Paketname
spamassassin
Datum
2007-06-14
Advisory ID
MDKSA-2007:125
Betroffene Versionen
2007.0 x86_64 , 2007.1 i586 , 2007.0 i586 , CS4.0 i586 , CS4.0 x86_64 , 2007.1 x86_64

Problembeschreibung

SpamAssassin 3.1.x, when running as root with unusual configuration
options using vpopmail or virtual users, could allow local users to
cause a denial of service (via corrupting arbitrary files) using a
symlink attack on a file used by spamd.

SpamAssassin 3.1.9, which corrects this flaw, is provided with
this update.

Aktualisierte Pakete

2007.0 x86_64

 136b4b7726af7e858bdfd416a590bc69  2007.0/x86_64/perl-Mail-SpamAssassin-3.1.9-0.1mdv2007.0.x86_64.rpm
 d9e416f10cfc5ea29cc6f5fe683b5dda  2007.0/x86_64/spamassassin-3.1.9-0.1mdv2007.0.x86_64.rpm
 7abe66bb43c8dd00cad3759664c6bf65  2007.0/x86_64/spamassassin-spamc-3.1.9-0.1mdv2007.0.x86_64.rpm
 5ea0a2c56eb2ac07df39ec1a578ce385  2007.0/x86_64/spamassassin-spamd-3.1.9-0.1mdv2007.0.x86_64.rpm
 ef19bf0d92d5ba5191669bad149c78c5  2007.0/x86_64/spamassassin-tools-3.1.9-0.1mdv2007.0.x86_64.rpm 
 5cd9896b49fed9eb8fc774167d74244c  2007.0/SRPMS/spamassassin-3.1.9-0.1mdv2007.0.src.rpm

2007.1 i586

 c346bacaf0032d8b04c7d8d0fd3d5e58  2007.1/i586/perl-Mail-SpamAssassin-3.1.9-0.1mdv2007.1.i586.rpm
 bcf67361bf441a9e3b3783d0f3802449  2007.1/i586/spamassassin-3.1.9-0.1mdv2007.1.i586.rpm
 524d9f34a21b63bd60e23f9e3b10ab72  2007.1/i586/spamassassin-spamc-3.1.9-0.1mdv2007.1.i586.rpm
 4d15df1d52591e597b504801e3b48fa9  2007.1/i586/spamassassin-spamd-3.1.9-0.1mdv2007.1.i586.rpm
 7d5394511014e74ec8f1407820fd0646  2007.1/i586/spamassassin-tools-3.1.9-0.1mdv2007.1.i586.rpm 
 b261e57f3a15bd6f2c0b1d1fe731723d  2007.1/SRPMS/spamassassin-3.1.9-0.1mdv2007.1.src.rpm

2007.0 i586

 6868ff1682b0af4f4a1496d1b17b1abb  2007.0/i586/perl-Mail-SpamAssassin-3.1.9-0.1mdv2007.0.i586.rpm
 1cedda8aa0bd35a0e745180a45a19979  2007.0/i586/spamassassin-3.1.9-0.1mdv2007.0.i586.rpm
 00cffd46beb7733d24a7194e7a269f59  2007.0/i586/spamassassin-spamc-3.1.9-0.1mdv2007.0.i586.rpm
 97a3c6aebaf515c2d07ae903e3ade97b  2007.0/i586/spamassassin-spamd-3.1.9-0.1mdv2007.0.i586.rpm
 2d17ea30dbc1679f0770415a4f1e93bc  2007.0/i586/spamassassin-tools-3.1.9-0.1mdv2007.0.i586.rpm 
 5cd9896b49fed9eb8fc774167d74244c  2007.0/SRPMS/spamassassin-3.1.9-0.1mdv2007.0.src.rpm

CS4.0 i586

 91fe3692a86bc63d73b2cd65b9a7680d  corporate/4.0/i586/perl-Mail-SpamAssassin-3.1.9-0.1.20060mlcs4.i586.rpm
 576704ea8dc89097e611c5ffaf1e604f  corporate/4.0/i586/spamassassin-3.1.9-0.1.20060mlcs4.i586.rpm
 47fef4374240c6c6f7c475b675e620ee  corporate/4.0/i586/spamassassin-spamc-3.1.9-0.1.20060mlcs4.i586.rpm
 c10a0adc7e9c1a0d4ee7ae7ca981fefc  corporate/4.0/i586/spamassassin-spamd-3.1.9-0.1.20060mlcs4.i586.rpm
 f1d5308b7bcce9eed20028623b98fa02  corporate/4.0/i586/spamassassin-tools-3.1.9-0.1.20060mlcs4.i586.rpm 
 e05b3f4264eccec4af0204b2d86009e0  corporate/4.0/SRPMS/spamassassin-3.1.9-0.1.20060mlcs4.src.rpm

CS4.0 x86_64

 ee0e50378b04981186e363e9ffd46a0c  corporate/4.0/x86_64/perl-Mail-SpamAssassin-3.1.9-0.1.20060mlcs4.x86_64.rpm
 deb4f200369c92ece52b62dd40485ec1  corporate/4.0/x86_64/spamassassin-3.1.9-0.1.20060mlcs4.x86_64.rpm
 bef27fbaf42eea12e584a0ebca872b77  corporate/4.0/x86_64/spamassassin-spamc-3.1.9-0.1.20060mlcs4.x86_64.rpm
 ed5b1d4c8e9c65dbe47e3c52d98928f5  corporate/4.0/x86_64/spamassassin-spamd-3.1.9-0.1.20060mlcs4.x86_64.rpm
 287bde6ce88bb820d788e0017b19d39b  corporate/4.0/x86_64/spamassassin-tools-3.1.9-0.1.20060mlcs4.x86_64.rpm 
 e05b3f4264eccec4af0204b2d86009e0  corporate/4.0/SRPMS/spamassassin-3.1.9-0.1.20060mlcs4.src.rpm

2007.1 x86_64

 92b56f81d9602aa7c78799a368f5a227  2007.1/x86_64/perl-Mail-SpamAssassin-3.1.9-0.1mdv2007.1.x86_64.rpm
 63d5278e935c222cc07ce10f25921a01  2007.1/x86_64/spamassassin-3.1.9-0.1mdv2007.1.x86_64.rpm
 c461b6faf2a7c6283d8380e9ff45c66f  2007.1/x86_64/spamassassin-spamc-3.1.9-0.1mdv2007.1.x86_64.rpm
 ea4ec4e59e5f7589bed9463fbcf09ccb  2007.1/x86_64/spamassassin-spamd-3.1.9-0.1mdv2007.1.x86_64.rpm
 eab7972520d2ff2dae31eb3facae2caa  2007.1/x86_64/spamassassin-tools-3.1.9-0.1mdv2007.1.x86_64.rpm 
 b261e57f3a15bd6f2c0b1d1fe731723d  2007.1/SRPMS/spamassassin-3.1.9-0.1mdv2007.1.src.rpm

Referenzen