Fedora Core 5: 2006-598 Critical: SpamAssassin CVE-2006-2447 Fix

SpamAssassin provides you with a way to reduce if not completely eliminate

Unsolicited Commercial Email (SPAM) from your incoming email. It can

be invoked by a MDA such as sendmail or postfix, or can be called from

a procmail script, .forward file, etc. It uses a genetic-algorithm

evolved scoring system to identify messages which look spammy, then

adds headers to the message so they can be filtered by the user's mail

reading software. This distribution includes the spamd/spamc components

which create a server that considerably speeds processing of mail.

To enable spamassassin, if you are receiving mail locally, simply add

this line to your ~/.procmailrc:

INCLUDERC=/etc/mail/spamassassin/spamassassin-default.rc

To filter spam for all users, add that line to /etc/procmailrc

(creating if necessary).

3.1.3 Resolves CVE-2006-2447.

Note that you are affected by this bug only if you launched

spamd with both --vpopmail and --paranoid, which is not a

common configuration.

Also included are bug fixes from 3.1.2.

- CVE-2006-2447

* Fri May 26 2006 Warren Togami - 3.1.2-1

- 3.1.2 bug fix release

* Tue May 9 2006 Warren Togami - 3.0.5-4

- Preserve timestamp and context of /etc/sysconfig/spamassassin (#178580)

01f1f1e002bb290078e6cbcaa7b21432ee35ea1f SRPMS/spamassassin-3.1.3-1.fc5.src.rpm

01f1f1e002bb290078e6cbcaa7b21432ee35ea1f noarch/spamassassin-3.1.3-1.fc5.src.rpm

838029c0b7eb2bb488727d7a40cab3eac4addc9a ppc/spamassassin-3.1.3-1.fc5.ppc.rpm

26472674992318a962ae7a0a140c41781f72d4d5 ppc/debug/spamassassin-debuginfo-3.1.3-1.fc5.ppc.rpm

599747d8bb1f665bc3390bd71bf86b8b2011f242 x86_64/debug/spamassassin-debuginfo-3.1.3-1.fc5.x86_64.rpm

d618780609768ab5a224f98a794a7e6a6a6b6d8e x86_64/spamassassin-3.1.3-1.fc5.x86_64.rpm

ed82a34755da2d14919e10df6c4ae91a08a331fa i386/debug/spamassassin-debuginfo-3.1.3-1.fc5.i386.rpm

0da440b7955745e209543084a51288433bb73c1d i386/spamassassin-3.1.3-1.fc5.i386.rpm

This update can be installed with the 'yum' update program. Use 'yum update

package-name' at the command line. For more information, refer to 'Managing

Software with yum,' available at .

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/