Fedora Core 3: FEDORA-2005-427 Critical: Spamassassin DoS Issue

SpamAssassin provides you with a way to reduce if not completely eliminate

Unsolicited Commercial Email (SPAM) from your incoming email. It can

be invoked by a MDA such as sendmail or postfix, or can be called from

a procmail script, .forward file, etc. It uses a genetic-algorithm

evolved scoring system to identify messages which look spammy, then

adds headers to the message so they can be filtered by the user's mail

reading software. This distribution includes the spamd/spamc components

which create a server that considerably speeds processing of mail.

To enable spamassassin, if you are receiving mail locally, simply add

this line to your ~/.procmailrc:

INCLUDERC=/etc/mail/spamassassin/spamassassin-default.rc

To filter spam for all users, add that line to /etc/procmailrc

(creating if necessary).

Important update for a Denial of Service vulnerability, plus more

bug fixes from upstream. More details available at:

https://cwiki.apache.org/confluence/display/SPAMASSASSIN/NextRelease

- 3.0.4 with more bug fixes and CAN-2005-1266

* Tue May 17 2005 Warren Togami - 3.0.3-4

- allow user-level disabling of subject rewriting pref (#147464)

59d5fe379a2dc6932a4e621cc9a497ad SRPMS/spamassassin-3.0.4-1.fc3.src.rpm

c3f1595455b87681a9a39476e1643f31 x86_64/spamassassin-3.0.4-1.fc3.x86_64.rpm

f635b82f1ce7339386ff9e1d19394b2d

x86_64/debug/spamassassin-debuginfo-3.0.4-1.fc3.x86_64.rpm

f0a5cf57a98e76b96c434567333f75c8 i386/spamassassin-3.0.4-1.fc3.i386.rpm

8b2557759728f029191629dad8b76d3b

i386/debug/spamassassin-debuginfo-3.0.4-1.fc3.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com