We have published SpamAssassin 3.4.5 packages for Centos/RHEL/CloudLinux to the Danami repositories. Apache SpamAssassin 3.4.5 is primarily a security release. In this release, there are bug fixes for one CVE:
- CVE-2020-1946 for Malicious rule configuration (.cf) files can be configured to run system commands.
More information can be found here.
The upgrade is available to all active license holders. Run the following command to update: yum update spamassassin
Sunday, March 28, 2021