security advisorycriticalsoftware update
Upstream version 3.4.5. See https://lists.apache.org/thread/%This email address is being protected from spambots. You need JavaScript enabled to view it.%3E for details. Fixes CVE-2020-1946. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-bf06dcffa8 2021-03-31 00:15:12.087364 --------------------------------------------------------------------------------Name : spamassassin Product : Fedora 34 Version : 3.4.5 Release : 1.fc34 URL : https://spamassassin.apache.org/ Summary : Spam filter for email which can be invoked from mail delivery agents Description : SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email (SPAM) from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring system to identify messages which look spammy, then adds headers to the message so they can be filtered by the user's mail reading software. This distribution includes the spamd/spamc components which create a server that considerably speeds processing of mail. To enable spamassassin, if you are receiving mail locally, simply add this line to your ~/.procmailrc: INCLUDERC=/etc/mail/spamassassin/spamassassin-default.rc To filter spam for all users, add that line to /etc/procmailrc (creating if necessary). --------------------------------------------------------------------------------Update Information: Upstream version 3.4.5. See https://lists.apache.org/thread/%This email address is being protected from spambots. You need JavaScript enabled to view it.%3E for details. Fixes CVE-2020-1946 --------------------------------------------------------------------------------ChangeLog: * Thu Mar 25 2021 Kevin Fenzi - 3.4.5-1 - Update to 3.4.5. Fixes rhbz#1942575 - Fixes CVE-2020-1946 --------------------------------------------------------------------------------References: [ 1 ] Bug #1862520 - requestrebuild for F32; compile-time SSL lib update for 'spamc' https://bugzilla.redhat.com/show_bug.cgi?id=1862520 [ 2 ] Bug #1943277 - CVE-2020-1946 spamassassin: Malicious rule configuration files can be configured to run system commands [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1943277 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-bf06dcffa8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Explore the critical Fedora 34 update for SpamAssassin that addresses serious security weaknesses and enhances email filtering.. SpamAssassin, Fedora Updates, Email Filter, Security Threats. . Severity: Critical. LinuxSecurity.com Team
Mar 30, 2021
•Critical
Fedora
Refine advisories
