Linux · Security advisory · November 4, 2020
RHSA-2020:4625: spamassassin security update
RHSA-2020:4625, released November 4, 2020, fixes 4 CVEs in spamassassin (version 0:3.4.2-10.el8). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0723
94th percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 3
Routine 1
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| spamassassin | RHEL 8 | 0:3.4.2-10.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2019-12420 | spamassassin: The SpamAssassin tool provides a way to reduce unsolicited commercial email (spam) from incoming email. Security Fix... | 7.5 | 0.0723 | None reported | |
| High | CVE-2020-1930 | spamassassin: The SpamAssassin tool provides a way to reduce unsolicited commercial email (spam) from incoming email. Security Fix... | 8.1 | 0.0705 | None reported | |
| High | CVE-2020-1931 | spamassassin: The SpamAssassin tool provides a way to reduce unsolicited commercial email (spam) from incoming email. Security Fix... | 8.1 | 0.0646 | None reported | |
| Routine | CVE-2018-11805 | spamassassin: The SpamAssassin tool provides a way to reduce unsolicited commercial email (spam) from incoming email. Security Fix... | 6.7 | 0.0091 | None reported |
Showing 1 to 4 of 4
1