[Git][security-tracker-team/security-tracker][master] Clarify that sa-exim issues are documented in README.greylisting.gz

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
55c1e2f8 by Salvatore Bonaccorso at 2019-12-22T20:07:11Z
Clarify that sa-exim issues are documented in README.greylisting.gz

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -85096,7 +85096,8 @@ CVE-2019-19920
 	NOTE: https://marc.info/?l=spamassassin-users&m=157668305026635&w=2
 	NOTE: The issue is "effectively" mitigating due to the CVE-2018-11805 fix in
 	NOTE: spamassassin, making the Greylisting.pm non-functional (and so a functional
-	NOTE: regression as well as tracked in #946829)
+	NOTE: regression as well as tracked in #946829). The security implications are
+	NOTE: as well documented in /usr/share/doc/sa-exim/README.greylisting.gz
 CVE-2018-11805 (In Apache SpamAssassin before 3.4.3, nefarious CF files can be configu ...)
 	{DSA-4584-1 DLA-2037-1}
 	- spamassassin 3.4.3~rc6-1 (bug #946652)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/55c1e2f83e5b1702a8adbdcf80a495b44ddd897f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/55c1e2f83e5b1702a8adbdcf80a495b44ddd897f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191222/5b8f5f43/attachment.html>