Red Hat Security Advisory

RHSA-2018:2916

spamassassin security update

Released 2018-10-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Optional (v. 7) spamassassin-3.4.0-4.el7_5
Red Hat Enterprise Linux Server (v. 7) spamassassin-3.4.0-4.el7_5
Red Hat Enterprise Linux Workstation (v. 7) spamassassin-3.4.0-4.el7_5
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) spamassassin-3.4.0-4.el7_5

TI-2018-08438 CVE-2018-11781 · GHSA-qvvf-537j-pvg4

LOW 36

Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00984 Published 2018-09-17 Partial fix · 3.4.2 CWE-94

TI-2017-11478 CVE-2017-15705 · GHSA-m63q-qrvc-wwrm

LOW 35

A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.07879 Published 2018-09-17 Partial fix · 3.4.2 CWE-20