-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 30 Jan 2020 16:33:17 -0800 Source: spamassassin Binary: sa-compile spamassassin spamc spamc-dbgsym Architecture: source all amd64 Version: 3.4.4-1~bpo10+1 Distribution: buster-backports Urgency: medium Maintainer: Noah Meyerhans <noahm@debian.org> Changed-By: Noah Meyerhans <noahm@debian.org> Description: sa-compile - Tools for compiling SpamAssassin rules into C spamassassin - Perl-based spam filter using text analysis spamc - Client for SpamAssassin spam filtering daemon Closes: 918506 920394 Changes: spamassassin (3.4.4-1~bpo10+1) buster-backports; urgency=medium . * Rebuild 3.4.4-1 for buster-backports . spamassassin (3.4.4-1) unstable; urgency=medium . * New upstream release. . spamassassin (3.4.4~rc1-1) unstable; urgency=medium . * When creating the debian-spamd user, set its shell to /usr/sbin/nologin (Closes: 920394, 918506) * New upstream release candidate fixes security issues: - CVE-2020-1930: Arbitrary code execution via malicious rules files - CVE-2020-1931: Arbitrary code execution via malicious rules files Checksums-Sha1: 6608fd5c18c8f023912927101662662d448ed9a1 2216 spamassassin_3.4.4-1~bpo10+1.dsc 464a548336261207c9eb3650fe28a9d0f6db2fab 46016 spamassassin_3.4.4-1~bpo10+1.debian.tar.xz 169fd1aab765e338fab1443aa387e8bba0e1c651 62856 sa-compile_3.4.4-1~bpo10+1_all.deb d68c071f1d69f8015203c7f9bfe5d07e33a13283 1209348 spamassassin_3.4.4-1~bpo10+1_all.deb 613fcd9e64631f9bc4e30b03ae94bb19db4d4036 6981 spamassassin_3.4.4-1~bpo10+1_amd64.buildinfo 3033c61d241de4e277e8bd3f46125ede1a2b96b4 51764 spamc-dbgsym_3.4.4-1~bpo10+1_amd64.deb 5a1e93d26f07268af1e4249cf63337ffdb6bd6e5 97556 spamc_3.4.4-1~bpo10+1_amd64.deb Checksums-Sha256: 2bf762a90e43b51e3d09e05f2c7c388756da8a2aa55991f9bd8a747047bb2466 2216 spamassassin_3.4.4-1~bpo10+1.dsc 0bb74cea73956b17fb5ed9adb19e2808d06371755dc5402b459f2558139aba60 46016 spamassassin_3.4.4-1~bpo10+1.debian.tar.xz 231dac14448fab10bd62f5cd3fa3ac597ef287a560f0c2def2afcc1ad7cc4d18 62856 sa-compile_3.4.4-1~bpo10+1_all.deb afe724ed97f2e9474fe4a7b5d8417f2b1e0c89f2ac8e2c82b66b3bbd3e552bdb 1209348 spamassassin_3.4.4-1~bpo10+1_all.deb 097accf1090fb4781417cceac305c7c269e83969bb4482474ab095b4481dd2b6 6981 spamassassin_3.4.4-1~bpo10+1_amd64.buildinfo 4e38423fc9e9123e7c7f11d66458056f352ae6e97a23a7855c8bf3e29878a139 51764 spamc-dbgsym_3.4.4-1~bpo10+1_amd64.deb 4f3b895727a16872246fc08f7a459be5b32a8d1c5a7ea60ced669d690a5b71f1 97556 spamc_3.4.4-1~bpo10+1_amd64.deb Files: 7f80746042c2db895c5bd5fcb725715e 2216 mail optional spamassassin_3.4.4-1~bpo10+1.dsc 1bedd37de223700b113d60f018ccbaa9 46016 mail optional spamassassin_3.4.4-1~bpo10+1.debian.tar.xz 01632ec64305d8f47ed8724247f76f24 62856 mail optional sa-compile_3.4.4-1~bpo10+1_all.deb 3b652233a66ffca4cc402432e1a9ab92 1209348 mail optional spamassassin_3.4.4-1~bpo10+1_all.deb 38ef1d348e1ceb69aa27e21a47b239a9 6981 mail optional spamassassin_3.4.4-1~bpo10+1_amd64.buildinfo 8b8dbfb8e6d2eaa3412f26fe9240fc1d 51764 debug optional spamc-dbgsym_3.4.4-1~bpo10+1_amd64.deb 27cc603d59b0547cbb20c7ef795a22c3 97556 mail optional spamc_3.4.4-1~bpo10+1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE65xaF5r2LDCTz+zyV68+Bn2yWDMFAl47cZgACgkQV68+Bn2y WDPLLBAAiRtfnJKy9oO+G1XVzVbhrhW93CUMUugyuKFTs/Ggryahv3dewi2lJcI6 j4vqOFeLQZYuF2WCfYJAoBywG8E8jJX5y0UTa2dOTdxg8I+PlCcCV693WBXCTs8V qDiJa7Jd+GbPlIdkVdhOY0vTYvmz7ajT+1bu73zzsxsIX4jPRwquOCM0Ny1u9xyZ LXu1r2OI8B3q0mANR0I62KsLAZZIV3Q5rShKJ1YhKmAl0u1hhoIcEJAOCcvcCywi KCnr8trrrP/tsvrQV8yZLNSALCSL4LlwYvH/4c3KmkglZu1hr1pZpTGc/hVZ1H+Q M+7tBiRzRLY6+ZvPNqrDFQuyZfTwBeIz7SXzws9M9Ah+bvPp/mOuN0fdLb5sy/cO FGSlJvMB+jKIyxK/2mt6kEUqPciFjV5uzD0lwCsoF7RFtFVaCzyp1xEc0Hz5y7C3 oJAyqdFVR9wjzLvAItFaFod+p7u9NcseRFBEZNzPYKgxmIigJ/5KnASBsLyN4e+A 9rT6as8Ur/qcq4NCHCwr5wf8QwjvaKVBlLVpnvnXT0600U0CToNrgSn3Z0ZPLJ63 XpIzLffV6DkiqUtfV2fbw5/VQlBb6EzK6p1Jml0xz7IvKBmnhvkxh8YID5XhZGiM Zauz6mBdLJXz0+3jJ1kDa/PCfgctLQ831VLElfmn3bv8teMZWCQ= =N0yh -----END PGP SIGNATURE-----