UbuntuUpdates.org

Package "spamassassin"

Name: spamassassin

Description:

Perl-based spam filter using text analysis

Latest version: 3.4.2-1ubuntu0.19.10.3
Release: eoan (19.10)
Level: updates
Repository: main
Homepage: https://www.spamassassin.org/

Links


Download "spamassassin"


Other versions of "spamassassin" in Eoan

Repository Area Version
base main 3.4.2-1
security main 3.4.2-1ubuntu0.19.10.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 3.4.2-1ubuntu0.19.10.3 2020-03-02 11:06:19 UTC

  spamassassin (3.4.2-1ubuntu0.19.10.3) eoan; urgency=medium

  * d/p/lp-1862154-*: avoid 'domain is utf8 flagged' flooding the logs
    (LP: #1862154)

 -- Christian Ehrhardt <email address hidden> Mon, 10 Feb 2020 16:17:02 +0100

Source diff to previous version
1862154 Syslog spammed with \

Version: 3.4.2-1ubuntu0.19.10.2 2020-02-04 17:06:46 UTC

  spamassassin (3.4.2-1ubuntu0.19.10.2) eoan-security; urgency=medium

  * SECURITY UPDATE: code execution via nefarious CF files
    - debian/patches/CVE-2020-1930.patch: improve logic in
      lib/Mail/SpamAssassin/Plugin/OneLineBodyRuleType.pm.
    - debian/patches/CVE-2020-1931.patch: improve logic in
      lib/Mail/SpamAssassin/Conf.pm, lib/Mail/SpamAssassin/Constants.pm.
    - CVE-2020-1930
    - CVE-2020-1931
  * Thanks to Debian for the patches.

 -- Marc Deslauriers <email address hidden> Tue, 04 Feb 2020 07:33:02 -0500

Source diff to previous version
CVE-2020-1930 A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration (.cf) files can be configur
CVE-2020-1931 A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.cf) files can be configured to

Version: 3.4.2-1ubuntu0.19.10.1 2020-01-13 19:06:51 UTC

  spamassassin (3.4.2-1ubuntu0.19.10.1) eoan-security; urgency=medium

  * SECURITY UPDATE: code execution via nefarious CF files
    - debian/patches/CVE-2018-11805: improve rule parsing.
    - CVE-2018-11805
  * SECURITY UPDATE: resource consumption issue
    - debian/patches/CVE-2019-12420: limit checked mime parts.
    - CVE-2019-12420
  * Thanks to Debian for the patches.

 -- Marc Deslauriers <email address hidden> Fri, 10 Jan 2020 11:47:04 -0500

CVE-2018-11805 In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits ca
CVE-2019-12420 In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the r



About   -   Send Feedback to @ubuntu_updates