We have pushed updated SpamAssassin packages to the Danami yum repositories:
1. danami-warden repo - spamassassin-3.4.4-1
2. danami-warden-testing repo - spamassassin-4.0.0-0.20200207svn1873731
In this release, there are bug fixes for two SpamAssassin CVEs:
CVE-2020-1931 for Nefarious rule configuration (.cf) files can be configured to run system commands with warnings.
CVE-2020-1930 for Nefarious rule configuration (.cf) files can be configured to run system commands with sa-compile.
To Upgrade
The upgrade is available to all active license holders. Run the following command to update: yum update spamassassin
Friday, February 7, 2020
