

CVE-2019-12420 for Multipart Denial of Service Vulnerability.In this release, there is also one new plugin and there are bug fixes for two CVEs: There are a number of functional patches, improvements as well as security reasons to upgrade to 3.4.3. : Apache SpamAssassin 3.4.3 has been released! Apache SpamAssassin 3.4.3 contains numerous tweaks and bug fixes as we prepare to move to version 4.0.0 with better, native UTF-8 handling. CVE-2020-1930 for Nefarious rule configuration (.cf) files can be configured to run system commands with sa-compile.CVE-2020-1931 for Nefarious rule configuration (.cf) files can be configured to run system commands with warnings.In this release, there are bug fixes for two CVEs: *** : Apache SpamAssassin 3.4.4 has been released! Apache SpamAssassin 3.4.4 is primarily a security release. If you do not update to 3.4.2 or later, you will be stuck at the last ruleset with SHA-1 checksums. *** On March 1, 2020, we stopped publishing rulesets with SHA-1 checksums. CVE-2020-1946 for Malicious rule configuration (.cf) files can be configured to run system commands.In this release, there are bug fixes for one CVE: : Apache SpamAssassin 3.4.5 has been released! Apache SpamAssassin 3.4.5 is primarily a security release. All future releases and bug fixes will be in the 4.0 series. *** There will be no more development or bug fixes in the 3.4 branch unless a new security issue requires a 3.4.7 release.

: Apache SpamAssassin 3.4.6 has been released! Apache SpamAssassin 3.4.6 fixes two bugs that were introduced by the 3.4.5 release that could prevent certain rules from properly firing. Visit the downloads page to pick it up, and for more info. : Apache SpamAssassin 4.0.0 has been released! This is a major upgrade to SpamAssassin with full Unicode support and many other new features. Sent here because you received an e-mail message which was modified by SpamAssassin? Please read this end-user notice. Looking for tips to improve your existing installation? Click here for a variety of topics in our Wiki that might help.

Welcome to the home page for the open-source Apache SpamAssassin Project.Īpache SpamAssassin is the #1 Open Source anti-spam platform giving system administrators a filter to classify email and block spam (unsolicited bulk email).
