Hi Chris, thanks for your report. I checked the security Teams overview of those at - https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-11805.html - https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-12420.html
It seems they are still evaluating the options hence the status "needs Triage". I'll assign this bug to ubuntu-security so that they can update this bug along whatever they decide on the CVE triaging. ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-11805 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-12420 ** Changed in: spamassassin (Ubuntu) Status: New => Confirmed ** Also affects: spamassassin (Ubuntu Eoan) Importance: Undecided Status: New ** Also affects: spamassassin (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: spamassassin (Ubuntu Bionic) Importance: Undecided Status: New ** Also affects: spamassassin (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: spamassassin (Ubuntu Disco) Importance: Undecided Status: New ** Changed in: spamassassin (Ubuntu) Status: Confirmed => Fix Released ** Changed in: spamassassin (Ubuntu Trusty) Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security) ** Changed in: spamassassin (Ubuntu Xenial) Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security) ** Changed in: spamassassin (Ubuntu Bionic) Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security) ** Changed in: spamassassin (Ubuntu Disco) Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security) ** Changed in: spamassassin (Ubuntu Eoan) Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1856248 Title: Spamassassin needs updated to reflect security fixes To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/spamassassin/+bug/1856248/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
