Stay Secure with the Latest Linux Advisories

security advisoryconfiguration issuespamassassin

Mageia 7 MGASA-2020-0079 Moderate: Spamassassin Command Execution Threat

The updated packages fix security vulnerabilities: Nefarious rule configuration (.cf) files can be configured to run system commands with sa-compile. (CVE-2020-1930) . MGASA-2020-0079 - Updated spamassassin packages fix security vulnerabilities Publication date: 09 Feb 2020 URL: https://advisories.mageia.org/MGASA-2020-0079.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-1930, CVE-2020-1931 The updated packages fix security vulnerabilities: Nefarious rule configuration (.cf) files can be configured to run system commands with sa-compile. (CVE-2020-1930) Nefarious rule configuration (.cf) files can be configured to run system commands with warnings. (CVE-2020-1931) References: - https://bugs.mageia.org/show_bug.cgi?id=26150 - https://spamassassin.apache.org/news.html - https://svn.apache.org/repos/asf/spamassassin/branches/3.4/build/announcements/3.4.4.txt - https://www.openwall.com/lists/oss-security/2020/01/30/3 - https://www.openwall.com/lists/oss-security/2020/01/30/2 - https://www.cve.org/CVERecord?id=CVE-2020-1930 - https://www.cve.org/CVERecord?id=CVE-2020-1931 SRPMS: - 7/core/spamassassin-3.4.4-1.mga7 - 7/core/spamassassin-rules-3.4.4-1.mga7 . Mageia's MGASA-2020-0080 update enhances libxml2 to fix critical security flaws in XML parsing.. Mageia Security, Spamassassin Update, Command Execution Threats. . LinuxSecurity.com Team

Feb 09, 2020 Mageia