[TriLUG] URGENT: spamassassin update

[Michael Hrivnak]

If you run spamassassin anywhere, run sa-update immediately.

There is a default rule, "FH_DATE_PAST_20XX", which is supposed to match when 
a date is "grossly in the future".  They thoughtfully defined this as anything 
in or after the year 2010.  It has obviously caused chaos today around the 
world.  In my debian deployments, the default score for that rule is 3.5.

They have updated the rule, again quite thoughtfully, so that it now defines 
"grossly in the future" as any date in or after 2020.  Hopefully this is just 
a quick fix, and they'll do something more intelligent soon.

Here is the issue: https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6269

The rule update should be automatically picked up when when sa-update runs 
next.  This is how you can verify that the new rule is in place (obviously 
change the path to match your system):

$ grep FH_DATE_PAST_20XX 
/var/lib/spamassassin/3.002005/updates_spamassassin_org/72_active.cf
##{ FH_DATE_PAST_20XX
header   FH_DATE_PAST_20XX      Date =~ /20[2-9][0-9]/ [if-unset: 2006]
describe FH_DATE_PAST_20XX      The date is grossly in the future.
##} FH_DATE_PAST_20XX

Note that the regular expression now includes "[2-9]" instead of "[1-9]".

Good luck,
Michael
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: <http://www.trilug.org/pipermail/trilug/attachments/20100101/e97dec71/attachment.pgp>