You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by si...@apache.org on 2021/04/12 10:14:26 UTC

svn commit: r1888657 - /spamassassin/trunk/build/announcements/3.4.6.txt

Author: sidney
Date: Mon Apr 12 10:14:26 2021
New Revision: 1888657

URL: http://svn.apache.org/viewvc?rev=1888657&view=rev
Log:
3.4.6 announcement file with actual checksums

Added:
    spamassassin/trunk/build/announcements/3.4.6.txt   (with props)

Added: spamassassin/trunk/build/announcements/3.4.6.txt
URL: http://svn.apache.org/viewvc/spamassassin/trunk/build/announcements/3.4.6.txt?rev=1888657&view=auto
==============================================================================
--- spamassassin/trunk/build/announcements/3.4.6.txt (added)
+++ spamassassin/trunk/build/announcements/3.4.6.txt Mon Apr 12 10:14:26 2021
@@ -0,0 +1,168 @@
+From: <your@apache.org address here>
+To: <your@apache.org address here>
+Bcc: users@spamassassin.apache.org, dev@spamassassin.apache.org, announce@spamassassin.apache.org, announce@apache.org
+Reply-to: dev@spamassassin.apache.org
+Subject: ANNOUNCE: Apache SpamAssassin 3.4.6 available
+
+Release Notes -- Apache SpamAssassin -- Version 3.4.6
+
+Introduction
+------------
+
+Apache SpamAssassin 3.4.6 fixes two small but potentially annoying bugs in 3.4.5
+
+
+*** On March 1, 2020, we stopped publishing rulesets with SHA-1 signatures.
+    If you do not update to 3.4.2 or later, you will be stuck at the last
+    ruleset with SHA-1 signatures. Such an upgrade should be to 3.4.6 to
+    obtain the contained security fixes ***
+
+*** Ongoing development on the 3.4 branch has ceased. All future releases
+    and bug fixes will be on the 4.0 series, unless a new security issue
+    is found that necessitates a 3.4.7 release. ***
+
+Many thanks to the committers, contributors, rule testers, mass checkers,
+and code testers who have made this release possible.
+
+Notable features:
+=================
+
+None noted.
+
+
+Notable changes
+---------------
+
+This release includes fixes for the following:
+
+  - Fixed URIDNSBL not triggering meta rules
+  - Fix false positive in T_KAM_HTML_FONT_INVALID on CSS color !important
+
+New configuration options
+-------------------------
+
+None noted.
+
+Notable Internal changes
+------------------------
+
+None noted.
+
+Other updates
+-------------
+
+None noted.
+
+Optimizations
+-------------
+
+None noted.
+
+
+Downloading and availability
+----------------------------
+
+Downloads are available from:
+
+https://spamassassin.apache.org/downloads.cgi
+
+sha256sum of archive files:
+
+  bc4875f3e4bb5979f0c10283213a512c4c9646220ae0132a78c8e3af94789610  Mail-SpamAssassin-3.4.6.tar.bz2
+  500c7e2a7cdf3aa4dd822d97aaff2ab22235a60cf17a68ab817861d215a4e568  Mail-SpamAssassin-3.4.6.tar.gz
+  7eb88a4d2d90bc77fe6e22f31e45727392adf023fb5c3ecfef2cf66721c00399  Mail-SpamAssassin-3.4.6.zip
+  b1efcdc57e6b100735855e24ee8391b0857327d70e1e1d2c2757d5f66e8a1ce6  Mail-SpamAssassin-rules-3.4.6.r1888502.tgz
+
+sha512sum of archive files:
+
+  bb53ba928917b02071b2e6690a11240e1af503334f292c870a8c49c24b0a58b44c78f827e2f43e71a3ce920481fa0e1e62b78a39452658c57d18f4e11daeb593  Mail-SpamAssassin-3.4.6.tar.bz2
+  7910852f04463a7363a2fc3b70a35adadf5714552e57c5b8ca57beaa534ee18d9f06526cdbcf8bcd5781e5ca778f98d2f84ef2efd1872fa550cfe1689440364a  Mail-SpamAssassin-3.4.6.tar.gz
+  b58b2e5b1e2be9bb7ac323d6de390e47c9a2067fc2eeb568784b35558ec23c68c25cbd0cf157342da9266aa3a92df4ce6de14edea5e34926ce540b29a40626e3  Mail-SpamAssassin-3.4.6.zip
+  29167c2ab50de26954181ad53395d4270b8b15b7d3bb13d6c62aa2f13ed3bb7a54adcda944bbd4c8d0cf4fe918a2eb0f542ef420af2bd96a121cb3d9b55dd572  Mail-SpamAssassin-rules-3.4.6.r1888502.tgz
+
+Note that the *-rules-*.tgz files are only necessary if you cannot,
+or do not wish to, run "sa-update" after install to download the latest
+fresh rules.
+
+See the INSTALL and UPGRADE files in the distribution for important
+installation notes.
+
+
+GPG Verification Procedure
+--------------------------
+The release files also have a .asc accompanying them.  The file serves
+as an external GPG signature for the given release file.  The signing
+key is available via the keys.gnupg.net or keys.openpgp.org key servers,
+as well as https://www.apache.org/dist/spamassassin/KEYS
+
+
+
+The following key is used to sign releases after, and including SA 3.3.0:
+
+pub   4096R/F7D39814 2009-12-02
+      Key fingerprint = D809 9BC7 9E17 D7E4 9BC2  1E31 FDE5 2F40 F7D3 9814
+uid                  SpamAssassin Project Management Committee <pr...@spamassassin.apache.org>
+uid                  SpamAssassin Signing Key (Code Signing Key, replacement for 1024D/265FA05B) <de...@spamassassin.apache.org>
+sub   4096R/7B3265A5 2009-12-02
+
+The following key is used to sign rule updates:
+
+pub   4096R/5244EC45 2005-12-20
+      Key fingerprint = 5E54 1DC9 59CB 8BAC 7C78  DFDC 4056 A61A 5244 EC45
+uid                  updates.spamassassin.org Signing Key <re...@spamassassin.org>
+sub   4096R/24F434CE 2005-12-20
+
+To verify a release file, download the file with the accompanying .asc
+file and run the following commands:
+
+  gpg --verbose --keyserver keys.gnupg.net --recv-key FDE52F40F7D39814
+  gpg --verify Mail-SpamAssassin-3.4.6.tar.bz2.asc
+  gpg --fingerprint FDE52F40F7D39814
+
+Then verify that the key matches the signature.
+
+Note that older versions of gnupg may not be able to complete the steps
+above. Specifically, GnuPG v1.0.6, 1.0.7 & 1.2.6 failed while v1.4.11
+worked flawlessly.
+
+See https://www.apache.org/info/verification.html for more information
+on verifying Apache releases.
+
+
+About Apache SpamAssassin
+-------------------------
+
+Apache SpamAssassin is a mature, widely-deployed open source project
+that serves as a mail filter to identify spam. SpamAssassin uses a
+variety of mechanisms including mail header and text analysis, Bayesian
+filtering, DNS blocklists, and collaborative filtering databases. In
+addition, Apache SpamAssassin has a modular architecture that allows
+other technologies to be quickly incorporated as an addition or as a
+replacement for existing methods.
+
+Apache SpamAssassin typically runs on a server, classifies and labels
+spam before it reaches your mailbox, while allowing other components of
+a mail system to act on its results.
+
+Most of the Apache SpamAssassin is written in Perl, with heavily
+traversed code paths carefully optimized. Benefits are portability,
+robustness and facilitated maintenance. It can run on a wide variety of
+POSIX platforms.
+
+The server and the Perl library feels at home on Unix and Linux platforms
+and reportedly also works on MS Windows systems under ActivePerl.
+
+For more information, visit https://spamassassin.apache.org/
+
+
+About The Apache Software Foundation
+------------------------------------
+
+Established in 1999, The Apache Software Foundation provides
+organizational, legal, and financial support for more than 100
+freely-available, collaboratively-developed Open Source projects. The
+pragmatic Apache License enables individual and commercial users to
+easily deploy Apache software; the Foundation's intellectual property
+framework limits the legal exposure of its 2,500+ contributors.
+
+For more information, visit https://www.apache.org/

Propchange: spamassassin/trunk/build/announcements/3.4.6.txt
------------------------------------------------------------------------------
    svn:eol-style = native