Changelog for spamassassin-spamc-4.0.1-lp154.230.1.x86_64.rpm :

* Wed Apr 10 2024 Dirk Stoecker - fix iXhash2-meta-rules.patch
* Tue Apr 09 2024 Dirk Stoecker - update to patch release version 4.0.1 - Incompatibilities with some versions of perl and some perl modules that have been released since the release of SpamAssassin 4.0.0 - Problems using cpan to install SpamAssassin when certain required or optional modules are not already installed - Support for space characters in the path name of some executables used by certain plugins - Improved handling of URL shortener link redirects - Improved TxRep locking management - Added Mail::SpamAssassin::Plugin::AuthRes plugin to use Authentication-Results header fields in other plugins - Added a Pyzor Perl implementation - Perl crash when certain uri_detail rules processed some messages with UTF-8 characters - Inconsistent handling of newlines in header rules - Text or HTML content placed in octet-stream attachments by spammers to bypass SpamAssassin scanning - Implemented TCP fallback for truncated DNS UDP replies- Refresh patch-URIDNSBL- Drop undocumented patch-SQL_ASCII_SORT breaking sqlite- Drop most of iXhash2-meta-rules.patch (additional services no longer exist)
* Mon Feb 26 2024 Dominique Leuenberger - Use %patch -P N instead of deprecated %patchN.
* Tue Jan 02 2024 Pedro Monreal - Remove the dependency on perl(IO::Socket::INET6) as it has been deprecated by upstream, is no longer suitable for use and its not being maintained. A compatible replacement for this package is perl(IO::Socket::IP) which is shipped by the perl-base package.
* Sat Dec 24 2022 Arjen de Korte - Add BuildRequires Text::Diff that was accidentally removed from original submission- Update known warnings % spamassassin-rpmlintrc
* Thu Dec 22 2022 Paolo Stivanin - Update to spamassissin 4.0.0:
* Notable internal changes: - Meta rules no longer use priority values, they are evaluated dynamically when the rules they depend on are finished - DNS and other asynchronous lookups like DCC or Razor2 plugins are now launched when priority -100 is reached. This allows short circuiting at lower priority without sending unneeded DNS queries - New internal Mail::SpamAssassin::GeoDB module supporting RelayCountry and URILocalBL plugins provides a unified interface to Geographic IP modules. These include: MaxMind::DB::Reader (GeoIP2) Geo::IP IP::Country::DB_File IP::Country::Fast.
* New plugins: - Mail::SpamAssassin::Plugin::ExtractText - Mail::SpamAssassin::Plugin::DMARC - Mail::SpamAssassin::Plugin::DecodeShortURLs
* HashCash module has been removed completely
* Full detailed changelog: https://svn.apache.org/repos/asf/spamassassin/trunk/Changes- Update to iXhash2 4.00:
* Minimum required version: SpamAssassin 4.0.0- Update to spampd 2.61:
* Performance and diagnostic improvements, quicker startups, and a lot of documentation updates.
* Add support for configuration files (examples included in /misc folder and in POD).
* Add optional \"scalable mode\" using Net::Server::PreFork module (16-year TODO!). More info in POD.
* Add --logfile option to control logging destination(s) (syslog, stderr, and/or file/device).
* Add --logident, --logfacility options for syslog.
* Add multiple levels of help, including full \"man\" output with optional HTML formatting.
* Add --show argument for printing default option values and other debug.
* Fix SpamAssassin debug logging with versions 3.1+ (output was going to stderr/wrong syslog/null).
* Fix for IPv6 addresses being used on --host and --relayhost options (was not possible due to \":\" check).
* SIGHUP will now reload SpamAssassin and SpamPD configuration files (and all module code), still with graceful child process shutdown.
* Use SpamAssassin::Logger module (with SA 3.1+) for all logging.
* Log to stderr by default if running non-daemonized
* Child processes are now renamed to \"spampd child\" to distinguish them from the parent in task lists.
* Now requires Net::Server v0.89+ (though latest 2.009 is recommended).
* The --auto-whitelist option is no longer allowed with SpamAssassin v3+.
* Improve --debug option, adding ability to specify SpamAssassin (v3.1+) debug areas (aka channels/facilities).
* All boolean options can take 0/1 argument and be negated with \"no-\" prefix.
* The --children (-c) option is now more formally named - -max-servers (-mxs), but still accepted.
* IO::Socket::UNIX and ::IP are only required if actually needed for --relaysocket / --relayhost options.
* Wed Jan 19 2022 Johannes Segitz - Drop ProtectHome from spamd.service and spampd.service. Unfortunately spamassing writes there, so ProtectHome=read-only doesn\'t work. Whitelisting a specific part has a too high chance of breaking for this package (bsc#1193248)
* Tue Nov 23 2021 Dirk Stoecker - Set ProtectHome=false for spampd.service, as this breaks loading and storing data files in /home/vscan.
* Wed Nov 17 2021 Johannes Segitz - Added hardening to systemd service(s) (bsc#1181400). Modified:
* spamd.service
* spampd.service
* Thu Sep 09 2021 Peter Varkoly - spamassassin: sa-update.timer does not work (bsc#1175375) Remove sence less SPAM_SA_UPDATE Document how to use sa-update.service
* Tue Apr 13 2021 Arjen de Korte - update spamassassin to 3.4.6
* Fixed URIDNSBL not triggering meta rules
* Fix false positive in T_KAM_HTML_FONT_INVALID on CSS color !important
* Wed Mar 24 2021 Arjen de Korte - update spamassassin to 3.4.5
* In this release, there are bug fixes for one CVE: CVE-2020-1946 for Malicious rule configuration (.cf) files can be configured to run system commands (boo#1184221)
* Improvements to OLEVBMacro and AskDNS plugins
* Received and EnvelopeFrom headers matching improvements
* userpref SQL schema fixes
* rbl and hashbl evaluation improvements
* fix for non working TxRep tag names
* man page fixes- Update download links
* Fri Feb 12 2021 Pedro Monreal - Relax the crypto policies for the test-suite. This will allow the tests that use certificates with small key lengths to pass.
* Wed Dec 23 2020 Arjen de Korte - Require perl(Mail::SpamAssassin) instead of perl-spamassassin- Don\'t use BerkeleyDB (not even for unit test)- Don\'t use is_opensuse conditional
* Sat Dec 19 2020 Thorsten Kukuk - Move spamc into an own sub-package to avoid the full spamassassin installation on every client if there is a spamd server
* Thu Dec 17 2020 Arjen de Korte - Compile rules in %post if Perl and/or spamassassin version changed and SPAM_SA_COMPILE=yes- Enable test (add basic-lint-without-sandbox.patch)- Ignore known warnings (add spamassassin-rpmlintrc)
* Wed Jan 29 2020 Arjen de Korte - update spamassassin to 3.4.4
* In this release, there are bug fixes for two CVEs: CVE-2020-1931 for Nefarious rule configuration (.cf) files can be configured to run system commands with warnings. (boo#1162200) CVE-2020-1930 for Nefarious rule configuration (.cf) files can be configured to run system commands with sa-compile. (boo#1162197)
* Improvements to OLEVBMacro
* Fix for CRLF handling with SpamAssMilter & DKIM
* Small fix for a regexp to provide Perl 5.8.x compatability again
* Increased fns_extrachars default value to 50
* Fixed nosubject and maxhits tflags when sa-compile is used
* Limited the Bayes parsed token count
* Improvements to whitespace trimming
* Sat Dec 14 2019 Arjen de Korte - remove old (compiled) rules in /var/lib/spamassassin directory after package upgrade and remove entirely upon package removal- add BuildRequires for perl(Archive::Zip) and perl(IO::String)
* Thu Dec 12 2019 Arjen de Korte - update spamassassin to 3.4.3
* There is one new plugin (disabled by default) OLEVBMacro - Detects both OLE macros and VB code inside Office documents
* Two CVE security bug fixes are included in this release CVE-2019-12420 for Multipart Denial of Service Vulnerability (boo#1159133) CVE-2018-11805 for nefarious CF files can be configured to run system commands without any output or errors (boo#1118987)
* Safer and faster scanning of large emails using body_part_scan_size and rawbody_part_scan_size settings.
* New tflag \"nosubject\" for \'body\' rules, to stop matching the Subject header which is part of the body text.
* Security updates include deprecation of the unsafe sa-update \'--allowplugins\' option, which now prints a warning that \'--reallyallowplugins\' is required to use it.
* Tue Dec 10 2019 Dirk Stoecker - Increase maximum size for spampd to 7168
* Sat Nov 09 2019 Arjen de Korte - Change architecture of perl modules to \'noarch\'
* Fri Nov 08 2019 Arjen de Korte - Fix extraction command for default rules (proper fix for boo#911355, rather than a workaround)- Don\'t unconditionally run sa-update on spamd and spampd service start as this doesn\'t honor the settings in /etc/sysconfig/spamd- After running sa-update, only restart services if they were running before- Fix name in logging timed-sa-update (suse.cron-sa-update doesn\'t exist anymore)
* Sun Oct 27 2019 Arjen de Korte - update spampd to 2.53
* Fix LMTP delivery with multiple recipients
* Fix Warning for \"Use of uninitialized value in string\" update spampd to 2.52
* Override Net::Server\'s HUP handling, just restart children
* Add --version option to print information about SpamPD, Net::Server, SpamAssassin, and Perl.
* Add warnings about using deprecated options.
* Documentation updates and code cosmetics.- Update download links (add for spampd and iXhash2 sources)- Add source verification (add spamassassin.keyring)- Add %{perl_requires} for perl-Mail-SpamAssassin- Fix \"PIDFile= references a path below legacy directory /var/run/\" (change /var/run/ -> /run/)- Don\'t package README.SuSE which documents an init script that was never bundled boo#1068469
* Tue Jun 11 2019 Dominique Leuenberger - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut the build queues by allowing usage of systemd-mini
* Wed Jan 16 2019 Jan Engelhardt - Reduce boilerplate generated by %service_
*.
* Wed Jan 16 2019 Peter Varkoly - bsc#1115411 spamassassin: migrate from cron to systemd timers- Apply %license macro
* Tue Sep 18 2018 Arjen de Korte - update spamassassin to 3.4.2
* There are four new plugins (disabled by default) HashBL - interface to The Email Blocklist (EBL) ResourceLimits - assure your spamd child processes do not exceed specified CPU or memory limit FromNameSpoof - detection of the From:name field being used to mislead Phishing - finds uris used in phishing campaigns detected by OpenPhish (https://openphish.com) or PhishTank (https://phishtank.com) feeds
* For security reasons SSLv3 support has been removed from spamc(1).
* Four CVE security bug fixes are included in this release for PDFInfo.pm and the SA core: CVE-2017-15705, CVE-2016-1238, CVE-2018-11780 & CVE-2018-11781.
* In sa-update script, optional support for SHA-256 / SHA-512 in addition to or instead of SHA1 has been added for better validation of rules.
* GeoIP2 support has been added to RelayCountry and URILocalBL plugins due to GeoIP legacy API deprecations.
* several new or enhanced configuration options- update spampd to 2.51
* Replace IO::Socket::INET with IO::Socket::IP for IPv6 support
* Unix ports (ability to listen on UNIX sockets)
* Add X-Envelope-
* headers before Received
* Add /usr/local/bin and /usr/local/sbin to PATH
* Add --setsid option to start server with setsid if running in background- Removed patches (are now in upstream):
* 0001-bug-7361-Allow-building-against-OpenSSL-1.1.0.patch
* 0001-Fix-bug-7367-Don-t-assume-cwd-.-is-in-INC-it-may-be-.patch
* DNS-resolver-recursion-desired-not-set.patch
* spamassassin-dont_use_SSLv3_methods.patch
* spampd-2.42_git_20170226.patch
* Unescaped_left_brace_in_regex_is_deprecated.patch
* Mon Sep 17 2018 Arjen de Korte - Revert incompatibility-with-NET-DNS.patch (this patch attempts to fix a problem that was already solved by bsc#1059210)
* Thu Sep 13 2018 varkolyAATTsuse.com- bsc#1107765 - spamassassin: incompatibility with Net::DNS >= 1.01 - Add upstream patch: incompatibility-with-NET-DNS.patch
* Sun Sep 09 2018 varkolyAATTsuse.com- bsc#1069831 Running sa-update from spamassassin gives warning about deprecated regex o remove deprecated-regex.patch and apply upstream patch: Unescaped_left_brace_in_regex_is_deprecated.patch This patch also fixes the bug PerMsgStatus Warning https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7196
* Mon Feb 19 2018 varkolyAATTsuse.com- bsc#1069831 Running sa-update from spamassassin gives warning about deprecated regex o add deprecated-regex.patch
* Thu Jan 18 2018 varkolyAATTsuse.com- bsc#1059210 spamassassin perl dns resolver recursion desired not set o add DNS-resolver-recursion-desired-not-set.patch
* Mon Dec 11 2017 jengelhAATTinai.de- Replace %__-type macro indirections. Replace old $RPM_ shell variables.
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Tue Nov 21 2017 mpluskalAATTsuse.com- Update umask in cronjob (boo#861539)- Make sure that spamd can start (boo#961291)
* Wed Aug 30 2017 vcizekAATTsuse.com- Add support for building with OpenSSL 1.1 (bsc#1055252)
* add 0001-bug-7361-Allow-building-against-OpenSSL-1.1.0.patch
* add spamassassin-dont_use_SSLv3_methods.patch- Fix build with Perl 5.26
* https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7367
* add 0001-Fix-bug-7367-Don-t-assume-cwd-.-is-in-INC-it-may-be-.patch
* Sun Feb 26 2017 opensuseAATTdstoecker.de- SPAMPD: add spampd-2.42_git_20170226.patch - support IPv6 with IO::Socket::IP- Drop old init system support (systems before 12.x)
* Mon Feb 20 2017 kukukAATTsuse.de- Don\'t call/require insserv if we use systemd
* Tue Jan 12 2016 bwiedemannAATTsuse.com- use service command to restart spamd and amavis (boo#961279)
* Sun Nov 29 2015 opensuseAATTdstoecker.de- change default spampd settings to properly support IPv6 and allow larger SPAM
* Wed Aug 26 2015 hskAATTimb-jena.de- disable again \"make test\" (seems not to like being run offline)
* Thu Jul 09 2015 hskAATTimb-jena.de- update to 3.4.1
* new plugins (disabled by default) TxRep -substantially improved replacement of AWL plugin PDFInfo - help detecting spam with attached PDF files URILocalBL - new rule test types for URIs in html message parts
* several new or enhanced configuration options, e.g.: normalize_charset - reimplemented, see Mail::SpamAssassin::Conf bayes_token_sources - more control on sources of tokens for Bayes plugin
* internal change, probably only affecting 3rd party plugins: Util::RegistrarBoundaries is being replaced by RegistryBoundaries
* rule updates, improvements, optimizations, bug fixes- patch-utf8 removed, cf. bz.apache.org/SpamAssassin/show_bug.cgi?id=7133- re-enable \"make test\" for 13.2 and up
* Mon Feb 02 2015 mpluskalAATTsuse.com- Enable reload in unit files (boo#915736)
* Tue Jan 06 2015 mpluskalAATTsuse.com- Fix for boo#911355- Don\'t install init files when service files are installed- Create symlinks for rcspamd and rcspampd when systemd is used- Remove unnecessary cleanup section from spec files