[ubuntu/precise-updates] spamassassin 3.4.2-0ubuntu0.12.04.4 (Accepted)

[Ubuntu Archive Robot]

spamassassin (3.4.2-0ubuntu0.12.04.4) precise-security; urgency=medium

  * SECURITY UPDATE: code execution via nefarious CF files
    - debian/patches/CVE-2020-1930: improve logic in
      lib/Mail/SpamAssassin/Plugin/OneLineBodyRuleType.pm. 
    - debian/patches/CVE-2020-1931: improve logic in
      lib/Mail/SpamAssassin/Conf.pm, lib/Mail/SpamAssassin/Constants.pm.
    - CVE-2020-1930
    - CVE-2020-1931
  * Thanks to Debian for the patches.

spamassassin (3.4.2-0ubuntu0.12.04.3) precise-security; urgency=medium

  * SECURITY UPDATE: code execution via nefarious CF files
    - debian/patches/CVE-2018-11805: improve rule parsing.
    - CVE-2018-11805
  * SECURITY UPDATE: resource consumption issue
    - debian/patches/CVE-2019-12420: limit checked mime parts.
    - CVE-2019-12420
  * Thanks to Debian for the patches.

spamassassin (3.4.2-0ubuntu0.12.04.2) precise-security; urgency=medium

  * SECURITY UPDATE: Update to 3.4.2 to fix multiple security issues and
    support new rule update signatures (LP: #1796863)
    - debian/patches/*patch: sync patches from 3.4.2-1 package.
    - add pkgrules orig tarball from 3.4.2-1 package.
    - debian/spamassassin.{init,preinst}: properly handle process name
      change in spamassassin 3.4.2.
    - debian/rules: copy STATISTICS files from pkgrules
    - CVE-2018-11780
    - CVE-2018-11781

spamassassin (3.3.2-2ubuntu1.2) precise-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15705.patch: fix in
      lib/Mail/SpamAssassin/HTML.pm.
    - CVE-2017-15705

Date: 2020-02-04 14:27:14.454092+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/spamassassin/3.4.2-0ubuntu0.12.04.4
-------------- next part --------------
Sorry, changesfile not available.