james-server-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tellier Benoit (JIRA)" <server-...@james.apache.org>
Subject [jira] [Created] (JAMES-2558) Use SpamAssassin version 3.4.2 in our test suite
Date Wed, 10 Oct 2018 07:47:00 GMT
Tellier Benoit created JAMES-2558:

             Summary: Use SpamAssassin version 3.4.2 in our test suite
                 Key: JAMES-2558
                 URL: https://issues.apache.org/jira/browse/JAMES-2558
             Project: James Server
          Issue Type: Improvement
          Components: mailbox, Mailet Contributions
    Affects Versions: master
            Reporter: Tellier Benoit
             Fix For: 3.2.0

Version 3.4.1 is vulnerable to CVE-2017-15705, CVE-2016-1238, CVE-2018-11780 & CVE-2018-11781

Causing denial of service.

JAMES only enforces SpamAssassin 3.4.1 use as part of its test suite, and SpamAssassin components
are currently undocumented. 

Thus we just need to update SpamAssassin images used in tests.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org

View raw message