USN-4265-1: SpamAssassin vulnerabilities
4 February 2020
Several security issues were fixed in SpamAssassin.
- spamassassin - Perl-based spam filter using text analysis
It was discovered that SpamAssassin incorrectly handled certain CF files.
If a user or automated system were tricked into using a specially-crafted
CF file, a remote attacker could possibly run arbitrary code.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.
- USN-4265-2: spamassassin, sa-compile, spamc