Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 557
Alerts This Week
Warning Icon 1 557

Red Hat: RHSA-2004:451-01 Moderate: SpamAssassin Denial of Service

red hat
Calendar Grey September 30, 2004
Dist Redhat Esm H88
A new release from Red Hat addresses the vulnerability in spamassassin, enhancing security for email handling.
An updated spamassassin package that fixes a denial of service bug when parsing malformed messages is now available.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system:

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/

5. Bug IDs fixed (http://bugzilla.redhat.com/ for more info):

129337 - CAN-2004-0796 DOS attack open to certain malformed messages

6. RPMs required:

Red Hat Enterprise Linux AS version 3:

SRPMS:

dc61064510ef1814b033366f15838f7d spamassassin-2.55-3.2.src.rpm

i386: 52dea7b072ab36c717be6fe70e8b72da spamassassin-2.55-3.2.i386.rpm

ia64: a53253a30f1eac9bfa99cf48864fbea0 spamassassin-2.55-3.2.ia64.rpm

ppc: f14d7231b8eeb09f44e6a7526d4dba4f spamassassin-2.55-3.2.ppc.rpm

s390: a7fb9f360bffaa24ecd5da9b3406ba1a spamassassin-2.55-3.2.s390.rpm

s390x: d259c8305d3661fe8137badccd4dee8c spamassassin-2.55-3.2.s390x.rpm

x86_64: a49500110469d36992245f63ca0ba7ec spamassassin-2.55-3.2.x86_64.rpm

Red Hat Desktop version 3:

SRPMS:

dc61064510ef1814b033366f15838f7d spamassassin-2.55-3.2.src.rpm

i386: 52dea7b072ab36c717be6fe70e8b72da spamassassin-2.55-3.2.i386.rpm

x86_64: a49500110469d36992245f63ca0ba7ec spamassassin-2.55-3.2.x86_64.rpm

Red Hat Enterprise Linux ES version 3:

SRPMS:

dc61064510ef1814b033366f15838f7d spamassassin-2.55-3.2.src.rpm

i386: 52dea7b072ab36c717be6fe70e8b72da spamassassin-2.55-3.2.i386.rpm

ia64: a53253a30f1eac9bfa99cf48864fbea0 spamassassin-2.55-3.2.ia64.rpm

x86_64: a49500110469d36992245f63ca0ba7ec spamassassin-2.55-3.2.x86_64.rpm

Red Hat Enterprise Linux WS version 3:

SRPMS:

dc61064510ef1814b033366f15838f7d spamassassin-2.55-3.2.src.rpm

i386: 52dea7b072ab36c717be6fe70e8b72da spamassassin-2.55-3.2.i386.rpm

ia64: a53253a30f1eac9bfa99cf48864fbea0 spamassassin-2.55-3.2.ia64.rpm

x86_64: a49500110469d36992245f63ca0ba7ec spamassassin-2.55-3.2.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from


Summary

Topics%20covered

Topics Covered

security advisory denial of service Red Hat software update DoS threat mitigation spamassassin

References

CVE -CVE-2004-0796

Package List


Severity
important
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2004:451-01
Issue date: 2004-09-30
Updated on: 2004-09-30
Product: Red Hat Enterprise Linux

Topic

An updated spamassassin package that fixes a denial of service bug whenparsing malformed messages is now available.

Topics%20covered

Topics Covered

security advisory denial of service Red Hat software update DoS threat mitigation spamassassin

Relevant Releases Architectures

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64

Red Hat Desktop version 3 - i386, x86_64

Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64

Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.