
In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that users should only use update channels or 3rd party ....
Debian DLA-2037-1 : spamassassin security update
Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. CVE-2018-11805 Malicious rule or configuration files, possibly downloaded from an updates server, could execute arbitrary commands under multiple scenarios. CVE-2019-12420 Specially crafted mulitpar...
Debian: Security Advisory (DLA-2037-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2037-1] spamassassin security update
Package : spamassassin Version : 3.4.2-0+deb8u2 CVE ID : CVE-2018-11805 CVE-2019-12420 Debian Bug : 946652 946653 Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. CVE-2018-11805 Malicious rule or configuration files, possibly downloaded from an...
DLA-2037-1 spamassassin - security update
Bulletin has no description...
Debian DSA-4584-1 : spamassassin - security update
Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. - CVE-2018-11805 Malicious rule or configuration files, possibly downloaded from an updates server, could execute arbitrary commands under multiple scenarios. - CVE-2019-12420 Specially crafted...
FreeBSD : spamassassin -- multiple vulnerabilities (70111759-1dae-11ea-966a-206a8a720317)
the Apache Spamassassin project reports : An input validation error of user-supplied input parsing multipart emails. Specially crafted emails can consume all resources on the system. A local user is able to execute arbitrary shell commands through specially crafted nefarious CF files. C Tenable...
Debian: Security Advisory (DSA-4584-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4584-1] spamassassin security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4584-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 14, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4584-1] spamassassin security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4584-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 14, 2019 https://www.debian.org/security/faq -...