Fedora Core 5: FEDORA-2006-598 critical: spamassassin CVE-2006-2447
Summary
SpamAssassin provides you with a way to reduce if not completely eliminate
Unsolicited Commercial Email (SPAM) from your incoming email. It can
be invoked by a MDA such as sendmail or postfix, or can be called from
a procmail script, .forward file, etc. It uses a genetic-algorithm
evolved scoring system to identify messages which look spammy, then
adds headers to the message so they can be filtered by the user's mail
reading software. This distribution includes the spamd/spamc components
which create a server that considerably speeds processing of mail.
To enable spamassassin, if you are receiving mail locally, simply add
this line to your ~/.procmailrc:
INCLUDERC=/etc/mail/spamassassin/spamassassin-default.rc
To filter spam for all users, add that line to /etc/procmailrc
(creating if necessary).
3.1.3 Resolves CVE-2006-2447.
Note that you are affected by this bug only if you launched
spamd with both --vpopmail and --paranoid, which is not a
common configuration.
Also included are bug fixes from 3.1.2.
- CVE-2006-2447
* Fri May 26 2006 Warren Togami
- 3.1.2 bug fix release
* Tue May 9 2006 Warren Togami
- Preserve timestamp and context of /etc/sysconfig/spamassassin (#178580)
01f1f1e002bb290078e6cbcaa7b21432ee35ea1f SRPMS/spamassassin-3.1.3-1.fc5.src.rpm
01f1f1e002bb290078e6cbcaa7b21432ee35ea1f noarch/spamassassin-3.1.3-1.fc5.src.rpm
838029c0b7eb2bb488727d7a40cab3eac4addc9a ppc/spamassassin-3.1.3-1.fc5.ppc.rpm
26472674992318a962ae7a0a140c41781f72d4d5 ppc/debug/spamassassin-debuginfo-3.1.3-1.fc5.ppc.rpm
599747d8bb1f665bc3390bd71bf86b8b2011f242 x86_64/debug/spamassassin-debuginfo-3.1.3-1.fc5.x86_64.rpm
d618780609768ab5a224f98a794a7e6a6a6b6d8e x86_64/spamassassin-3.1.3-1.fc5.x86_64.rpm
ed82a34755da2d14919e10df6c4ae91a08a331fa i386/debug/spamassassin-debuginfo-3.1.3-1.fc5.i386.rpm
0da440b7955745e209543084a51288433bb73c1d i386/spamassassin-3.1.3-1.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at .
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/
Change Log
References