You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by me...@gmx.net on 2005/04/14 00:08:16 UTC

uri(bl) checks don't detect URLs with capitalized Http

http://bugzilla.spamassassin.org/show_bug.cgi?id=4111#c12

how would you apply the (apparently existing) fix to an existing SA 3.* 
installation where SA comes from a distributor? can the affected perl module 
be installed via a CPAN shell for example?


Re: uri(bl) checks don't detect URLs with capitalized Http

Posted by "Daryl C. W. O'Shea" <sp...@dostech.ca>.
mewolf1@gmx.net wrote:
> In an older episode (Thursday 14 April 2005 00:54), Theo Van Dinter wrote:
> 
> 
>>In this case, however, it's not clear if he's running something like a
>>Fedora RPM version of SpamAssassin where he could just go ahead and update
>>at will, or if it's something like Barracuda/etc, where you really can't
>>just go changing things on your own.  The flip side of that of course is
>>that you'll have vendor support who you can call and make requests of. ;)
> 
> 
> at home, i am running debian linux with SpamAssassin version 3.0.2 running on 
> Perl version 5.8.4, or as debian puts it:
> Installed: 3.0.2-1
> Candidate: 3.0.2-1
> == nothing newer available in debian.
> 
> at work, we do use a vendors' pre-installed SpamAssassin version 3.0.2 running 
> on Perl version 5.8.5 and Fedora Core release 3 (Heidelberg), rpms built by 
> the vendor:
> spamassassin-3.0.2-1
> spamassassin-tools-3.0.2-1
> 
> i will have to find out exactly which modifications have been applied to which 
> source by the vendor. anyway, further modifications are possible both from 
> the vendor or us, the owners. learning at home how to apply the fix at all 
> will make it easier to be able to judge / request / apply necessary changes 
> at work.

Here's the diff:

http://svn.apache.org/viewcvs.cgi/spamassassin/trunk/lib/Mail/SpamAssassin/PerMsgStatus.pm?rev=148873&r1=125891&r2=148873&makepatch=1&diff_format=u


Re: uri(bl) checks don't detect URLs with capitalized Http

Posted by me...@gmx.net.
In an older episode (Thursday 14 April 2005 00:54), Theo Van Dinter wrote:

> In this case, however, it's not clear if he's running something like a
> Fedora RPM version of SpamAssassin where he could just go ahead and update
> at will, or if it's something like Barracuda/etc, where you really can't
> just go changing things on your own.  The flip side of that of course is
> that you'll have vendor support who you can call and make requests of. ;)

at home, i am running debian linux with SpamAssassin version 3.0.2 running on 
Perl version 5.8.4, or as debian puts it:
Installed: 3.0.2-1
Candidate: 3.0.2-1
== nothing newer available in debian.

at work, we do use a vendors' pre-installed SpamAssassin version 3.0.2 running 
on Perl version 5.8.5 and Fedora Core release 3 (Heidelberg), rpms built by 
the vendor:
spamassassin-3.0.2-1
spamassassin-tools-3.0.2-1

i will have to find out exactly which modifications have been applied to which 
source by the vendor. anyway, further modifications are possible both from 
the vendor or us, the owners. learning at home how to apply the fix at all 
will make it easier to be able to judge / request / apply necessary changes 
at work.


Re: uri(bl) checks don't detect URLs with capitalized Http

Posted by Theo Van Dinter <fe...@kluge.net>.
On Wed, Apr 13, 2005 at 06:37:19PM -0400, Matt Kettler wrote:
> Theo, from reading the bugzilla report  the fix in question isn't even
> in a released version of SA (yet) and only in SVN head.. Dan said it was
> fixed in head on /2005-01-28, and there have been no releases since /
> 2004-12-16 (3.0.2). Correct?

Right.  But it's irrelevent IMHO.  Most vendors don't just use the
distributed releases.  They'll make changes and what not.  Even if they
don't, you don't want to go changing a vendor's release on your own
since you'll lose support, etc.

> Given that this fix is only in the SVN tree, I doubt the vendor has a fix.

Perhaps, perhaps not.  RedHat, for instance, regularly takes features from new
open source code and backports it into older releases that they support.  The
main example is their kernel RPMs where they were taking 2.6 features and
backporting to the 2.4 kernel for their RHEL distros.

I would guess vendors who embed/distribute SpamAssassin would do much
the same thing.  They're likely running their own modified versions
of the code (within whatever appropriate license terms are in place),
and then they merge in changes from either trunk or official OSS releases.
Since trunk and such are openly available, there's no reason why the vendor
couldn't have a fix already.


In this case, however, it's not clear if he's running something like a
Fedora RPM version of SpamAssassin where he could just go ahead and update
at will, or if it's something like Barracuda/etc, where you really can't
just go changing things on your own.  The flip side of that of course is
that you'll have vendor support who you can call and make requests of. ;)

-- 
Randomly Generated Tagline:
Speaking of purchasing a dog, never buy a watchdog that's on sale.
 After all, everyone knows a bargain dog never bites!

Re: uri(bl) checks don't detect URLs with capitalized Http

Posted by Matt Kettler <mk...@evi-inc.com>.
Theo Van Dinter wrote:

>On Thu, Apr 14, 2005 at 12:08:16AM +0200, mewolf1@gmx.net wrote:
>  
>
>>how would you apply the (apparently existing) fix to an existing SA 3.* 
>>installation where SA comes from a distributor? can the affected perl module 
>>be installed via a CPAN shell for example?
>>    
>>
>
>If you're running a version of SA that comes from a vendor, you'd have to ask
>the vendor to provide a new version.
>
>  
>
Theo, from reading the bugzilla report  the fix in question isn't even
in a released version of SA (yet) and only in SVN head.. Dan said it was
fixed in head on /2005-01-28, and there have been no releases since /
2004-12-16 (3.0.2). Correct?

Given that this fix is only in the SVN tree, I doubt the vendor has a fix.

In fact, given that there's no patch for this issue, just a fix in
checked into SVN head, I doubt that much of anyone has this fix, except
the devels and the most adventuresome users who might grab the whole SVN
head version.





Re: uri(bl) checks don't detect URLs with capitalized Http

Posted by Theo Van Dinter <fe...@kluge.net>.
On Thu, Apr 14, 2005 at 12:08:16AM +0200, mewolf1@gmx.net wrote:
> how would you apply the (apparently existing) fix to an existing SA 3.* 
> installation where SA comes from a distributor? can the affected perl module 
> be installed via a CPAN shell for example?

If you're running a version of SA that comes from a vendor, you'd have to ask
the vendor to provide a new version.

-- 
Randomly Generated Tagline:
Oh, honey, I didn't get drunk, I just went to a strange fantasy world.
 
 		-- Homer Simpson
 		   El Viaje Misterioso De Nuestro Jomer