-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-6977 2010-04-20 12:45:16 --------------------------------------------------------------------------------
Name : spamass-milter Product : Fedora 11 Version : 0.3.1 Release : 19.fc11 URL : http://savannah.nongnu.org/projects/spamass-milt/ Summary : Milter (mail filter) for spamassassin Description : A milter (Mail Filter) application that pipes incoming mail (including things received by rmail/UUCP) through SpamAssassin, a highly customizable spam filter. A milter-compatible MTA such as Sendmail or Postfix is required. -------------------------------------------------------------------------------- Update Information: This update fixes a regression in the previous update for CVE-2010-1132 in which child sendmail processes accumulated as zombies if the "-b" or "-x" options were used, eventually leading to resource starvation and the milter rejecting mail. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 19 2010 Paul Howarth <[email protected]> 0.3.1-19 - Fix patch for CVE-2010-1132 to not create a zombie process per email when the -x or -b options are used (#583523) * Tue Mar 23 2010 Paul Howarth <[email protected]> 0.3.1-18 - Add patch to get rid of compiler warnings - Reorder and re-base patches to optimize chances of upstream accepting them - Improve Received-header patch (#496763) incorporating additional fix from upstream update (http://savannah.nongnu.org/bugs/?17178) * Fri Mar 12 2010 Paul Howarth <[email protected]> 0.3.1-17 - Update initscript to support running the milter as root, which is needed for the -x (expand aliases) option; note that the milter does not run as root by default - Add patch for popen unsanitized input vulnerability (CVE-2010-1132, #572117, #572119, http://savannah.nongnu.org/bugs/?29136) - Rebase authuser patch - Update patch adding auth info to dummy Received-header so that it doesn't generate spurious warnings about missing macros (#532266), and update and merge the macro documentation patch into this patch - Document patch usage in spec file * Tue Aug 11 2009 Paul Howarth <[email protected]> 0.3.1-16 - Switch to bzipped source tarball * Sun Jul 26 2009 Fedora Release Engineering <[email protected]> 0.3.1-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Fri Apr 24 2009 Paul Howarth <[email protected]> 0.3.1-14 - Fix Received-header generation (#496763) - Add authentication info to dummy Received-header (#496769) - Add option to skip checks for authenticated senders (#437506, #496767) (thanks to Habeeb J. Dihu for the reports and patches) -------------------------------------------------------------------------------- References: [ 1 ] Bug #583523 - spamass-milter stops working, causing mail rejects https://bugzilla.redhat.com/show_bug.cgi?id=583523 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update spamass-milter' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
