--------------------------------------------------------------------- Fedora Legacy Test Update Notification FEDORALEGACY-2005-2268 Bugzilla https://bugzilla.fedora.us/show_bug.cgi?id=2268 2005-03-05 ---------------------------------------------------------------------
Name : spamassassin Versions : fc1: spamassassin-2.63-0.2.1.legacy Summary : Spam filter for email which can be invoked from mail delivery agents. Description : SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email (SPAM) from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring system to identify messages which look spammy, then adds headers to the message so they can be filtered by the user's mail reading software. This distribution includes the spamd/spamc components which create a server that considerably speeds processing of mail.
--------------------------------------------------------------------- Update Information:
An updated spamassassin package that fixes a denial of service bug when parsing malformed messages is now available.
SpamAssassin provides a way to reduce unsolicited commercial email (SPAM) from incoming email.
A denial of service bug has been found in SpamAssassin versions below 2.64. A malicious attacker could construct a message in such a way that would cause spamassassin to stop responding, potentially preventing the delivery or filtering of email. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0796 to this issue.
Users of SpamAssassin should update to these updated packages which contain a backported patch and is not vulnerable to this issue.
--------------------------------------------------------------------- Changelogs
fc1: * Tue Nov 16 2004 Rob Myers <rob.myers@xxxxxxxxxxxxxxx> 2.63-0.2.1.legacy - patch for CAN-2004-0796 (FL #2268)
--------------------------------------------------------------------- This update can be downloaded from: http://download.fedoralegacy.org/ (sha1sums)
fc1:
0a34a50cec6fb1e4d4359d49e928adc8aba06048 fedora/1/updates-testing/i386/spamassassin-2.63-0.2.1.legacy.i386.rpm
e4b75ec1d65a4d32cd80e55b5fb720aa73bdc4f5 fedora/1/updates-testing/SRPMS/spamassassin-2.63-0.2.1.legacy.src.rpm
---------------------------------------------------------------------
Please test and comment in bugzilla.
Attachment:
signature.asc
Description: OpenPGP digital signature
-- fedora-legacy-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-legacy-list