Fedora 12 Update: spamass-milter-0.3.1-19.fc12
updates at fedoraproject.org
updates at fedoraproject.org
Wed Apr 28 01:19:46 UTC 2010
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-6851
2010-04-20 12:39:49
--------------------------------------------------------------------------------
Name : spamass-milter
Product : Fedora 12
Version : 0.3.1
Release : 19.fc12
URL : http://savannah.nongnu.org/projects/spamass-milt/
Summary : Milter (mail filter) for spamassassin
Description :
A milter (Mail Filter) application that pipes incoming mail (including things
received by rmail/UUCP) through SpamAssassin, a highly customizable spam
filter. A milter-compatible MTA such as Sendmail or Postfix is required.
--------------------------------------------------------------------------------
Update Information:
This update fixes a regression in the previous update for CVE-2010-1132 in which
child sendmail processes accumulated as zombies if the "-b" or "-x" options were
used, eventually leading to resource starvation and the milter rejecting mail.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 19 2010 Paul Howarth <paul at city-fan.org> 0.3.1-19
- Fix patch for CVE-2010-1132 to not create a zombie process per email when
the -x or -b options are used (#583523)
* Tue Mar 23 2010 Paul Howarth <paul at city-fan.org> 0.3.1-18
- Add patch to get rid of compiler warnings
- Reorder and re-base patches to optimize chances of upstream accepting them
- Improve Received-header patch (#496763) incorporating additional fix from
upstream update (http://savannah.nongnu.org/bugs/?17178)
* Fri Mar 12 2010 Paul Howarth <paul at city-fan.org> 0.3.1-17
- Update initscript to support running the milter as root, which is needed
for the -x (expand aliases) option; note that the milter does not run as
root by default
- Add patch for popen unsanitized input vulnerability
(CVE-2010-1132, #572117, #572119, http://savannah.nongnu.org/bugs/?29136)
- Rebase authuser patch
- Update patch adding auth info to dummy Received-header so that it doesn't
generate spurious warnings about missing macros (#532266), and update and
merge the macro documentation patch into this patch
- Document patch usage in spec file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #583523 - spamass-milter stops working, causing mail rejects
https://bugzilla.redhat.com/show_bug.cgi?id=583523
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update spamass-milter' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
More information about the package-announce
mailing list