description: Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.
problem types: Local Code Execution
affected:
{
product: Apache SpamAssassin
vendor: Apache Software Foundation
versions:
status: affected, version: before 3.4.2
}