Fedora Legacy Test Update Notification: spamassassin

[Marc Deslauriers]

---------------------------------------------------------------------
Fedora Legacy Test Update Notification
FEDORALEGACY-2005-129284
Bugzilla https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=129284
2005-06-04
---------------------------------------------------------------------

Name        : spamassassin
Versions    : fc2: spamassassin-2.64-2.1.legacy
Summary     : Spam filter for email which can be invoked from mail
              delivery agents.
Description :
SpamAssassin provides you with a way to reduce if not completely
eliminate Unsolicited Commercial Email (SPAM) from your incoming email.
It can be invoked by a MDA such as sendmail or postfix, or can be called
from a procmail script, .forward file, etc.  It uses a genetic-algorithm
evolved scoring system to identify messages which look spammy, then
adds headers to the message so they can be filtered by the user's mail
reading software.  This distribution includes the spamd/spamc components
which create a server that considerably speeds processing of mail.

---------------------------------------------------------------------
Update Information:

An updated spamassassin package that fixes a denial of service bug when
parsing malformed messages is now available.

SpamAssassin provides a way to reduce unsolicited commercial email
(SPAM) from incoming email.

A denial of service bug has been found in SpamAssassin versions below
2.64. A malicious attacker could construct a message in such a way that
would cause spamassassin to stop responding, potentially preventing the
delivery or filtering of email. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the name CAN-2004-0796 to this
issue.

Users of SpamAssassin should update to these updated packages which
contain an updated version and is not vulnerable to this issue.

---------------------------------------------------------------------
Changelogs

fc2:
* Fri May 06 2005 Marc Deslauriers <marcdeslauriers at videotron.ca>
2.64-2.1.legacy
- Updated to 2.64 to fix CAN-2004-0796

---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedoralegacy.org/
(sha1sums)

fc2:
6b7fbf447dce761c6dc6c85df6cc336cb31a939a
fedora/2/updates-testing/i386/spamassassin-2.64-2.1.legacy.i386.rpm
8808655655b574f905a0308f0a0eca0c5e7d09c8
fedora/2/updates-testing/SRPMS/spamassassin-2.64-2.1.legacy.src.rpm

---------------------------------------------------------------------

Please test and comment in bugzilla.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 251 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/fedora-legacy-list/attachments/20050604/d388f4c2/attachment.sig>