Ubuntu 19.10: USN-4265-1 Moderate: SpamAssassin Remote Code Issue

ubuntu

February 4, 2020

Several security issues were fixed in SpamAssassin.

Summary

Several security issues were fixed in SpamAssassin.

Software Description:

- spamassassin: Perl-based spam filter using text analysis

Details:

It was discovered that SpamAssassin incorrectly handled certain CF files.

If a user or automated system were tricked into using a specially-crafted

CF file, a remote attacker could possibly run arbitrary code.

Topics Covered

security advisory remote code execution bug fix Ubuntu spamassassin

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  spamassassin                    3.4.2-1ubuntu0.19.10.2

Ubuntu 18.04 LTS:
  spamassassin                    3.4.2-0ubuntu0.18.04.3

Ubuntu 16.04 LTS:
  spamassassin                    3.4.2-0ubuntu0.16.04.3

In general, a standard system update will make all the necessary changes.