https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 23:50:36 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:4315 <p><strong>Affected:</strong> AlmaLinux:8: spamassassin</p> <p>The SpamAssassin tool provides a way to reduce unsolicited commercial email (spam) from incoming email.</p> <p>Security Fix(es):</p> <p>* spamassassin: Malicious rule configuration files can be configured to run system commands (CVE-2020-1946)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: spamassassin</p> <p>The SpamAssassin tool provides a way to reduce unsolicited commercial email (spam) from incoming email.</p> <p>Security Fix(es):</p> <p>* spamassassin: Malicious rule configuration files can be configured to run system commands (CVE-2020-1946)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2021:4315 https://cve.radiocsirt.org/vuln/bdu:2021-01910 bdu:2021-01910 https://cve.radiocsirt.org/vuln/bdu:2021-01910 https://cve.radiocsirt.org/vuln/certfr-2021-avi-225 certfr-2021-avi-225 https://cve.radiocsirt.org/vuln/certfr-2021-avi-225 https://cve.radiocsirt.org/vuln/cnvd-2021-25268 cnvd-2021-25268 https://cve.radiocsirt.org/vuln/cnvd-2021-25268 https://cve.radiocsirt.org/vuln/euvd-2026-215938 EUVD-2026-215938 https://cve.radiocsirt.org/vuln/euvd-2026-215938 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1946 <p>In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.</p> <p>In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-1946 https://cve.radiocsirt.org/vuln/ghsa-qmmx-pr2m-q429 <p>In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.</p> <p>In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.</p> https://cve.radiocsirt.org/vuln/ghsa-qmmx-pr2m-q429 https://cve.radiocsirt.org/vuln/gsd-2020-1946 gsd-2020-1946 https://cve.radiocsirt.org/vuln/gsd-2020-1946 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0551-1 <p>Security update for spamassassin</p> <p>Security update for spamassassin</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0551-1 https://cve.radiocsirt.org/vuln/suse-su-2021:1152-1 <p>Security update for spamassassin</p> <p>Security update for spamassassin</p> https://cve.radiocsirt.org/vuln/suse-su-2021:1152-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1946 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: spamassassin, Ubuntu:16.04:LTS: spamassassin, Ubuntu:18.04:LTS: spamassassin, Ubuntu:20.04:LTS: spamassassin</p> <p>In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: spamassassin, Ubuntu:16.04:LTS: spamassassin, Ubuntu:18.04:LTS: spamassassin, Ubuntu:20.04:LTS: spamassassin</p> <p>In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1946