[TriLUG] URGENT: spamassassin update

[Michael Hrivnak]

This has made slashdot: 
http://it.slashdot.org/story/10/01/02/0027207/SpamAssassin-2010-Bug

Also, I incorrectly listed the default score for this rule as 3.5, but it is 
more complicated.  It may vary from 2.075-3.554 depending on your use of the 
Bayesian classifier and network tests.

Michael

On Friday 01 January 2010 10:23:35 pm Michael Hrivnak wrote:
> If you run spamassassin anywhere, run sa-update immediately.
>
> There is a default rule, "FH_DATE_PAST_20XX", which is supposed to match
> when a date is "grossly in the future".  They thoughtfully defined this as
> anything in or after the year 2010.  It has obviously caused chaos today
> around the world.  In my debian deployments, the default score for that
> rule is 3.5.
>
> They have updated the rule, again quite thoughtfully, so that it now
> defines "grossly in the future" as any date in or after 2020.  Hopefully
> this is just a quick fix, and they'll do something more intelligent soon.
>
> Here is the issue:
> https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6269
>
> The rule update should be automatically picked up when when sa-update runs
> next.  This is how you can verify that the new rule is in place (obviously
> change the path to match your system):
>
> $ grep FH_DATE_PAST_20XX
> /var/lib/spamassassin/3.002005/updates_spamassassin_org/72_active.cf
> ##{ FH_DATE_PAST_20XX
> header   FH_DATE_PAST_20XX      Date =~ /20[2-9][0-9]/ [if-unset: 2006]
> describe FH_DATE_PAST_20XX      The date is grossly in the future.
> ##} FH_DATE_PAST_20XX
>
> Note that the regular expression now includes "[2-9]" instead of "[1-9]".
>
> Good luck,
> Michael

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: <http://www.trilug.org/pipermail/trilug/attachments/20100101/d77395ac/attachment.pgp>