Lucene search

K
redhatRedHatRHSA-2007:0492
HistoryJun 13, 2007 - 12:00 a.m.

(RHSA-2007:0492) Moderate: spamassassin security update

2007-06-1300:00:00
access.redhat.com
8

0.0004 Low

EPSS

Percentile

5.1%

SpamAssassin provides a way to reduce unsolicited commercial email (spam)
from incoming email.

Martin Krafft discovered a symlink issue in SpamAssassin that affects
certain non-default configurations. A local user could use this flaw to
create or overwrite files writable by the spamd process (CVE-2007-2873).

Users of SpamAssassin should upgrade to these updated packages which
contain a backported patch to correct this issue.

Note: This issue did not affect the version of SpamAssassin shipped with
Red Hat Enterprise Linux 3.