Skip to content

Commit

Permalink
spamassassin: 3.4.2 -> 3.4.3
Browse files Browse the repository at this point in the history
Two security issues have been fixed in this release:
  * CVE-2019-12420 for Multipart Denial of Service Vulnerability
  * CVE-2018-11805 for nefarious CF files can be configured to
    run system commands without any output or errors.

https://svn.apache.org/repos/asf/spamassassin/branches/3.4/build/announcements/3.4.3.txt
(cherry picked from commit 5d3607b)
  • Loading branch information
andir committed Dec 15, 2019
1 parent fbe321e commit bd6d9d7
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions pkgs/servers/mail/spamassassin/default.nix
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@

perlPackages.buildPerlPackage rec {
pname = "SpamAssassin";
version = "3.4.2";
version = "3.4.3";

src = fetchurl {
url = "mirror://apache/spamassassin/source/Mail-${pname}-${version}.tar.bz2";
sha256 = "1np8h293bzg33i0xn9gj9krwgr7k6xbyf1yhxr2j2xci95d080yg";
sha256 = "1380cmrgjsyidnznr844c5yr9snz36dw7xchdfryi2s61vjzvf55";
};

# https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7434
Expand Down

0 comments on commit bd6d9d7

Please sign in to comment.