https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:50:33.667204+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4315 ALSA-2021:4315 — Moderate: spamassassin security update 2026-10-04T23:50:33.867205+00:00

Affected: AlmaLinux:8: spamassassin

The SpamAssassin tool provides a way to reduce unsolicited commercial email (spam) from incoming email.

Security Fix(es):

* spamassassin: Malicious rule configuration files can be configured to run system commands (CVE-2020-1946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-01910 bdu:2021-01910 2026-10-04T23:50:33.867297+00:00 bdu:2021-01910 https://cve.radiocsirt.org/vuln/certfr-2021-avi-225 certfr-2021-avi-225 — Une vulnérabilité a été découverte dans Apache SpamAssassin. Elle permet à un attaquant de provoquer une exécution de c… 2026-10-04T23:50:33.867316+00:00 certfr-2021-avi-225 https://cve.radiocsirt.org/vuln/cnvd-2021-25268 cnvd-2021-25268 2026-10-04T23:50:33.867334+00:00 cnvd-2021-25268 https://cve.radiocsirt.org/vuln/euvd-2026-215938 EUVD-2026-215938 2026-10-04T23:50:33.867345+00:00 EUVD-2026-215938 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1946 fkie_cve-2020-1946 2026-10-04T23:50:33.867356+00:00

In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.

 https://cve.radiocsirt.org/vuln/ghsa-qmmx-pr2m-q429 GHSA-qmmx-pr2m-q429 2026-10-04T23:50:33.867378+00:00

In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.

 https://cve.radiocsirt.org/vuln/gsd-2020-1946 gsd-2020-1946 2026-10-04T23:50:33.867394+00:00 gsd-2020-1946 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0551-1 openSUSE-SU-2021:0551-1 — Security update for spamassassin 2026-10-04T23:50:33.867404+00:00

Security update for spamassassin

 https://cve.radiocsirt.org/vuln/suse-su-2021:1152-1 SUSE-SU-2021:1152-1 — Security update for spamassassin 2026-10-04T23:50:33.867422+00:00

Security update for spamassassin

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1946 UBUNTU-CVE-2020-1946 2026-10-04T23:50:33.867437+00:00

Affected: Ubuntu:Pro:14.04:LTS: spamassassin, Ubuntu:16.04:LTS: spamassassin, Ubuntu:18.04:LTS: spamassassin, Ubuntu:20.04:LTS: spamassassin

In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.