I found another bug unfortunately. It is not in the udgrade script, but it affects users of Razor2 under SA 2.60.

Razor2 is no longer working and requires a minor patch of the source code. See (Google cache):
http://216.239.59.104/search?q=cache:OTSxFiVetNIJ:spamassassin.taint.org/faq/index.cgi%3Freq%3Drecent+Insecure+dependency+razor2+&hl=en&ie=UTF-8So I searched a bit and found this suggestion:
http://www.geocrawler.com/archives/3/2539/2002/9/50/9518810/I gave it a try.
# mkdir /etc/e-smith/templates-user-custom/.procmailrc
# touch 11Razorfix
# cd /etc/e-smith/templates-user-custom/.procmailrc
# echo "DROPPRIVS=yes" >> 11Razorfix
Finally I restarted SpamAssassin and checked my .procmailrc. No luck fixing the problem.

Okay another try (after removing my custom template):
#chmod +s /usr/bin/procmail
But that didn't work either.
Final test - both +s and the template:
Nope, doesn't work.
Reading between the lines, I suspect the next release of SA may fix the problem. At least I hope so. On the plus side, my spam checks have dropped from 25-35 seconds to 2-3.

Cheers,
Jens
More references:
http://search.cpan.org/src/JMASON/Mail-SpamAssassin-2.60/ChangesAnd from the GMANE Mailinglist:
>- Razor2 isn't fully taint safe. So since SpamAssassin 2.60 enables
> taint mode by default, there's a Razor2.patch file which needs to be
> applied to Razor2. Documentation exists in the patch file.