Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: isi on June 17, 2005, 02:20:05 PM

Title: Spamassassin update
Post by: isi on June 17, 2005, 02:20:05 PM
Hey,

there is an security issue with Spamassassin.




of service vulnerability in versions 3.0.1, 3.0.2, and 3.0.3.  The
vulnerability allows certain misformatted long message headers to cause
spam checking to take a very long time.

While the exploit has yet to be seen in the wild, we are concerned that
there may be attempts to abuse the vulnerability in the future.
Therefore, we strongly recommend all users of these versions upgrade to
Apache SpamAssassin 3.0.4 as soon as possible.[/list]

http://marc.theaimsgroup.com/?l=spamassassin-users&m=111886566317295&w=2

How can i upgrade my Spamassassin?.

cu
Title: Spamassassin update
Post by: raem on June 17, 2005, 03:34:28 PM
Watch here for the latest to be released
http://sme.swerts-knudsen.com/downloads/SpamFilter/

or get & build it yourself from
http://spamassassin.apache.org/

http://spamassassin.apache.org/downloads.cgi?update=200506061100
Title: I have had issues with Spam stopping email
Post by: bjoyce on June 08, 2006, 01:17:05 AM
Hi, I have had issues with my email going off line at times when my CPU usage goes through the roof, my swap file also goes high and my local lan traffice increases at the same time.

The result is slow or no email.

A reset of the box fixes it until the next time.  Is this the sort of thing you would expect from a denial of service attacke.

My Spamassasin is
spamassassin-tools-3.1.0-1
spamassassin-3.1.0-1

I am running SME 6.0.1
[/img]
Title: Re: I have had issues with Spam stopping email
Post by: raem on June 08, 2006, 05:13:14 AM
bjoyce

> I am running SME 6.0.1

See this howto for likely answers

http://mirror.contribs.org/smeserver//contribs/rmitchell/smeserver/howto/Mail%20system%20tweaks%20HOWTO%20for%20sme%20server.htm
Title: Spamassassin update
Post by: alejandro on June 09, 2006, 12:03:56 AM
Quote from: "RayMitchell"
Watch here for the latest to be released
http://sme.swerts-knudsen.com/downloads/SpamFilter/

or get & build it yourself from
http://spamassassin.apache.org/

http://spamassassin.apache.org/downloads.cgi?update=200506061100


with sme7 RC3

package spamassassin-3.0.5-3.el4 (which is newer than spamassassin-3.0.4-1) is already installed