USN-4520-1: Exim SpamAssassin vulnerability
It was discovered that Exim SpamAssassin does not properly handle
configuration strings. An attacker could possibly use this issue to execute
arbitrary code. (CVE-2019-19920)
Source: USN-4520-1: Exim SpamAssassin vulnerability
