- update to patch release version 4.0.1
- Incompatibilities with some versions of perl and some perl modules
that have been released since the release of SpamAssassin 4.0.0
- Problems using cpan to install SpamAssassin when certain required
or optional modules are not already installed
- Support for space characters in the path name of some executables
used by certain plugins
- Improved handling of URL shortener link redirects
- Improved TxRep locking management
- Added Mail::SpamAssassin::Plugin::AuthRes plugin to use
Authentication-Results header fields in other plugins
- Added a Pyzor Perl implementation
- Perl crash when certain uri_detail rules processed some messages
with UTF-8 characters
- Inconsistent handling of newlines in header rules
- Text or HTML content placed in octet-stream attachments by
spammers to bypass SpamAssassin scanning
- Implemented TCP fallback for truncated DNS UDP replies
- Refresh patch-URIDNSBL
- Drop undocumented patch-SQL_ASCII_SORT breaking sqlite
- Drop most of iXhash2-meta-rules.patch (additional services no longer exist)
OBS-URL: https://build.opensuse.org/request/show/1166486
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/spamassassin?expand=0&rev=163
- Update known warnings
% spamassassin-rpmlintrc
- Update to spamassissin 4.0.0:
* Notable internal changes:
- Meta rules no longer use priority values, they are evaluated
dynamically when the rules they depend on are finished
- DNS and other asynchronous lookups like DCC or Razor2 plugins
are now launched when priority -100 is reached. This allows
short circuiting at lower priority without sending unneeded
DNS queries
- New internal Mail::SpamAssassin::GeoDB module supporting
RelayCountry and URILocalBL plugins provides a unified
interface to Geographic IP modules. These include:
MaxMind::DB::Reader (GeoIP2)
Geo::IP
IP::Country::DB_File
IP::Country::Fast.
* New plugins:
- Mail::SpamAssassin::Plugin::ExtractText
- Mail::SpamAssassin::Plugin::DMARC
- Mail::SpamAssassin::Plugin::DecodeShortURLs
* HashCash module has been removed completely
* Full detailed changelog:
https://svn.apache.org/repos/asf/spamassassin/trunk/Changes
OBS-URL: https://build.opensuse.org/request/show/1045234
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/spamassassin?expand=0&rev=156
- update spamassassin to 3.4.5
* In this release, there are bug fixes for one CVE:
CVE-2020-1946 for Malicious rule configuration (.cf) files can
be configured to run system commands
* Improvements to OLEVBMacro and AskDNS plugins
* Received and EnvelopeFrom headers matching improvements
* userpref SQL schema fixes
* rbl and hashbl evaluation improvements
* fix for non working TxRep tag names
* man page fixes
- Update download links
OBS-URL: https://build.opensuse.org/request/show/881204
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/spamassassin?expand=0&rev=146
- update spamassassin to 3.4.4
* In this release, there are bug fixes for two CVEs:
CVE-2020-1931 for Nefarious rule configuration (.cf) files can
be configured to run system commands with warnings.
CVE-2020-1930 for Nefarious rule configuration (.cf) files can
be configured to run system commands with sa-compile.
* Improvements to OLEVBMacro
* Fix for CRLF handling with SpamAssMilter & DKIM
* Small fix for a regexp to provide Perl 5.8.x compatability again
* Increased fns_extrachars default value to 50
* Fixed nosubject and maxhits tflags when sa-compile is used
* Limited the Bayes parsed token count
* Improvements to whitespace trimming
OBS-URL: https://build.opensuse.org/request/show/768441
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/spamassassin?expand=0&rev=138
- update spamassassin to 3.4.3
* There is one new plugin (disabled by default)
OLEVBMacro - Detects both OLE macros and VB code inside Office
documents
* Two CVE security bug fixes are included in this release
CVE-2019-12420 for Multipart Denial of Service Vulnerability
CVE-2018-11805 for nefarious CF files can be configured to
run system commands without any output or errors
* Safer and faster scanning of large emails using
body_part_scan_size and rawbody_part_scan_size settings.
* New tflag "nosubject" for 'body' rules, to stop matching the
Subject header which is part of the body text.
* Security updates include deprecation of the unsafe sa-update
'--allowplugins' option, which now prints a warning that
'--reallyallowplugins' is required to use it.
OBS-URL: https://build.opensuse.org/request/show/756055
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/spamassassin?expand=0&rev=135
- Change architecture of perl modules to 'noarch'
- Fix extraction command for default rules (proper fix for
boo#911355, rather than a workaround)
- Don't unconditionally run sa-update on spamd and spampd service
start as this doesn't honor the settings in /etc/sysconfig/spamd
- After running sa-update, only restart services if they were
running before
- Fix name in logging timed-sa-update (suse.cron-sa-update
doesn't exist anymore)
OBS-URL: https://build.opensuse.org/request/show/747252
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/spamassassin?expand=0&rev=132
- update spamassassin to 3.4.2
* There are four new plugins (disabled by default)
HashBL - interface to The Email Blocklist (EBL)
ResourceLimits - assure your spamd child processes do not exceed
specified CPU or memory limit
FromNameSpoof - detection of the From:name field being used to
mislead
Phishing - finds uris used in phishing campaigns detected by
OpenPhish (https://openphish.com) or PhishTank
(https://phishtank.com) feeds
* For security reasons SSLv3 support has been removed from spamc(1).
* Four CVE security bug fixes are included in this release for
PDFInfo.pm and the SA core: CVE-2017-15705, CVE-2016-1238,
CVE-2018-11780 & CVE-2018-11781.
* In sa-update script, optional support for SHA-256 / SHA-512 in
addition to or instead of SHA1 has been added for better validation
of rules.
* GeoIP2 support has been added to RelayCountry and URILocalBL plugins
due to GeoIP legacy API deprecations.
* several new or enhanced configuration options
- update spampd to 2.51
* Replace IO::Socket::INET with IO::Socket::IP for IPv6 support
* Unix ports (ability to listen on UNIX sockets)
* Add X-Envelope-* headers before Received
* Add /usr/local/bin and /usr/local/sbin to PATH
* Add --setsid option to start server with setsid if running in
background
- Removed patches (are now in upstream):
* 0001-bug-7361-Allow-building-against-OpenSSL-1.1.0.patch
* 0001-Fix-bug-7367-Don-t-assume-cwd-.-is-in-INC-it-may-be-.patch
* DNS-resolver-recursion-desired-not-set.patch
* spamassassin-dont_use_SSLv3_methods.patch
* spampd-2.42_git_20170226.patch
* Unescaped_left_brace_in_regex_is_deprecated.patch
OBS-URL: https://build.opensuse.org/request/show/636660
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/spamassassin?expand=0&rev=122
