You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by Theo Van Dinter <fe...@apache.org> on 2005/06/07 00:36:31 UTC

SpamAssassin 3.0.4 Released

SpamAssassin 3.0.4 is released!  SpamAssassin 3.0.4 contains several
important bug fixes and is highly recommended for use over previous
versions.

SpamAssassin is a mail filter which uses advanced statistical and
heuristic tests to identify spam (also known as unsolicited bulk email).

Highlights of the release
-------------------------

 - Certain invalid "Content-Type" headers would cause SpamAssassin to
   incorrectly process parts of the message.

 - Certain long message headers could cause slowness when parsing the message.

 - Added in SURBL JP list.

 - URI anti-obfuscation updates.

 - Additional bug fixes.

Downloading
-----------

You can pick up the release here: http://spamassassin.apache.org/

You can also find it on your favorite CPAN mirror (you may need to
wait a day or so for the release to propagate).

md5sum of archive files:
ba6e1bd95f6f9f3882f73212a11dbe46  Mail-SpamAssassin-3.0.4.tar.bz2
51926fe5aabaf57eed2c09061fe8fb02  Mail-SpamAssassin-3.0.4.tar.gz
657caa6c2f0dfbea79614597b8375c6d  Mail-SpamAssassin-3.0.4.zip

sha1sum of archive files:
60ee3e1fac753ff77ae20ed3932a0d5ae051d1d5  Mail-SpamAssassin-3.0.4.tar.bz2
df37b629ab7b8a3fbb370c16537c59749eac1927  Mail-SpamAssassin-3.0.4.tar.gz
af01cc459a1f8885df872436745725025bdb2f09  Mail-SpamAssassin-3.0.4.zip

The release files also have a .asc accompanying them.  The file serves
as an external GPG signature for the given release file.  The signing
key is available via the wwwkeys.pgp.net key server, as well as
http://spamassassin.apache.org/released/GPG-SIGNING-KEY

The key information is:

pub  1024D/265FA05B 2003-06-09 SpamAssassin Signing Key <re...@spamassassin.org>
     Key fingerprint =3D 26C9 00A4 6DD4 0CD5 AD24  F6D7 DEE0 1987 265F A05B

Note:  GnuPG 1.4.0, and possibly 1.3.x versions, seem to have problems
verifying certain signature files, including the type as used for
SpamAssassin releases. If you are running an affected version, please
verify the code using both MD5 and SHA1 sum values instead.

The SpamAssassin Developers

Re: SpamAssassin 3.0.4 Released

Posted by Theo Van Dinter <fe...@apache.org>.
On Tue, Jun 07, 2005 at 09:14:52AM -0400, Theo Van Dinter wrote:
> > http://www.apache.org/dist/spamassassin//Mail-SpamAssassin-3.0.4.tar.bz2.md5
> > http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.0.4.tar.bz2.md5
> Yes, under source/ is the correct path.  Is there something pointing at the
> parent that needs to be updated?  (I didn't see anything when I looked
> yesterday.)

Of course, after I respond, I find the links you're talking about.  ;)

I just updated them on the website, the new version should be publically
available in the near future after the files sync out.

-- 
Randomly Generated Tagline:
Alone!  I'm alone!  I'm a lonely, insignificant speck on a has-been
 planet orbited by a cold, indifferent sun!
 
 		-- Homer Simpson
 		   El Viaje Misterioso de Nuestro Homer

Re: SpamAssassin 3.0.4 Released

Posted by Theo Van Dinter <fe...@apache.org>.
On Tue, Jun 07, 2005 at 01:07:49PM +0200, Maurice Lucas wrote:
> I'm unable to download/view the gpg/md5/sha1 signature from the website
> eg.
> http://www.apache.org/dist/spamassassin//Mail-SpamAssassin-3.0.4.tar.bz2.md5
> had to be
> http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.0.4.tar.bz2.md5

Hi,

Yes, under source/ is the correct path.  Is there something pointing at the
parent that needs to be updated?  (I didn't see anything when I looked
yesterday.)

-- 
Randomly Generated Tagline:
See these?  American donuts.  Glazed, powdered, and raspberry-filled.
 Now, how's that for freedom of choice.
 
        		-- Homer Simpson
 		   The Crepes of Wrath

Re: SpamAssassin 3.0.4 Released

Posted by Maurice Lucas <ms...@taos-it.nl>.
Hello,

I'm unable to download/view the gpg/md5/sha1 signature from the website
eg.
http://www.apache.org/dist/spamassassin//Mail-SpamAssassin-3.0.4.tar.bz2.md5
had to be
http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.0.4.tar.bz2.md5

With kind regards,
Met vriendelijke groet,

Maurice Lucas
TAOS-IT


Re: SpamAssassin 3.0.4 Released

Posted by Arvinn Løkkebakken <ar...@whitebird.no>.

Arvinn Løkkebakken wrote:

> Theo Van Dinter wrote:
>
>> SpamAssassin 3.0.4 is released!  SpamAssassin 3.0.4 contains several
>> important bug fixes and is highly recommended for use over previous
>> versions.
>>
>>  
>>
>
> STILL http://bugzilla.spamassassin.org/show_bug.cgi?id=3949 isn't 
> included. Why? Am I the only one who thinks this is a
> _very_serious bug?
>
> Arvinn

Sorry I didn't read the comments in the bottom there. I have now. 
However, I think it's quite odd that this isn't considered a crucial bug:

Some stats from my system:

Number of messages tagged as spam while having the ALL_TRUTED score:

# zcat mail-20050606.gz | awk '{if ($7~/Y/ && $10~/ALL_TRUSTED/) print 
$0}' | wc -l
77
# zcat mail-20050605.gz | awk '{if ($7~/Y/ && $10~/ALL_TRUSTED/) print 
$0}' | wc -l
80
# zcat mail-20050604.gz | awk '{if ($7~/Y/ && $10~/ALL_TRUSTED/) print 
$0}' | wc -l
58
# zcat mail-20050603.gz | awk '{if ($7~/Y/ && $10~/ALL_TRUSTED/) print 
$0}' | wc -l
69

Threshold is mostly set to 5.

In addition: the messages that was not clasified as spam because of 
ALL_TRUSTED pulled the message below the threshold, therein the worst 
cases where false positive spam messages scored < 0.1 (score of < 3.4 
before ALL_TRUSTED) and SA autolearned them as ham.


4th and 5th of May I ran spamd the whole day with -D:

Number of unparseable headers:

# zgrep 'received-header: unknown format' mail-20050505.gz | wc -l
1176
# zgrep 'received-header: unknown format' mail-20050504.gz | wc -l
885
#

Most of these messages are likely to get misfired at by ALL_TRUSTED 
since the unparseable header often is the only one that is not.
The system scans about 40k-45k messages per day.

I have found out what's "wrong" with most of the headers that doesn't 
get recognized by SA and will file a bug-report about it though.


PS: This hasn't anything to do with the trustpath FAQ article.


Arvinn

Re: SpamAssassin 3.0.4 Released

Posted by Arvinn Løkkebakken <ar...@whitebird.no>.
Theo Van Dinter wrote:

>SpamAssassin 3.0.4 is released!  SpamAssassin 3.0.4 contains several
>important bug fixes and is highly recommended for use over previous
>versions.
>
>  
>

STILL http://bugzilla.spamassassin.org/show_bug.cgi?id=3949 isn't 
included. Why? Am I the only one who thinks this is a
_very_serious bug?

Arvinn