On 2021/03/25 08:55, Giovanni Bechis wrote:
> Diff to update SpamAssassin to latest version (that fixes a CVE) follows.
> It's the same diff I have committed to -current.
> Ok to commit it on 6.8 ?
definitely, quite a nasty one
"Malicious rule configuration (.cf) files can be configured to run system commands."
No comments:
Post a Comment