
CVE-2020-1931 for Nefarious rule configuration (.cf) files can be configured to run system commands with warnings. In this release, there are bug fixes for two CVEs: *** : Apache SpamAssassin 3.4.4 has been released! Apache SpamAssassin 3.4.4 is primarily a security release. If you do not update to 3.4.2 or later, you will be stuck at the last ruleset with SHA-1 checksums. *** On March 1, 2020, we stopped publishing rulesets with SHA-1 checksums.
CVE-2020-1946 for Malicious rule configuration (.cf) files can be configured to run system commands. In this release, there are bug fixes for one CVE: : Apache SpamAssassin 3.4.5 has been released! Apache SpamAssassin 3.4.5 is primarily a security release. All future releases and bug fixes will be in the 4.0 series.
*** There will be no more development or bug fixes in the 3.4 branch unless a new security issue requires a 3.4.7 release. : Apache SpamAssassin 3.4.6 has been released! Apache SpamAssassin 3.4.6 fixes two bugs that were introduced by the 3.4.5 release that could prevent certain rules from properly firing.
Sent here because you received an e-mail message which was modified by SpamAssassin? Please read this end-user notice.
Looking for tips to improve your existing installation? Click here for a variety of topics in our Wiki that might help.
Click here to get started using SpamAssassin!. It uses a robust scoring framework and plug-ins to integrate a wide range of advanced heuristic and statistical analysis tests on email headers and body text including text analysis, Bayesian filtering, DNS blocklists, and collaborative filtering databases.Īpache SpamAssassin is a project of the Apache Software Foundation (ASF). Welcome to the home page for the open-source Apache SpamAssassin Project.Īpache SpamAssassin is the #1 Open Source anti-spam platform giving system administrators a filter to classify email and block spam (unsolicited bulk email).