UbuntuUpdates.org

Package "spamassassin"

Name: spamassassin

Description:

Perl-based spam filter using text analysis
Latest version: 3.4.4-1ubuntu1.1
Release: focal (20.04)
Level: security
Repository: main
Homepage: https://www.spamassassin.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "spamassassin"

All arch deb package
APT INSTALL

Other versions of "spamassassin" in Focal

Repository Area Version
base main 3.4.4-1ubuntu1
updates main 3.4.4-1ubuntu1.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 3.4.4-1ubuntu1.1 2021-04-01 14:06:57 UTC

  spamassassin (3.4.4-1ubuntu1.1) focal-security; urgency=medium

  * SECURITY UPDATE: OS Command Injection in cf file parsing
    - debian/patches/CVE-2020-1946.patch: fix header rule parsing in
      lib/Mail/SpamAssassin/Conf/Parser.pm.
    - CVE-2020-1946

 -- Marc Deslauriers <email address hidden> Mon, 29 Mar 2021 12:54:59 -0400
CVE-2020-1946 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors.


About   -   Send Feedback to @ubuntu_updates