You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by km...@apache.org on 2019/12/11 21:39:24 UTC
svn commit: r1871196 - /spamassassin/site/news.html
Author: kmcgrail
Date: Wed Dec 11 21:39:24 2019
New Revision: 1871196
URL: http://svn.apache.org/viewvc?rev=1871196&view=rev
Log:
updating the news
Modified:
spamassassin/site/news.html
Modified: spamassassin/site/news.html
URL: http://svn.apache.org/viewvc/spamassassin/site/news.html?rev=1871196&r1=1871195&r2=1871196&view=diff
==============================================================================
--- spamassassin/site/news.html (original)
+++ spamassassin/site/news.html Wed Dec 11 21:39:24 2019
@@ -151,7 +151,23 @@
<blockquote>
<p>
<p>
- <em>2018-09-16: </em>SpamAssassin 3.4.2 has been released! This release contains numerous tweaks and bug fixes over the past three and 1/2 years including: <br />
+ <em>2019-12-11: </em>Apache SpamAssassin 3.4.3 has been released! Apache SpamAssassin 3.4.3 contains numerous tweaks and bug fixes as we prepare to move to version 4.0.0 with better, native UTF-8 handling.<br>
+There are a number of functional patches, improvements as well as security reasons to upgrade to 3.4.3. In this release, there is also one new plugin and there are bug fixes for two
+CVEs.<br>
+
+<em>*** On March 1, 2020, we will stop publishing rulesets with SHA-1 signatures. If you do not update to 3.4.2 or later, you will be stuck at the last ruleset with SHA-1 signatures. ***</em>
+ <ul>
+ <li>CVE-2019-12420 for Multipart Denial of Service Vulnerability</li>
+ <li>CVE-2018-11805 for nefarious CF files can be configured to run system commands without any output or errors.</li>
+ </ul>
+ </p>
+
+ <p>
+ <em>2019-09-05:</em>Happy Birthday! Apache SpamAssassin turned 18
+
+
+ <p>
+ <em>2018-09-16: </em>Apache SpamAssassin 3.4.2 has been released! This release contains numerous tweaks and bug fixes over the past three and 1/2 years including: <br />
</p>
<ul>
<li>
@@ -166,22 +182,22 @@
</ul>
</p>
<p>
- 2015-04-30: SpamAssassin 3.4.1 has been released! Highlights include: improved automation to help combat spammers that are abusing new top level domains; tweaks to the SPF support to block more spoofed emails; increased character set normalization to make rules easier to develop and stop spammers from using alternate character sets to bypass tests; continued refinement to the native IPv6 support; and improved Bayesian classification with better debugging and attachment hashing.
+ 2015-04-30: Apache SpamAssassin 3.4.1 has been released! Highlights include: improved automation to help combat spammers that are abusing new top level domains; tweaks to the SPF support to block more spoofed emails; increased character set normalization to make rules easier to develop and stop spammers from using alternate character sets to bypass tests; continued refinement to the native IPv6 support; and improved Bayesian classification with better debugging and attachment hashing.
</p>
<p>
- 2014-02-11: SpamAssassin 3.4.0 has been released adding native support for IPv6, improved DNS Blocklist technology and support for massively-scalable Bayesian filtering using the Redis backend. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
+ 2014-02-11: Apache SpamAssassin 3.4.0 has been released adding native support for IPv6, improved DNS Blocklist technology and support for massively-scalable Bayesian filtering using the Redis backend. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
</p>
<p>
- 2011-06-16: SpamAssassin 3.3.2 has been released, a minor new release primarily to support perl-5.12 and later. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
+ 2011-06-16: Apache SpamAssassin 3.3.2 has been released, a minor new release primarily to support perl-5.12 and later. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
</p>
<p>
- 2010-03-19: SpamAssassin 3.3.1 has been released, a minor new release which adds some new rules. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
+ 2010-03-19: Apache SpamAssassin 3.3.1 has been released, a minor new release which adds some new rules. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
</p>
<p>
- 2010-01-27: SpamAssassin 3.3.0 has been released, a major new release! Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
+ 2010-01-27: Apache SpamAssassin 3.3.0 has been released, a major new release! Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
</p>
<p>
@@ -226,70 +242,70 @@
</p>
</p>
<p>
- 2008-06-12: SpamAssassin 3.2.5 has been released, a minor bug-fix release. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
+ 2008-06-12: Apache SpamAssassin 3.2.5 has been released, a minor bug-fix release. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
</p>
<p>
- 2008-01-05: SpamAssassin 3.2.4 has been released. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
+ 2008-01-05: Apache SpamAssassin 3.2.4 has been released. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
</p>
<p>
- 2007-09-12: SpamAssassin has won an InfoWorld "Best Of Open Source Software" BOSSIE Award, as the winner in the anti-spam category for 2007!
+ 2007-09-12: Apache SpamAssassin has won an InfoWorld "Best Of Open Source Software" BOSSIE Award, as the winner in the anti-spam category for 2007!
</p>
<p>
- 2007-08-09: SpamAssassin 3.2.3 released! Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
+ 2007-08-09: Apache SpamAssassin 3.2.3 released! Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up, and for more info.
</p>
<p>
- 2007-07-25: SpamAssassin 3.2.2 released! Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick them up, and for more info.
+ 2007-07-25: Apache SpamAssassin 3.2.2 released! Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick them up, and for more info.
</p>
<p>
- 2007-06-11: SpamAssassin 3.2.1 and 3.1.9 released! These releases contain a fix for <a href="https://spamassassin.apache.org/advisories/cve-2007-2873.txt">a local user symlink-attack denial of service vulnerability</a> for an uncommon spamd configuration, along with other fixes. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick them up.
+ 2007-06-11: Apache SpamAssassin 3.2.1 and 3.1.9 released! These releases contain a fix for <a href="https://spamassassin.apache.org/advisories/cve-2007-2873.txt">a local user symlink-attack denial of service vulnerability</a> for an uncommon spamd configuration, along with other fixes. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick them up.
</p>
<p>
- 2007-05-02: SpamAssassin 3.2.0 released! This release contains a significant number of changes and major enhancements -- please use it! Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up. (<a href="https://www.nabble.com/ANNOUNCE%3A-Apache-SpamAssassin-3.2.0-available-tf3680367.html">The release announcement</a>)
+ 2007-05-02: Apache SpamAssassin 3.2.0 released! This release contains a significant number of changes and major enhancements -- please use it! Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to pick it up. (<a href="https://www.nabble.com/ANNOUNCE%3A-Apache-SpamAssassin-3.2.0-available-tf3680367.html">The release announcement</a>)
</p>
<p>
- 2007-02-14: SpamAssassin 3.1.8 released! This release fixes security bug <a href="https://spamassassin.apache.org/advisories/cve-2007-0451.txt">CVE-2007-0451</a>, so is recommended. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to get the latest version.
+ 2007-02-14: Apache SpamAssassin 3.1.8 released! This release fixes security bug <a href="https://spamassassin.apache.org/advisories/cve-2007-0451.txt">CVE-2007-0451</a>, so is recommended. Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to get the latest version.
</p>
<p>
- 2006-11-21: SpamAssassin wins 'Best Linux-based Anti-spam Solution' at the <a href="https://www.linuxnewmedia.com/Press/Press_Releases/Awards_2006">Linux New Media Awards 2006</a>, winning 69% of the vote.
+ 2006-11-21: Apache SpamAssassin wins 'Best Linux-based Anti-spam Solution' at the <a href="https://www.linuxnewmedia.com/Press/Press_Releases/Awards_2006">Linux New Media Awards 2006</a>, winning 69% of the vote.
</p>
<p>
- 2006-10-10: SpamAssassin 3.1.7 released!
+ 2006-10-10: Apache SpamAssassin 3.1.7 released!
<br />
(<a href="https://www.nabble.com/ANNOUNCE%3A-Apache-SpamAssassin-3.1.7-available%21-tf2415849.html">The release announcement</a>)
</p>
<p>
- 2006-10-05: SpamAssassin 3.1.6 released!
+ 2006-10-05: Apache SpamAssassin 3.1.6 released!
<br />
Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to get the latest version.
(<a href="https://www.nabble.com/ANNOUNCE%3A-Apache-SpamAssassin-3.1.6-available%21-tf2390652.html">The release announcement</a>)
</p>
<p>
- 2006-08-30: SpamAssassin 3.1.5 released!
+ 2006-08-30: Apache SpamAssassin 3.1.5 released!
<br />
Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to get the latest version.
(<a href="https://www.nabble.com/ANNOUNCE%3A-Apache-SpamAssassin-3.1.5-available%21-tf2190657.html">The release announcement</a>)
</p>
<p>
- 2006-07-26: SpamAssassin 3.1.4 released!
+ 2006-07-26: Apache SpamAssassin 3.1.4 released!
<br />
Visit <a href="https://spamassassin.apache.org/downloads.cgi?update=201809160000">the downloads page</a> to get the latest version.
(<a href="https://www.nabble.com/ANNOUNCE%3A-Apache-SpamAssassin-3.1.4-available%21-tf2006913.html">The release announcement</a>)
</p>
<p>
- 2006-06-06: SpamAssassin 3.1.3 released! This is an important security
+ 2006-06-06: Apache SpamAssassin 3.1.3 released! This is an important security
release to fix <a href="advisories/cve-2006-2447.txt">CVE 2006-2447</a>;
read <a href="advisories/cve-2006-2447.txt">the advisory</a> to see if
you need to upgrade.
@@ -298,7 +314,7 @@
</p>
<p>
- 2006-06-05: SpamAssassin 3.0.6 released! This is an important security
+ 2006-06-05: Apache SpamAssassin 3.0.6 released! This is an important security
release to fix <a href="advisories/cve-2006-2447.txt">CVE 2006-2447</a>;
read <a href="advisories/cve-2006-2447.txt">the advisory</a> to see if
you need to upgrade.
@@ -308,30 +324,30 @@
</p>
<p>
- 2006-05-25: SpamAssassin 3.1.2 released!
+ 2006-05-25: Apache SpamAssassin 3.1.2 released!
<br />
(<a href="https://www.nabble.com/ANNOUNCE%3A+Apache+SpamAssassin+3.1.2+available%21-t1684410.html">The release announcement</a>)
</p>
<p>
- 2006-03-11: SpamAssassin 3.1.1 released!
+ 2006-03-11: Apache SpamAssassin 3.1.1 released!
<br />
(<a href="https://mail-archives.apache.org/mod_mbox/spamassassin-users/200603.mbox/%3c20060312011649.GW18463@kluge.net%3e">The release announcement</a>)
</p>
<p>
- 2006-02-21: Receiving three times as many votes as the closest contender, SpamAssassin took top honors in the <a href="https://itmanagement.earthweb.com/article.php/3586381">Anti-Spam category of Datamation's Product of the Year 2006</a>.
+ 2006-02-21: Receiving three times as many votes as the closest contender, Apache SpamAssassin took top honors in the <a href="https://itmanagement.earthweb.com/article.php/3586381">Anti-Spam category of Datamation's Product of the Year 2006</a>.
</p>
<p>
- 2005-09-14: SpamAssassin 3.1.0 released!
+ 2005-09-14: Apache SpamAssassin 3.1.0 released!
<br />
(<a href="https://mail-archives.apache.org/mod_mbox/spamassassin-announce/200509.mbox/%3c20050914235232.814A45900BA@radish.jmason.org%3e">The release announcement</a>)
</p>
<p>
2005-02-09: Receiving twice as many votes as the closest contender,
- SpamAssassin took top honors in the <a href="https://itmanagement.earthweb.com/secu/article.php/3481971">Anti-Spam
+ Apache SpamAssassin took top honors in the <a href="https://itmanagement.earthweb.com/secu/article.php/3481971">Anti-Spam
category of Datamation's Product of the Year 2005</a>.
</p>
@@ -340,7 +356,7 @@
<h2>Subscribing</h2>
</p>
<blockquote>
- News about SpamAssassin, and new releases, can be received by mail by <a href="https://cwiki.apache.org/confluence/display/SPAMASSASSIN/MailingLists">subscribing to the "announce" mailing list</a>. There is also an <a href="https://mail-archives.apache.org/mod_mbox/spamassassin-announce/?format=atom">Atom feed</a>.
+ News about Apache SpamAssassin, and new releases, can be received by mail by <a href="https://cwiki.apache.org/confluence/display/SPAMASSASSIN/MailingLists">subscribing to the "announce" mailing list</a>. There is also an <a href="https://mail-archives.apache.org/mod_mbox/spamassassin-announce/?format=atom">Atom feed</a>.
</blockquote>
<!--