Launchpad.net

CVE 2018-11781

Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.

CVE-2018-11781 (Candidate) is related to these bugs:

Bug #1796863: Upgrade to version 3.4.2 for Bionic

		In	Importance	Status
1796863	Upgrade to version 3.4.2 for Bionic	spamassassin (Ubuntu)	Medium	Fix Released
1796863	Upgrade to version 3.4.2 for Bionic	spamassassin (Ubuntu Bionic)	Undecided	Fix Released
1796863	Upgrade to version 3.4.2 for Bionic	spamassassin (Ubuntu Trusty)	Undecided	Fix Released
1796863	Upgrade to version 3.4.2 for Bionic	spamassassin (Ubuntu Cosmic)	Medium	Fix Released
1796863	Upgrade to version 3.4.2 for Bionic	spamassassin (Ubuntu Xenial)	Undecided	Fix Released

Bug #1801906: Backport 3.4.2 CVE fixes to stable releases

Summary				In	Importance	Status
	1801906	Backport 3.4.2 CVE fixes to stable releases		spamassassin (Ubuntu)	Undecided	Confirmed

See the

CVE page on Mitre.org for more details.