SpamAssassin 3.4.3 Released

December 11, Development team of Apache Spam Assassin released the lates stable version SpamAssassin 3.4.3.

Apache SpamAssassin is an anti-spam platform, equipped with a feature that automatically filters spam emails. Using local and network tests, it identifies spam emails. As rules and configurations are stored in plain text, it is easy to configure and add new rules.

Apache Spam Assassin 3.4.3 is the latest stable version of the 3.4 series, first released in 2014. The upcoming next major release of 4.0 is expected to include improved native UTF-8 handling.

There’s a new plug-in which detects both OLE macros and VB code inside Office documents. By default, it is disabled. To use it, both Archive::Zip and IO::String modules are necessary.

With a new setting, large volume emails can be scanned fast. There are multiple of other options available for settings. There is also a plug-in that can prevent matching the Subject header, which is a part of the body text.

Vulnerabilities of CVE-2019-12420 and CVE-2018-11805 have been fixed. Now ‘–allowplugins’, which is an unsafe sa-update option, is deprecated.

Please note that on March 1, 2020, the project is going to end publishing rulesets with SHA-A signature. Without the update to 3.4.2, the new ruleset won’t be available.

Apache SpamAssasin
https://spamassassin.apache.org/