Public bug reported:
lsb_release -rd
Description: Ubuntu 18.04.3 LTS
Release: 18.04
apt-cache policy spamassassin
spamassassin:
Installed: 3.4.2-0ubuntu0.18.04.1
Candidate: 3.4.2-0ubuntu0.18.04.1
The current version of Spamassassin is 3.4.2, the newest version, 3.4.3
fixes two security issues:
CVE-2019-12420 for Multipart Denial of Service Vulnerability
CVE-2018-11805 for nefarious CF files can be configured to
run system commands without any output or errors.
Request that Spamassassin be updated to the latest version 3.4.3 as soon
as possible.
** Affects: spamassassin (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1856248
Title:
Spamassassin needs updated to reflect security fixes
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/spamassassin/+bug/1856248/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
