https://bz.apache.org/SpamAssassin/show_bug.cgi?id=6303

Ksreyma Kims <ksreyma.k...@klttec.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ksreyma.k...@klttec.com

--- Comment #18 from Ksreyma Kims <ksreyma.k...@klttec.com> ---
CVE-2018-11780[0]:
potential remote code execution bug with the PDFInfo plugin

It is fixed in new upstream version 3.4.2.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-11780
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11780
[1] https://www.openwall.com/lists/oss-security/2018/09/16/1
[2] http://bit.ly/2J3erCO

Please adjust the affected versions in the BTS as needed.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to