Fedora Core 4: FEDORA-2005-428 Critical Denial of Service in SpamAssassin

SpamAssassin provides you with a way to reduce if not completely eliminate

Unsolicited Commercial Email (SPAM) from your incoming email. It can

be invoked by a MDA such as sendmail or postfix, or can be called from

a procmail script, .forward file, etc. It uses a genetic-algorithm

evolved scoring system to identify messages which look spammy, then

adds headers to the message so they can be filtered by the user's mail

reading software. This distribution includes the spamd/spamc components

which create a server that considerably speeds processing of mail.

To enable spamassassin, if you are receiving mail locally, simply add

this line to your ~/.procmailrc:

INCLUDERC=/etc/mail/spamassassin/spamassassin-default.rc

To filter spam for all users, add that line to /etc/procmailrc

(creating if necessary).

Important update for a Denial of Service vulnerability, plus more

bug fixes from upstream. More details available at:

https://cwiki.apache.org/confluence/display/SPAMASSASSIN/NextRelease

- 3.0.4 with more bug fixes and CAN-2005-1266

b50c6ab812dd61849bd7e00c331f6edd SRPMS/spamassassin-3.0.4-1.fc4.src.rpm

4ddd73e272c9c854b7bfafbefd01c092 ppc/spamassassin-3.0.4-1.fc4.ppc.rpm

7fadeb5ca946c4c218bfb4bfc4846ead

ppc/debug/spamassassin-debuginfo-3.0.4-1.fc4.ppc.rpm

0ff72abd48f845e469c22eb7cc4d9c16 x86_64/spamassassin-3.0.4-1.fc4.x86_64.rpm

7e5b1c94241272d6eb56e5fe89d1c8b8

x86_64/debug/spamassassin-debuginfo-3.0.4-1.fc4.x86_64.rpm

ce44f6f3e461f23c4ab7eb9eca51903b i386/spamassassin-3.0.4-1.fc4.i386.rpm

03cfb93cbfa21ec921dbdf9ab07b38bb

i386/debug/spamassassin-debuginfo-3.0.4-1.fc4.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com