Local symlink vulnerability. Fedora is not vulnerable in any default or common configurations. Read upstream's announcement for details. https://spamassassin.apache.org/404.html. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2007-584 2007-06-12 ---------------------------------------------------------------------Product : Fedora Core 5 Name : spamassassin Version : 3.1.9 Release : 1.fc5.1 Summary : Spam filter for email which can be invoked from mail delivery agents. Description : SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email (SPAM) from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring system to identify messages which look spammy, then adds headers to the message so they can be filtered by the user's mail reading software. This distribution includes the spamd/spamc components which create a server that considerably speeds processing of mail. To enable spamassassin, if you are receiving mail locally, simply add this line to your ~/.procmailrc: INCLUDERC=/etc/mail/spamassassin/spamassassin-default.rc To filter spam for all users, add that line to /etc/procmailrc (creating if necessary). ---------------------------------------------------------------------Update Information: Local symlink vulnerability. Fedora is not vulnerable in any default or common configurations. Read upstream's announcement for details. https://spamassassin.apache.org/404.html ---------------------------------------------------------------------* Tue Jun 12 2007 Warren Togami 3.1.9-1.fc5.1 - with proper deps for FC5 * Mon Jun 11 2007 Warren Togami 3.1.9-1 - 3.1.9 CVE-2007-2873 * Mon Feb 19 2007 Warren Togami 3.1.8-2 - Fix sa-learn regression (#228968) * Tue Feb 13 2007 Warren Togami 3.1.8-1 - 3.1.8 CVE-2007-0451 *Tue Feb 13 2007 Warren Togami 3.1.7-9 - silence sa-update cron script * Wed Feb 7 2007 Warren Togami 3.1.7-8 - only restart spamd if necessary after sa-update (#227756) * Wed Feb 7 2007 Warren Togami 3.1.7-7 - requires gnupg (#227738) * Sun Jan 28 2007 Warren Togami 3.1.7-6 - explicit requires on perl(HTTP::Date) and perl(LWP::UserAgent) (Bug #193100) * Mon Jan 22 2007 Warren Togami 3.1.7-5 - fix typo in logrotate.d (#223817) * Thu Jan 18 2007 Warren Togami - Options for RHEL4 * spamc/spamd cannot connect over IPv6 or SSL * sa-update is disabled The above functionality requires perl modules not included in RHEL4. You may still use them if you get those perl modules from elsewhere. RHEL5 ships these perl modules. * Thu Dec 14 2006 Warren Togami - 3.1.7-4 - add standardized sa-update cron script, disabled by default * Thu Dec 14 2006 Warren Togami - 3.1.7-2 - own directory /var/lib/spamassassin * Mon Nov 20 2006 Warren Togami - 3.1.7-1 - 3.1.7 maintenance release * Wed Aug 2 2006 Warren Togami - 3.1.4-1 - 3.1.4 maintenance release * Mon Jul 17 2006 Warren Togami - 3.1.3-5 - req perl-IO-Socket-SSL for spamc/spamd SSL communication - req perl-IO-Socket-INET6 for IPv6 * Wed Jul 12 2006 Jesse Keating - 3.1.3-3.1 - rebuild * Tue Jun 27 2006 Florian La Roche - 3.1.3-3 - require diffutils for the post script (cmp is used) * Wed Jun 7 2006 Warren Togami - 3.1.3-2 - start spamd before sendmail (#193818) - require perl-Archive-Tar (#193100) * Mon Jun 5 2006 Warren Togami - 3.1.3-1 - CVE-2006-2447 * Fri May 26 2006 Warren Togami - 3.1.2-1 - 3.1.2 bug fix release * Tue May 9 2006 Warren Togami - 3.0.5-4 - Preserve timestamp and context of /etc/sysconfig/spamassassin (#178580) ---------------------------------------------------------------------This update can be downloaded from: d149196c0c9996e0b3b7269fba0764a26564d049 SRPMS/spamassassin-3.1.9-1.fc5.1.src.rpm d149196c0c9996e0b3b7269fba0764a26564d049 noarch/spamassassin-3.1.9-1.fc5.1.src.rpm ed38c2336f1bc1b45dc8a6538aaf8790c86ca91f ppc/debug/spamassassin-debuginfo-3.1.9-1.fc5.1.ppc.rpm bed8d94a07da4003157afa92b088d333fb81c8ab ppc/spamassassin-3.1.9-1.fc5.1.ppc.rpm e68d895f0a10ba026543052c5befe8f84d49c37f x86_64/debug/spamassassin-debuginfo-3.1.9-1.fc5.1.x86_64.rpm 25dfab33bd05c9f1f8a1a810e84db97308e09f61 x86_64/spamassassin-3.1.9-1.fc5.1.x86_64.rpm 9c42dbba61e33334f3c2b4d5188dcaec07657bc1 i386/spamassassin-3.1.9-1.fc5.1.i386.rpm 8bc34c7eae33cd6505c1a4ad753d1202eaae2c42 i386/debug/spamassassin-debuginfo-3.1.9-1.fc5.1.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at . ---------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Local symlink vulnerability. Fedora is not vulnerable in any default or common configurations. Read upstream's announcement for details. https://spamassassin.apache.org/404.html. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2007-582 2007-06-12 ---------------------------------------------------------------------Product : Fedora Core 6 Name : spamassassin Version : 3.1.9 Release : 1.fc6 Summary : Spam filter for email which can be invoked from mail delivery agents. Description : SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email (SPAM) from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring system to identify messages which look spammy, then adds headers to the message so they can be filtered by the user's mail reading software. This distribution includes the spamd/spamc components which create a server that considerably speeds processing of mail. To enable spamassassin, if you are receiving mail locally, simply add this line to your ~/.procmailrc: INCLUDERC=/etc/mail/spamassassin/spamassassin-default.rc To filter spam for all users, add that line to /etc/procmailrc (creating if necessary). ---------------------------------------------------------------------Update Information: Local symlink vulnerability. Fedora is not vulnerable in any default or common configurations. Read upstream's announcement for details. https://spamassassin.apache.org/404.html ---------------------------------------------------------------------* Mon Jun 11 2007 Warren Togami 3.1.9-1 - 3.1.9 CVE-2007-2873 ---------------------------------------------------------------------This update can be downloaded from: e35f9489f830f3fd3cb8c1270b86a56a1856a952 SRPMS/spamassassin-3.1.9-1.fc6.src.rpm e35f9489f830f3fd3cb8c1270b86a56a1856a952 noarch/spamassassin-3.1.9-1.fc6.src.rpm 424c75875c9bbb4d77821e420c56a714c4b0bb7f ppc/spamassassin-3.1.9-1.fc6.ppc.rpm fb39e814ce1cff3fd691a59b3f7ee7c6ffa00474 ppc/debug/spamassassin-debuginfo-3.1.9-1.fc6.ppc.rpm 77fee9411cfe1d3aafd06f3338e7d67d4b8e68d1 x86_64/debug/spamassassin-debuginfo-3.1.9-1.fc6.x86_64.rpm 7bd1a5062cab3ebc8f3ad9893547850eefdc6ae4 x86_64/spamassassin-3.1.9-1.fc6.x86_64.rpm fc4d2f0597ca411bd6fafb1d68172953aadb736d i386/spamassassin-3.1.9-1.fc6.i386.rpm 2a71ee2c4ac5cd4a4dbbbbec9db3288dc43c1167 i386/debug/spamassassin-debuginfo-3.1.9-1.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at . ---------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Get the latest Linux and open source security news straight to your inbox.