[IMC-Sysadmin] proposal: SpamAssassin 2.64 upgrade this weekend

[mtoups at indymedia.org]

Hi listworkers & sysadmins --

Spamassassin has released an upgrade to SA 2.63, which we are
using on sarai.  it is a minor release which fixes an important
security problem.  given that situation, I propose we upgrade
to 2.64 immediately this weekend.  If there are no objections I
will go ahead and do this saturday or sunday when load is low
and i can take postfix down for a minute to perform the upgrade.

Spamassassin 3.0 will also be out any day now -- that upgrade
might be a bit more involved, but I think it will pay off bigtime.
SURBL alone has me excited.
( exciting stats are still available here:
http://sarai.indymedia.org/~mtoups/spamstats.html )

-matt toups

  gpg --keyserver keys.indymedia.org --recv-keys CE9CE8AD


Summary of major changes since 2.63
-----------------------------------

  - Security fix prevents a denial of service attack open to certain
    malformed messages; this DoS affects all SpamAssassin 2.5x
    and 2.6x versions to date.
  - Backported several very reliable rules from the SpamAssassin 3.0.0
    codebase.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.indymedia.org/pipermail/imc-sysadmin/attachments/20040813/93c8692d/attachment.pgp