Package "sa-compile"

Name: sa-compile


Tools for compiling SpamAssassin rules into C

Latest version: 3.4.2-0ubuntu0.14.04.1
Release: trusty (14.04)
Level: security
Repository: main
Head package: spamassassin
Homepage: http://www.spamassassin.org/


Download "sa-compile"

Other versions of "sa-compile" in Trusty

Repository Area Version
base main 3.4.0-1ubuntu1
updates main 3.4.2-0ubuntu0.14.04.1


Version: 3.4.2-0ubuntu0.14.04.1 2018-11-06 18:06:15 UTC

  spamassassin (3.4.2-0ubuntu0.14.04.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Update to 3.4.2 to fix multiple security issues and
    support new rule update signatures (LP: #1796863)
    - debian/patches/*patch: sync patches from 3.4.2-1 package.
    - add pkgrules orig tarball from 3.4.2-1 package.
    - debian/spamassassin.{init,preinst}: properly handle process name
      change in spamassassin 3.4.2.
    - CVE-2017-15705
    - CVE-2018-11780
    - CVE-2018-11781

 -- Marc Deslauriers <email address hidden> Thu, 25 Oct 2018 12:37:49 -0400

1796863 Upgrade to version 3.4.2 for Bionic
CVE-2017-15705 A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain unclosed tags
CVE-2018-11780 A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.
CVE-2018-11781 Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.

About   -   Send Feedback to @ubuntu_updates