spamassassin-announce mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Theo Van Dinter <>
Subject ANNOUNCE: Apache SpamAssassin 3.1.8 available!
Date Wed, 14 Feb 2007 22:33:58 GMT
Apache SpamAssassin 3.1.8 is now available!  This is a maintenance and
security release of the 3.1.x branch.  It is highly recommended that
people upgrade to this version.

Downloads are available from:

The release file will also be available via CPAN in the near future.

md5sum of archive files:
  e8184a9a4ff11da5bd20b294cfeac7ac  Mail-SpamAssassin-3.1.8.tar.bz2
  20a3a6b651a89dcc70634715ca833996  Mail-SpamAssassin-3.1.8.tar.gz

sha1sum of archive files:
  0d092c4de6e6df66f1d0fb0ca8589147ee4096cb  Mail-SpamAssassin-3.1.8.tar.bz2
  08f81f72d8a783887cf815dfc55ea38e3582b966  Mail-SpamAssassin-3.1.8.tar.gz

The release files also have a .asc accompanying them.  The file serves
as an external GPG signature for the given release file.  The signing
key is available via the key server, as well as

The key information is:

pub  1024D/265FA05B 2003-06-09 SpamAssassin Signing Key <>
      Key fingerprint = 26C9 00A4 6DD4 0CD5 AD24  F6D7 DEE0 1987 265F A05B

3.1.8 is a major bug-fix release, including a potential DoS.  The major
highlights are:

- bug 5318: fix for CVE-2007-0451: possible DoS due to incredibly
  long URIs found in the message content.
- bug 5240: disable perl module usage in update channels unless
  --allowplugins is specified
- bug 5288: files with names starting/ending in whitespace weren't usable
- bug 5056: remove Text::Wrap related code due to upstream issues
- bug 5145: update spamassassin and sa-learn to better deal with STDIN
- bug 5140 and 5179: improvements and bug fixes related to DomainKeys
  and DKIM support
- several updates for Received header parsing
- several documentation updates and random taint-variable related issues

A more detailed change log can be read here:

Randomly Selected Tagline:
"I have a simple test to determine if any windows executable that I
 received via E-mail is a virus or not: If I received it, it's a virus."
         - Charlie Watts on the SpamAssassin mailing list

View raw message