It turns out that spamassassin is depending on risky behavior,
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1238
I have submitted a patch,
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7367 .

Reply via email to