Changelog for perl-Mail-SpamAssassin-3.4.6-lp151.217.1.noarch.rpm :

* Wed Jan 19 2022 Johannes Segitz - Drop ProtectHome from spamd.service and spampd.service. Unfortunately spamassing writes there, so ProtectHome=read-only doesn\'t work. Whitelisting a specific part has a too high chance of breaking for this package (bsc#1193248)
* Tue Nov 23 2021 Dirk Stoecker - Set ProtectHome=false for spampd.service, as this breaks loading and storing data files in /home/vscan.
* Wed Nov 17 2021 Johannes Segitz - Added hardening to systemd service(s) (bsc#1181400). Modified:
* spamd.service
* spampd.service
* Thu Sep 09 2021 Peter Varkoly - spamassassin: sa-update.timer does not work (bsc#1175375) Remove sence less SPAM_SA_UPDATE Document how to use sa-update.service
* Tue Apr 13 2021 Arjen de Korte - update spamassassin to 3.4.6
* Fixed URIDNSBL not triggering meta rules
* Fix false positive in T_KAM_HTML_FONT_INVALID on CSS color !important
* Wed Mar 24 2021 Arjen de Korte - update spamassassin to 3.4.5
* In this release, there are bug fixes for one CVE: CVE-2020-1946 for Malicious rule configuration (.cf) files can be configured to run system commands (boo#1184221)
* Improvements to OLEVBMacro and AskDNS plugins
* Received and EnvelopeFrom headers matching improvements
* userpref SQL schema fixes
* rbl and hashbl evaluation improvements
* fix for non working TxRep tag names
* man page fixes- Update download links
* Fri Feb 12 2021 Pedro Monreal - Relax the crypto policies for the test-suite. This will allow the tests that use certificates with small key lengths to pass.
* Wed Dec 23 2020 Arjen de Korte - Require perl(Mail::SpamAssassin) instead of perl-spamassassin- Don\'t use BerkeleyDB (not even for unit test)- Don\'t use is_opensuse conditional
* Sat Dec 19 2020 Thorsten Kukuk - Move spamc into an own sub-package to avoid the full spamassassin installation on every client if there is a spamd server
* Thu Dec 17 2020 Arjen de Korte - Compile rules in %post if Perl and/or spamassassin version changed and SPAM_SA_COMPILE=yes- Enable test (add basic-lint-without-sandbox.patch)- Ignore known warnings (add spamassassin-rpmlintrc)
* Wed Jan 29 2020 Arjen de Korte - update spamassassin to 3.4.4
* In this release, there are bug fixes for two CVEs: CVE-2020-1931 for Nefarious rule configuration (.cf) files can be configured to run system commands with warnings. (boo#1162200) CVE-2020-1930 for Nefarious rule configuration (.cf) files can be configured to run system commands with sa-compile. (boo#1162197)
* Improvements to OLEVBMacro
* Fix for CRLF handling with SpamAssMilter & DKIM
* Small fix for a regexp to provide Perl 5.8.x compatability again
* Increased fns_extrachars default value to 50
* Fixed nosubject and maxhits tflags when sa-compile is used
* Limited the Bayes parsed token count
* Improvements to whitespace trimming
* Sat Dec 14 2019 Arjen de Korte - remove old (compiled) rules in /var/lib/spamassassin directory after package upgrade and remove entirely upon package removal- add BuildRequires for perl(Archive::Zip) and perl(IO::String)
* Thu Dec 12 2019 Arjen de Korte - update spamassassin to 3.4.3
* There is one new plugin (disabled by default) OLEVBMacro - Detects both OLE macros and VB code inside Office documents
* Two CVE security bug fixes are included in this release CVE-2019-12420 for Multipart Denial of Service Vulnerability (boo#1159133) CVE-2018-11805 for nefarious CF files can be configured to run system commands without any output or errors (boo#1118987)
* Safer and faster scanning of large emails using body_part_scan_size and rawbody_part_scan_size settings.
* New tflag \"nosubject\" for \'body\' rules, to stop matching the Subject header which is part of the body text.
* Security updates include deprecation of the unsafe sa-update \'--allowplugins\' option, which now prints a warning that \'--reallyallowplugins\' is required to use it.
* Tue Dec 10 2019 Dirk Stoecker - Increase maximum size for spampd to 7168
* Sat Nov 09 2019 Arjen de Korte - Change architecture of perl modules to \'noarch\'
* Fri Nov 08 2019 Arjen de Korte - Fix extraction command for default rules (proper fix for boo#911355, rather than a workaround)- Don\'t unconditionally run sa-update on spamd and spampd service start as this doesn\'t honor the settings in /etc/sysconfig/spamd- After running sa-update, only restart services if they were running before- Fix name in logging timed-sa-update (suse.cron-sa-update doesn\'t exist anymore)
* Sun Oct 27 2019 Arjen de Korte - update spampd to 2.53
* Fix LMTP delivery with multiple recipients
* Fix Warning for \"Use of uninitialized value in string\" update spampd to 2.52
* Override Net::Server\'s HUP handling, just restart children
* Add --version option to print information about SpamPD, Net::Server, SpamAssassin, and Perl.
* Add warnings about using deprecated options.
* Documentation updates and code cosmetics.- Update download links (add for spampd and iXhash2 sources)- Add source verification (add spamassassin.keyring)- Add %{perl_requires} for perl-Mail-SpamAssassin- Fix \"PIDFile= references a path below legacy directory /var/run/\" (change /var/run/ -> /run/)- Don\'t package README.SuSE which documents an init script that was never bundled boo#1068469
* Tue Jun 11 2019 Dominique Leuenberger - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut the build queues by allowing usage of systemd-mini
* Wed Jan 16 2019 Jan Engelhardt - Reduce boilerplate generated by %service_
*.
* Wed Jan 16 2019 Peter Varkoly - bsc#1115411 spamassassin: migrate from cron to systemd timers- Apply %license macro
* Tue Sep 18 2018 Arjen de Korte - update spamassassin to 3.4.2
* There are four new plugins (disabled by default) HashBL - interface to The Email Blocklist (EBL) ResourceLimits - assure your spamd child processes do not exceed specified CPU or memory limit FromNameSpoof - detection of the From:name field being used to mislead Phishing - finds uris used in phishing campaigns detected by OpenPhish (https://openphish.com) or PhishTank (https://phishtank.com) feeds
* For security reasons SSLv3 support has been removed from spamc(1).
* Four CVE security bug fixes are included in this release for PDFInfo.pm and the SA core: CVE-2017-15705, CVE-2016-1238, CVE-2018-11780 & CVE-2018-11781.
* In sa-update script, optional support for SHA-256 / SHA-512 in addition to or instead of SHA1 has been added for better validation of rules.
* GeoIP2 support has been added to RelayCountry and URILocalBL plugins due to GeoIP legacy API deprecations.
* several new or enhanced configuration options- update spampd to 2.51
* Replace IO::Socket::INET with IO::Socket::IP for IPv6 support
* Unix ports (ability to listen on UNIX sockets)
* Add X-Envelope-
* headers before Received
* Add /usr/local/bin and /usr/local/sbin to PATH
* Add --setsid option to start server with setsid if running in background- Removed patches (are now in upstream):
* 0001-bug-7361-Allow-building-against-OpenSSL-1.1.0.patch
* 0001-Fix-bug-7367-Don-t-assume-cwd-.-is-in-INC-it-may-be-.patch
* DNS-resolver-recursion-desired-not-set.patch
* spamassassin-dont_use_SSLv3_methods.patch
* spampd-2.42_git_20170226.patch
* Unescaped_left_brace_in_regex_is_deprecated.patch
* Mon Sep 17 2018 Arjen de Korte - Revert incompatibility-with-NET-DNS.patch (this patch attempts to fix a problem that was already solved by bsc#1059210)
* Thu Sep 13 2018 varkolyAATTsuse.com- bsc#1107765 - spamassassin: incompatibility with Net::DNS >= 1.01 - Add upstream patch: incompatibility-with-NET-DNS.patch
* Sun Sep 09 2018 varkolyAATTsuse.com- bsc#1069831 Running sa-update from spamassassin gives warning about deprecated regex o remove deprecated-regex.patch and apply upstream patch: Unescaped_left_brace_in_regex_is_deprecated.patch This patch also fixes the bug PerMsgStatus Warning https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7196
* Mon Feb 19 2018 varkolyAATTsuse.com- bsc#1069831 Running sa-update from spamassassin gives warning about deprecated regex o add deprecated-regex.patch
* Thu Jan 18 2018 varkolyAATTsuse.com- bsc#1059210 spamassassin perl dns resolver recursion desired not set o add DNS-resolver-recursion-desired-not-set.patch
* Mon Dec 11 2017 jengelhAATTinai.de- Replace %__-type macro indirections. Replace old $RPM_ shell variables.
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Tue Nov 21 2017 mpluskalAATTsuse.com- Update umask in cronjob (boo#861539)- Make sure that spamd can start (boo#961291)
* Wed Aug 30 2017 vcizekAATTsuse.com- Add support for building with OpenSSL 1.1 (bsc#1055252)
* add 0001-bug-7361-Allow-building-against-OpenSSL-1.1.0.patch
* add spamassassin-dont_use_SSLv3_methods.patch- Fix build with Perl 5.26
* https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7367
* add 0001-Fix-bug-7367-Don-t-assume-cwd-.-is-in-INC-it-may-be-.patch
* Sun Feb 26 2017 opensuseAATTdstoecker.de- SPAMPD: add spampd-2.42_git_20170226.patch - support IPv6 with IO::Socket::IP- Drop old init system support (systems before 12.x)
* Mon Feb 20 2017 kukukAATTsuse.de- Don\'t call/require insserv if we use systemd
* Tue Jan 12 2016 bwiedemannAATTsuse.com- use service command to restart spamd and amavis (boo#961279)
* Sun Nov 29 2015 opensuseAATTdstoecker.de- change default spampd settings to properly support IPv6 and allow larger SPAM
* Wed Aug 26 2015 hskAATTimb-jena.de- disable again \"make test\" (seems not to like being run offline)
* Thu Jul 09 2015 hskAATTimb-jena.de- update to 3.4.1
* new plugins (disabled by default) TxRep -substantially improved replacement of AWL plugin PDFInfo - help detecting spam with attached PDF files URILocalBL - new rule test types for URIs in html message parts
* several new or enhanced configuration options, e.g.: normalize_charset - reimplemented, see Mail::SpamAssassin::Conf bayes_token_sources - more control on sources of tokens for Bayes plugin
* internal change, probably only affecting 3rd party plugins: Util::RegistrarBoundaries is being replaced by RegistryBoundaries
* rule updates, improvements, optimizations, bug fixes- patch-utf8 removed, cf. bz.apache.org/SpamAssassin/show_bug.cgi?id=7133- re-enable \"make test\" for 13.2 and up
* Mon Feb 02 2015 mpluskalAATTsuse.com- Enable reload in unit files (boo#915736)
* Tue Jan 06 2015 mpluskalAATTsuse.com- Fix for boo#911355- Don\'t install init files when service files are installed- Create symlinks for rcspamd and rcspampd when systemd is used- Remove unnecessary cleanup section from spec files