{"id":"CVE-2018-11780","aliases":["ALPINE-CVE-2018-11780","DEBIAN-CVE-2018-11780","DLA-1578-1","EUVD-2018-3783","GHSA-ph2p-v983-f856","MGASA-2018-0425","SUSE-SU-2019:1961-1","SUSE-SU-2019:2011-1","UBUNTU-CVE-2018-11780","USN-3811-1","openSUSE-SU-2019:1831-1","openSUSE-SU-2024:11395-1"],"status":"published","title":"A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin...","description":"A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.1082,"percentile":0.95879,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-94"],"published":"2018-09-17T00:00:00Z","modified":"2026-10-24T10:30:50Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"spamassassin","fixed_in":["3.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"spamassassin","fixed_in":["3.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"spamassassin","fixed_in":["3.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"spamassassin","fixed_in":["3.4.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"spamassassin","fixed_in":["3.4.2-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"spamassassin","fixed_in":["3.4.2-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"spamassassin","fixed_in":["3.4.2-0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0+deb8u1"}]}],"versions":["3.4.0-6","3.4.1-1","3.4.1-2","3.4.1-3","3.4.1-3~bpo8+1","3.4.1-4","3.4.1-5","3.4.1-5.1","3.4.1-6","3.4.1-6~bpo8+1","3.4.1-7","3.4.1-8"],"bundled":4},{"source":"osv","ecosystem":"Mageia:6","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1.5.mga6"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:6","package":"spamassassin-rules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1.1.mga6"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-44.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-44.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-44.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-7.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-7.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0ubuntu0.14.04.1"}]}],"versions":["3.3.2-6ubuntu2","3.3.2-8ubuntu1","3.3.2-8ubuntu2","3.4.0-1","3.4.0-1ubuntu1","3.4.0-1ubuntu2","3.4.0-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0ubuntu0.16.04.1"}]}],"versions":["3.4.1-1","3.4.1-2","3.4.1-3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0ubuntu0.18.04.1"}]}],"versions":["3.4.1-7","3.4.1-8","3.4.1-8build1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0ubuntu0.14.04.1"}]}],"versions":["3.3.2-6ubuntu2","3.3.2-8ubuntu1","3.3.2-8ubuntu2","3.4.0-1","3.4.0-1ubuntu1","3.4.0-1ubuntu2","3.4.0-1ubuntu2.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0ubuntu0.16.04.1"}]}],"versions":["3.4.1-1","3.4.1-2","3.4.1-3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0ubuntu0.18.04.1"}]}],"versions":["3.4.1-7","3.4.1-8","3.4.1-8build1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-lp150.6.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.6-71.3"}]}],"bundled":9}],"products":[{"vendor":"apache","product":"spamassassin"},{"vendor":"apache software foundation","product":"apache spamassassin"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"pdfinfo_project","product":"pdfinfo"}],"references":[{"url":"https://usn.ubuntu.com/3811-3/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3811-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/105373","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.gentoo.org/glsa/201812-07","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c%40%3Cannounce.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11780"},{"url":"https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c@%3Cannounce.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-ph2p-v983-f856"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-11780","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-11780","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0425.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23590","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2018/09/16/1","tags":["web","report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191961-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1108745","tags":["report"]},{"url":"https://bugzilla.suse.com/1108748","tags":["report"]},{"url":"https://bugzilla.suse.com/1108750","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11781","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192011-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1069831","tags":["report"]},{"url":"https://bugzilla.suse.com/1107765","tags":["report"]},{"url":"https://bugzilla.suse.com/1108749","tags":["report"]},{"url":"https://bugzilla.suse.com/1115411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11780","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3811-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11780","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3811-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-15705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11781","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWM23J3YFXDJ4Y2P4EH532AXFSDKVM3Q/#XWM23J3YFXDJ4Y2P4EH532AXFSDKVM3Q","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1946","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-11780","description":"A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.","status":"published","published":"2018-09-17T14:00:00Z","modified":"2024-09-16T20:57:28.432Z","updated_at":"2026-11-02T14:35:09.570381Z"}],"euvd":[{"id":"EUVD-2018-3783","description":"A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.","status":"published","published":"2018-09-17T14:00:00Z","modified":"2024-09-16T20:57:28Z","updated_at":"2026-11-03T00:55:09.505787Z"}],"ghsa":[{"id":"GHSA-ph2p-v983-f856","title":"A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin...","description":"A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.","status":"published","published":"2022-05-14T00:54:20Z","modified":"2023-02-02T05:02:42Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:51:29.873049Z"}],"nvd":[{"id":"CVE-2018-11780","description":"A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.","status":"published","published":"2018-09-17T14:29:00.467Z","modified":"2026-06-17T01:36:34.957Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:04:40.661264Z"}],"osv":[{"id":"ALPINE-CVE-2018-11780","description":"A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.","status":"published","published":"2018-09-17T14:29:00.467Z","modified":"2026-10-23T17:17:55.205641106Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"CVE-2018-11780","description":"A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.","status":"published","published":"2018-09-17T14:29:00.467Z","modified":"2026-10-24T10:30:50.27210271Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:07.934182Z"},{"id":"DEBIAN-CVE-2018-11780","description":"A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.","status":"published","published":"2018-09-17T14:29:00.467Z","modified":"2026-10-23T18:03:47.004614522Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"UBUNTU-CVE-2018-11780","description":"A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.","status":"published","published":"2018-09-17T00:00:00Z","modified":"2026-02-04T02:42:09.324858Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DLA-1578-1","title":"spamassassin - security update","status":"published","published":"2018-11-13T00:00:00Z","modified":"2026-03-09T01:21:50.343955Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"MGASA-2018-0425","title":"Updated spamassassin packages fix security vulnerabilities","description":"Updated spamassassin package fixes security vulnerabilities:\n\nA reliance on \".\" in @INC in one configuration script (CVE-2016-1238).\n\nA denial of service vulnerability arises with certain unclosed tags in\nemails that cause markup to be handled incorrectly leading to scan\ntimeouts (CVE-2017-15705).\n\nA potential Remote Code Execution bug with the PDFInfo plugin\n(CVE-2018-11780).\n\nA local user code injection in the meta rule syntax (CVE-2018-11781).\n","status":"published","published":"2018-10-30T18:01:43Z","modified":"2026-04-16T06:22:29.978632277Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:1831-1","title":"Security update for spamassassin","description":"This update for spamassassin to version 3.4.2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-11781: Fixed an issue where a local user could inject code in the meta rule syntax (bsc#1108748).\n- CVE-2018-11780: Fixed a potential remote code execution vulnerability in the PDFInfo plugin (bsc#1108750).\n- CVE-2017-15705: Fixed a denial of service through unclosed tags in crafted emails (bsc#1108745).\n- CVE-2016-1238: Fixed an issue where perl would load modules from the current directory (bsc#1108749).\n\nNon-security issues fixed:\n\n- Use systemd timers instead of cron (bsc#1115411)\n- Fixed incompatibility with Net::DNS \u003e= 1.01 (bsc#1107765)\n- Fixed warning about deprecated regex during sa-update (bsc#1069831)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-08-06T15:40:29Z","modified":"2026-02-04T04:27:25.52352Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:11395-1","title":"perl-Mail-SpamAssassin-3.4.6-71.3 on GA media","description":"These are all security issues fixed in the perl-Mail-SpamAssassin-3.4.6-71.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:16:54.806419Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:1961-1","title":"Security update for spamassassin","description":"This update for spamassassin to version 3.4.2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2017-15705: Fixed denial of service via unclosed tags in crafted emails (bsc#1108745).\n- CVE-2018-11781: Fixed a code injection in the meta rule syntax by local users (bsc#1108748).\n- CVE-2018-11780: Fixed a potential remote code execution vulnerability in PDFInfo plugin (bsc#1108750).\n\nNon-security issues fixed:\n\n- Added four new plugins (disabled by default): HashBL, ResourceLimits, FromNameSpoof, Phishing\n- sa-update script: optional support for SHA-256 / SHA-512 been added for better validation of rules\n- GeoIP2 support has been added to RelayCountry and URILocalBL plugins\n- Several new or enhanced configuration options\n","status":"published","published":"2019-07-24T08:32:56Z","modified":"2026-02-04T03:42:55.070409Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2011-1","title":"Security update for spamassassin","description":"This update for spamassassin to version 3.4.2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-11781: Fixed an issue where a local user could inject code in the meta rule syntax (bsc#1108748).\n- CVE-2018-11780: Fixed a potential remote code execution vulnerability in the PDFInfo plugin (bsc#1108750).\n- CVE-2017-15705: Fixed a denial of service through unclosed tags in crafted emails (bsc#1108745).\n- CVE-2016-1238: Fixed an issue where perl would load modules from the current directory (bsc#1108749).\n\nNon-security issues fixed:\n\n- Use systemd timers instead of cron (bsc#1115411)\n- Fixed incompatibility with Net::DNS \u003e= 1.01 (bsc#1107765)\n- Fixed warning about deprecated regex during sa-update (bsc#1069831)\n","status":"published","published":"2019-07-29T12:46:29Z","modified":"2026-02-04T04:01:02.871865Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"USN-3811-1","title":"spamassassin vulnerabilities","description":"It was discovered that SpamAssassin incorrectly handled certain unclosed\ntags in emails. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2017-15705)\n\nIt was discovered that SpamAssassin incorrectly handled the PDFInfo plugin.\nA remote attacker could possibly use this issue to execute arbitrary code.\n(CVE-2018-11780)\n\nIt was discovered that SpamAssassin incorrectly handled meta rule syntax. A\nlocal attacker could possibly use this issue to execute arbitrary code.\n(CVE-2018-11781)\n","status":"published","published":"2018-11-06T16:17:44Z","modified":"2026-02-10T04:41:26Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}