840 matches found
Important: Red Hat Security Advisory: spamassassin security update
An update for spamassassin is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
spamassassin: Local user code injection in the meta rule syntax
A flaw was found in the way a local user on the SpamAssassin server could inject code in the meta rule syntax. This could cause the arbitrary code execution on the server when these rules are being processed...
spamassassin: Certain unclosed tags in crafted emails allow for scan timeouts and result in denial of service
A flaw was found in the way SpamAssassin processes HTML email containing unclosed HTML tags. A carefully crafted mail message could cause SpamAssassin to consume significant resources. If a large number of these messages are sent, a denial of service could occur potentially delaying or preventing...
spamassassin security update
3.4.0-4 - Add missing Requires for perlXSLoader and perlExtUtils::MakeMaker, - which are no longer auto-generated due to a expected change in rpm-build - Related: rhbz1632998 3.4.0-3 - Fix CVE-2018-11781 - Local user code injection in the meta rule syntax - Fix CVE-2017-15705 - Certain unclosed...
Fedora Update for spamassassin FEDORA-2018-6ed251c42b
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 27 : spamassassin (2018-6ed251c42b)
Fixed some small bugs in the previous package: Initial rules now have the correct version, sought channel config is dropped since it doesn't exist anymore and build / runtime deps adjusted. ---- Update to 3.4.2. Fixes CVE-2017-15705, CVE-2018-11780 and CVE-2018-11781 along with many other bugfixe...
[SECURITY] Fedora 27 Update: spamassassin-3.4.2-2.fc27
SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...
[SECURITY] Fedora 29 Update: spamassassin-3.4.2-2.fc29
SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...
FreeBSD : spamassassin -- multiple vulnerabilities (613193a0-c1b4-11e8-ae2d-54e1ad3d6335)
the Apache Spamassassin project reports : In Apache SpamAssassin, using HTML::Parser, we setup an object and hook into the begin and end tag event handlers In both cases, the 'open' event is immediately followed by a 'close' event - even if the tag does not close in the HTML being parsed. Because...
Fedora Update for spamassassin FEDORA-2018-46d7a7f63e
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 28 Update: spamassassin-3.4.2-2.fc28
SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...
Apache SpamAssassin Denial of Service Vulnerability
Apache SpamAssassin is a U.S. Apache Apache company's mail filtering program and API, can effectively prevent mail from spam harassment. A denial of service vulnerability exists in Apache SpamAssassin. An attacker can exploit the vulnerability to cause a denial of service...
Apache SpamAssassin PDFInfo plugin remote code execution vulnerability
Apache SpamAssassin is the United States Apache Apache Software Foundation, an open source spam filter, which provides system administrators with a filter and support for e-mail classification to stop spam.PDFInfo is one of the PDF file information processing plug-ins. Apache SpamAssassin 3.4.2...
Apache SpamAssassin Arbitrary Code Execution Vulnerability
Apache SpamAssassin is an open source spam filter from the Apache USA Software Foundation that provides system administrators with a filter and support for categorizing email to stop spam. An arbitrary code execution vulnerability exists in the meta-rule statements in Apache SpamAssassin, which c...
Remote code execution
A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2...
Code injection
Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax...
Hardcoded credentials
A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain unclosed tags in emails that cause markup to be handled incorrectly leading to scan timeouts. In Apache SpamAssassin, using HTML::Parser, we setup an object and...
CVE-2017-15705
A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain unclosed tags in emails that cause markup to be handled incorrectly leading to scan timeouts. In Apache SpamAssassin, using HTML::Parser, we setup an object and...