Accepted spamassassin 3.4.2-1+deb10u2 (source all amd64) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 30 Jan 2020 08:50:54 -0800
Source: spamassassin
Binary: sa-compile spamassassin spamc spamc-dbgsym
Architecture: source all amd64
Version: 3.4.2-1+deb10u2
Distribution: buster-security
Urgency: medium
Maintainer: Noah Meyerhans <noahm@debian.org>
Changed-By: Noah Meyerhans <noahm@debian.org>
Description:
sa-compile - Tools for compiling SpamAssassin rules into C
spamassassin - Perl-based spam filter using text analysis
spamc - Client for SpamAssassin spam filtering daemon
Closes: 950258
Changes:
spamassassin (3.4.2-1+deb10u2) buster-security; urgency=medium
.
* Security update to address
- CVE-2020-1930. Arbitrary code execution via malicious rule files.
- CVE-2020-1931. Arbitrary code execution via malicious rule files.
(Closes: #950258)
Checksums-Sha1:
4984bfe8a30b463bbacc93370101397b7bd84417 2469 spamassassin_3.4.2-1+deb10u2.dsc
737bb856643e4fb97514886ab241bee4a59e0251 65316 spamassassin_3.4.2-1+deb10u2.debian.tar.xz
968502e5faba2c59eee351c4f681e2bc081fa4cd 48172 sa-compile_3.4.2-1+deb10u2_all.deb
e06c85e5e76802fd5aeba259aeba38ed3babace0 1125252 spamassassin_3.4.2-1+deb10u2_all.deb
d2f8066aa6743affc9f3d49836b1473d472c0292 6607 spamassassin_3.4.2-1+deb10u2_amd64.buildinfo
aaf4a589e4f29b45dc28ddfd13c2ee750b686564 51644 spamc-dbgsym_3.4.2-1+deb10u2_amd64.deb
c5ea964c158b911558bab7b19a8ea557d353039c 83176 spamc_3.4.2-1+deb10u2_amd64.deb
Checksums-Sha256:
aa55673e46737b1e479b9275b1415060e4e713618bf616d46272f9e4311f349d 2469 spamassassin_3.4.2-1+deb10u2.dsc
e0d4de636e91ebfc1416efabb49bbdf3f89f170766afcb46559deea803c00b30 65316 spamassassin_3.4.2-1+deb10u2.debian.tar.xz
9f73a21dfc40e3e94a040bc18f1a8d8f7778aa52c9fb70ee887e1ad1b25ec1a7 48172 sa-compile_3.4.2-1+deb10u2_all.deb
35f8e49235dbe7b71f56912436f2c669b2f56f43c3770dbc1715752ad5d07b6a 1125252 spamassassin_3.4.2-1+deb10u2_all.deb
8b7f1beb36dd394d352221a33a5d0f1c9c74d1584f81a0747ea4766cd6f380b4 6607 spamassassin_3.4.2-1+deb10u2_amd64.buildinfo
5ed9bd258405ffc97d70c8fb6de9798a36d65cfdd6a4fd6a782e5494be9bb93a 51644 spamc-dbgsym_3.4.2-1+deb10u2_amd64.deb
6a2ce1f7d8110c007e78493a6c994ffaa251166cfca17f19200aafb64b9d9c3a 83176 spamc_3.4.2-1+deb10u2_amd64.deb
Files:
1cc850db9f283e34550000f3dd62ede5 2469 mail optional spamassassin_3.4.2-1+deb10u2.dsc
c45fd839081999c5ed00be59fd513dca 65316 mail optional spamassassin_3.4.2-1+deb10u2.debian.tar.xz
85827f97012a1a3161d1bb59092335f4 48172 mail optional sa-compile_3.4.2-1+deb10u2_all.deb
beef8078cabd9aab4a14a04b201526dc 1125252 mail optional spamassassin_3.4.2-1+deb10u2_all.deb
f791448136dfe6b731e0ccd92f06209a 6607 mail optional spamassassin_3.4.2-1+deb10u2_amd64.buildinfo
7ae383d7effd97e6cf8ff4fa163f3572 51644 debug optional spamc-dbgsym_3.4.2-1+deb10u2_amd64.deb
5cd99e49a2a2b0e89d07fbe3276a85c0 83176 mail optional spamc_3.4.2-1+deb10u2_amd64.deb
-----BEGIN PGP SIGNATURE-----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=8tp9
-----END PGP SIGNATURE-----
Reply to: