FW: ANNOUNCE: Apache SpamAssassin 3.1.3 available!

sandrews at andrewscompanies.com sandrews at andrewscompanies.com
Mon Jun 5 20:09:39 IST 2006

The default config of mailscanner doesn't run with these switches, does

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Julian
Sent: Monday, June 05, 2006 2:51 PM
To: MailScanner discussion
Subject: Re: FW: ANNOUNCE: Apache SpamAssassin 3.1.3 available!

Thanks for that. I have just updated the ClamAV + SpamAssassin package
to contain the new 3.1.3 release of SpamAssassin.

Randal, Phil wrote:
> The files aren't on all mirrors yet, but can definitely be found at
>   http://www.eu.apache.org/dist/spamassassin/
> Cheers,
> Phil
> --
> Phil Randal
> Network Engineer
> Herefordshire Council
> Hereford, UK
> -----Original Message-----
> From: Theo Van Dinter [mailto:felicity at apache.org]
> Sent: 05 June 2006 17:13
> To: Spamassassin Users List; Spamassassin Devel List; Spamassassin 
> Announcements List
> Subject: ANNOUNCE: Apache SpamAssassin 3.1.3 available!
> Apache SpamAssassin 3.1.3 is now available!  This is a maintainance 
> release of the 3.1.x branch.
> Downloads are available from:
>   http://spamassassin.apache.org/downloads.cgi?update=200606050750
> The release file will also be available via CPAN in the near future.
> md5sum of archive files:
>   5f049f0b9fc63585a85593a3c68409bb  Mail-SpamAssassin-3.1.3.tar.bz2
>   32ad78f3cdaddb02cdf0f55572604d07  Mail-SpamAssassin-3.1.3.tar.gz
>   6cb6fc27c4466091b2bc4e04af8c39bf  Mail-SpamAssassin-3.1.3.zip
> sha1sum of archive files:
>   e1f4489ec8805985e0ca79765bde586bf0286725
> Mail-SpamAssassin-3.1.3.tar.bz2
>   ed9e18fae6db86d0b77ce48d8262194e06df9ef8
> Mail-SpamAssassin-3.1.3.tar.gz
>   090dfd3eaa0481789fbf94f67bcf9c2dd6387959  
> Mail-SpamAssassin-3.1.3.zip
> The release files also have a .asc accompanying them.  The file serves

> as an external GPG signature for the given release file.  The signing 
> key is available via the wwwkeys.pgp.net key server, as well as 
> http://spamassassin.apache.org/released/GPG-SIGNING-KEY
> The key information is:
> pub  1024D/265FA05B 2003-06-09 SpamAssassin Signing Key 
> <release at spamassassin.org>
>      Key fingerprint = 26C9 00A4 6DD4 0CD5 AD24  F6D7 DEE0 1987 265F 
> A05B
> 3.1.3 fixes a remote code execution vulnerability if spamd is run with

> the "--vpopmail" and "-P" options.  If either/both of those options 
> are not used, there is no vulnerability.  There was also a fix for the

> userstate directory and prefs file not being created.
> Changelog:
> - bug 4926: given a certain set of parameters to spamd and a specially
>   formatted input message, users could cause spamd to execute
>   commands as the spamd user
> - bug 4932: the userstate dir and userprefs file would not be created
>   under certain conditions.

Julian Field
Buy the MailScanner book at www.MailScanner.info/store Professional
Support Services at www.MailScanner.biz MailScanner thanks transtec
Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

This message has been scanned for viruses and dangerous content by
MailScanner, and is believed to be clean.
MailScanner thanks transtec Computers for their support.

MailScanner mailing list
mailscanner at lists.mailscanner.info

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

More information about the MailScanner mailing list