| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for spamassassin (Moderate) |
| Description: |
This update for spamassassin to version 3.4.2 fixes the following issues:
Security issues fixed:
- CVE-2018-11781: Fixed an issue where a local user could inject code in the meta rule syntax (bsc#1108748). - CVE-2018-11780: Fixed a potential remote code execution vulnerability in the PDFInfo plugin (bsc#1108750). - CVE-2017-15705: Fixed a denial of service through unclosed tags in crafted emails (bsc#1108745). - CVE-2016-1238: Fixed an issue where perl would load modules from the current directory (bsc#1108749).
Non-security issues fixed:
- Use systemd timers instead of cron (bsc#1115411) - Fixed incompatibility with Net::DNS >= 1.01 (bsc#1107765) - Fixed warning about deprecated regex during sa-update (bsc#1069831)
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1046299
1046303
1046305
1050244
1050536
1050545
1051510
1055186
1058115
1061840
1064802
1065600
1065729
1066129
1069831
1071995
1073513
1082635
1083548
1083647
1085030
1086323
1087092
1089644
1090631
1093205
1096254
1097583
1097584
1097585
1097586
1097587
1097588
1098291
1101674
1107765
1108745
1108748
1108749
1108750
1109158
1111666
1112178
1113956
1113994
1114279
1115411
1117665
1119461
1119465
1120163
1123034
1123080
1124729
1124734
1126284
1128378
1129071
1132663
1132900
1133021
1133140
1134303
1135642
1135854
1135873
1135967
1136666
1137040
1137799
1137861
1138190
1139073
1139924
1140090
1140729
1140845
1140883
1141600
1142635
1142667
1143706
1144333
1144338
1144375
1144449
1144903
1145099
1146612
1148410
1149119
1149841
1149853
1150452
1150457
1150465
1150875
1151021
1151508
1151807
1152033
1152148
1152624
1152665
1152685
1152696
1152697
1152788
1152790
1152791
1153112
1153158
1153236
1153263
1153476
1153509
1153607
1153646
1153681
1153713
1153717
1153718
1153719
1153811
1153969
1154108
1154189
1154242
1154268
1154354
1154372
1154521
1154578
1154607
1154608
1154610
1154611
1154651
1154737
1154747
1154848
1154858
1154905
1154956
1155061
1155178
1155179
1155184
1155186
1155671
1156402
1159913
1163524
1165629
1165631
1166965
1169790
1170232
1170446
1171252
1171254
1171558
1171688
1171988
1172073
1172108
1172247
1172418
1172428
1172871
1172872
1172873
1172963
1173060
1173485
1173594
1173798
1173954
1174003
1174026
1174070
1174205
1174387
1174484
1174547
1174549
1174550
1174625
1174658
1174685
1174689
1174699
1174734
1174757
1174771
1174840
1174841
1174843
1174844
1174845
1174852
1174873
1174904
1174926
1174968
1175062
1175063
1175064
1175065
1175066
1175067
1175112
1175127
1175128
1175149
1175199
1175213
1175228
1175232
1175284
1175393
1175394
1175396
1175397
1175398
1175399
1175400
1175401
1175402
1175403
1175404
1175405
1175406
1175407
1175408
1175409
1175410
1175411
1175412
1175413
1175414
1175415
1175416
1175417
1175418
1175419
1175420
1175421
1175422
1175423
1175440
1175476
1175493
1175515
1175518
1175526
1175550
1175654
1175666
1175667
1175668
1175669
1175670
1175674
1175691
1175767
1175768
1175769
1175770
1175771
1175772
1175786
1175873
1176069
802154
814594
919448
987367
998153
CVE-2007-6600
CVE-2007-6720
CVE-2009-0179
CVE-2009-3995
CVE-2009-3996
CVE-2009-4034
CVE-2009-4136
CVE-2009-4492
CVE-2010-0541
CVE-2010-1169
CVE-2010-1170
CVE-2010-2546
CVE-2010-3433
CVE-2011-1004
CVE-2011-1005
CVE-2011-4815
CVE-2012-0866
CVE-2012-0867
CVE-2012-0868
CVE-2012-2143
CVE-2012-2655
CVE-2012-3488
CVE-2012-3489
CVE-2013-0255
CVE-2013-1899
CVE-2013-1900
CVE-2013-1901
CVE-2014-0060
CVE-2014-0061
CVE-2014-0062
CVE-2014-0063
CVE-2014-0064
CVE-2014-0065
CVE-2014-0066
CVE-2014-0067
CVE-2014-4607
CVE-2015-3165
CVE-2015-3166
CVE-2015-3167
CVE-2015-5288
CVE-2015-5289
CVE-2016-1238
CVE-2017-15705
CVE-2018-11780
CVE-2018-11781
CVE-2018-12207
CVE-2019-0199
CVE-2019-10220
CVE-2019-11135
CVE-2019-11236
CVE-2019-11324
CVE-2019-14562
CVE-2019-14835
CVE-2019-16232
CVE-2019-16233
CVE-2019-16234
CVE-2019-16995
CVE-2019-17056
CVE-2019-17133
CVE-2019-17666
CVE-2019-2201
CVE-2019-5108
CVE-2019-6974
CVE-2019-7221
CVE-2019-8912
CVE-2019-9213
CVE-2019-9740
CVE-2020-10135
CVE-2020-12653
CVE-2020-12654
CVE-2020-14314
CVE-2020-14331
CVE-2020-14356
CVE-2020-14386
CVE-2020-16166
CVE-2020-1749
CVE-2020-1749
CVE-2020-24394
CVE-2020-8695
CVE-2020-8698
SUSE-SU-2019:1825-1
SUSE-SU-2019:2011-1
SUSE-SU-2019:2332-1
SUSE-SU-2019:2971-2
SUSE-SU-2020:2575-1
SUSE-SU-2020:2713-1
|
| Platform(s): | openSUSE Leap 15.0
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1
SUSE Linux Enterprise Module for Development Tools 15
SUSE Linux Enterprise Module for Development Tools 15 SP1
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Python2 packages 15 SP1
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.0 is installed AND libXfixes3-5.0.3-lp150.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP2 is installed
AND ruby-1.8.7.p357-0.9.13 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed
AND Package Information
gtk2-2.18.9-0.39 is installed
OR gtk2-32bit-2.18.9-0.39 is installed
OR gtk2-lang-2.18.9-0.39 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP4 is installed
AND Package Information
libmspack-0.0.20060920alpha-74.10 is installed
OR libmspack0-0.0.20060920alpha-74.10 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND ruby-2.1-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
libecpg6-9.4.5-4 is installed
OR libpq5-9.4.5-4 is installed
OR libpq5-32bit-9.4.5-4 is installed
OR postgresql94-9.4.5-4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND clamav-0.99.2-25 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
augeas-1.2.0-15 is installed
OR augeas-lenses-1.2.0-15 is installed
OR libaugeas0-1.2.0-15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND ft2demos-2.6.3-7.15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed
AND libjpeg-turbo-1.5.3-5.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Development Tools 15 is installed
AND Package Information
perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-7.4 is installed
OR spamassassin-3.4.2-7.4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed
AND Package Information
kernel-docs-4.12.14-197.26 is installed
OR kernel-obs-build-4.12.14-197.26 is installed
OR kernel-source-4.12.14-197.26 is installed
OR kernel-syms-4.12.14-197.26 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 is installed
AND Package Information
kernel-livepatch-4_12_14-25_16-default-5-2 is installed
OR kernel-livepatch-SLE15_Update_4-5-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
AND Package Information
kernel-livepatch-4_12_14-197_7-default-4-2 is installed
OR kernel-livepatch-SLE15-SP1_Update_2-4-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed
AND Package Information
python-urllib3-1.24-9.4 is installed
OR python2-urllib3-1.24-9.4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 15 is installed
AND Package Information
tomcat-9.0.21-3.27 is installed
OR tomcat-admin-webapps-9.0.21-3.27 is installed
OR tomcat-el-3_0-api-9.0.21-3.27 is installed
OR tomcat-jsp-2_3-api-9.0.21-3.27 is installed
OR tomcat-lib-9.0.21-3.27 is installed
OR tomcat-servlet-4_0-api-9.0.21-3.27 is installed
OR tomcat-webapps-9.0.21-3.27 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND python-pyOpenSSL-0.14-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_69-60_64_32-default-7-4 is installed
OR kgraft-patch-3_12_69-60_64_32-xen-7-4 is installed
OR kgraft-patch-SLE12-SP1_Update_13-7-4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND apache-commons-httpclient-3.1-4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
git-2.12.3-27.17 is installed
OR git-core-2.12.3-27.17 is installed
OR git-doc-2.12.3-27.17 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
dovecot22-2.2.31-19.11 is installed
OR dovecot22-backend-mysql-2.2.31-19.11 is installed
OR dovecot22-backend-pgsql-2.2.31-19.11 is installed
OR dovecot22-backend-sqlite-2.2.31-19.11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
kgraft-patch-4_4_121-92_85-default-5-2 is installed
OR kgraft-patch-SLE12-SP2_Update_23-5-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
DirectFB-1.7.1-6 is installed
OR lib++dfb-1_7-1-1.7.1-6 is installed
OR libdirectfb-1_7-1-1.7.1-6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-BCL is installed
AND Package Information
evince-3.20.2-6.27 is installed
OR evince-browser-plugin-3.20.2-6.27 is installed
OR evince-lang-3.20.2-6.27 is installed
OR evince-plugin-djvudocument-3.20.2-6.27 is installed
OR evince-plugin-dvidocument-3.20.2-6.27 is installed
OR evince-plugin-pdfdocument-3.20.2-6.27 is installed
OR evince-plugin-psdocument-3.20.2-6.27 is installed
OR evince-plugin-tiffdocument-3.20.2-6.27 is installed
OR evince-plugin-xpsdocument-3.20.2-6.27 is installed
OR libevdocument3-4-3.20.2-6.27 is installed
OR libevview3-3-3.20.2-6.27 is installed
OR nautilus-evince-3.20.2-6.27 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
AND Package Information
kgraft-patch-4_4_178-94_91-default-5-2 is installed
OR kgraft-patch-SLE12-SP3_Update_25-5-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
kgraft-patch-4_4_176-94_88-default-3-2 is installed
OR kgraft-patch-SLE12-SP3_Update_24-3-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
openssh-7.2p2-74.23 is installed
OR openssh-askpass-gnome-7.2p2-74.23 is installed
OR openssh-fips-7.2p2-74.23 is installed
OR openssh-helpers-7.2p2-74.23 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND Package Information
libpng12-0-1.2.50-19 is installed
OR libpng12-0-32bit-1.2.50-19 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 15-LTSS is installed
AND ucode-intel-20201027-3.51 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for SAP Applications 15 is installed
AND Package Information
ovmf-2017+git1510945757.b2662641d5-5.35 is installed
OR ovmf-tools-2017+git1510945757.b2662641d5-5.35 is installed
OR qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.35 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
AND Package Information
kernel-default-4.12.14-197.56 is installed
OR kernel-default-extra-4.12.14-197.56 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND Package Information
libzypp-16.17.20-27.52 is installed
OR zypper-1.13.45-18.33 is installed
OR zypper-log-1.13.45-18.33 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND Package Information
kernel-default-4.4.180-94.100 is installed
OR kernel-default-base-4.4.180-94.100 is installed
OR kernel-default-devel-4.4.180-94.100 is installed
OR kernel-devel-4.4.180-94.100 is installed
OR kernel-macros-4.4.180-94.100 is installed
OR kernel-source-4.4.180-94.100 is installed
OR kernel-syms-4.4.180-94.100 is installed
OR kgraft-patch-4_4_180-94_100-default-1-4.3 is installed
OR kgraft-patch-SLE12-SP3_Update_27-1-4.3 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
libmariadb3-3.0.3-3.3 is installed
OR mariadb-10.2.15-4.3 is installed
OR mariadb-client-10.2.15-4.3 is installed
OR mariadb-connector-c-3.0.3-3.3 is installed
OR mariadb-errormessages-10.2.15-4.3 is installed
OR mariadb-galera-10.2.15-4.3 is installed
OR mariadb-tools-10.2.15-4.3 is installed
OR xtrabackup-2.4.10-4.3 is installed
|