Your message dated Fri, 07 Oct 2005 19:17:35 -0700
with message-id <[EMAIL PROTECTED]>
and subject line Bug#288617: fixed in spamassassin 3.1.0a-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 4 Jan 2005 17:52:28 +0000
>From [EMAIL PROTECTED] Tue Jan 04 09:52:28 2005
Return-path: <[EMAIL PROTECTED]>
Received: from shawidc-mo1.cg.shawcable.net (pd4mo3so.prod.shaw.ca)
[24.71.223.10]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1Clsr6-0008O6-00; Tue, 04 Jan 2005 09:52:28 -0800
Received: from pd3mr3so.prod.shaw.ca
(pd3mr3so-qfe3.prod.shaw.ca [10.0.141.179]) by l-daemon
(Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004))
with ESMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]; Tue,
04 Jan 2005 10:52:27 -0700 (MST)
Received: from pn2ml4so.prod.shaw.ca ([10.0.121.148])
by pd3mr3so.prod.shaw.ca (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar
15 2004)) with ESMTP id <[EMAIL PROTECTED]> for
[EMAIL PROTECTED]; Tue, 04 Jan 2005 10:52:27 -0700 (MST)
Received: from crystal (S0106000c6e9a4bd7.vc.shawcable.net [24.85.235.15])
by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.18 (built Jul 28 2003))
with ESMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]; Tue,
04 Jan 2005 10:52:27 -0700 (MST)
Received: from hsteoh by crystal with local (Exim 4.34)
id 1ClspO-0001Qq-UM for [EMAIL PROTECTED]; Tue, 04 Jan 2005
09:50:42 -0800
Date: Tue, 04 Jan 2005 09:50:42 -0800
From: "H. S. Teoh" <[EMAIL PROTECTED]>
Subject: spamassassin: premature termination of scanned message body
To: [EMAIL PROTECTED]
Message-id: <[EMAIL PROTECTED]>
MIME-version: 1.0
Content-type: multipart/mixed; boundary="n8g4imXOkfNTN/H1"
Content-disposition: inline
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-7.4 required=4.0 tests=BAYES_00,FAKE_HELO_SHAW_CA,
HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
--n8g4imXOkfNTN/H1
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Package: spamassassin
Version: 3.0.2-1
Severity: normal
Hi, I've found a spamassassin bug. Take a look at the attached spam
(compressed to avoid hitting BTS spam filters): the message body
contains a line that starts with '-----', and the text "ancient secret
of life" immediately below this line. I have the following test in my
local.cf:
body PANACEA_1 /\bancient\s+secret\s+of\s+life\b/i
describe PANACEA_1 Ancient secret of life
score PANACEA_1 1.5
Obviously, this rule should match when applied to this spam, right?
Unfortunately, no. It seems that spamassassin doesn't scan the rest of
the message after the '----' line. You can test this yourself, and see
that this rule will never match. However, if you edit the message and
remove the '-----' line, it WILL match.
It appears that SA is trying to ignore the signature part of the
message body in its tests. While I can see the rationale behind this,
I think it's a very bad idea. It's too easy for spammers to add '----'
lines before their message, and all body tests will be bypassed. The
body tests should always be applied to the ENTIRE message body.
Thanks!
T
--
Never wrestle a pig. You both get covered in mud, and the pig likes it.
--n8g4imXOkfNTN/H1
Content-Type: application/octet-stream
Content-Disposition: attachment; filename="spam.gz"
Content-Transfer-Encoding: base64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--n8g4imXOkfNTN/H1--
---------------------------------------
Received: (at 288617-close) by bugs.debian.org; 8 Oct 2005 02:19:49 +0000
>From [EMAIL PROTECTED] Fri Oct 07 19:19:49 2005
Return-path: <[EMAIL PROTECTED]>
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EO4HH-0004JR-00; Fri, 07 Oct 2005 19:17:35 -0700
From: Duncan Findlay <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#288617: fixed in spamassassin 3.1.0a-1
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Fri, 07 Oct 2005 19:17:35 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-CrossAssassin-Score: 7
Source: spamassassin
Source-Version: 3.1.0a-1
We believe that the bug you reported is fixed in the latest version of
spamassassin, which is due to be installed in the Debian FTP archive:
spamassassin_3.1.0a-1.diff.gz
to pool/main/s/spamassassin/spamassassin_3.1.0a-1.diff.gz
spamassassin_3.1.0a-1.dsc
to pool/main/s/spamassassin/spamassassin_3.1.0a-1.dsc
spamassassin_3.1.0a-1_all.deb
to pool/main/s/spamassassin/spamassassin_3.1.0a-1_all.deb
spamassassin_3.1.0a.orig.tar.gz
to pool/main/s/spamassassin/spamassassin_3.1.0a.orig.tar.gz
spamc_3.1.0a-1_i386.deb
to pool/main/s/spamassassin/spamc_3.1.0a-1_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Duncan Findlay <[EMAIL PROTECTED]> (supplier of updated spamassassin package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 5 Oct 2005 17:03:50 -0400
Source: spamassassin
Binary: spamassassin spamc
Architecture: source all i386
Version: 3.1.0a-1
Distribution: unstable
Urgency: low
Maintainer: Duncan Findlay <[EMAIL PROTECTED]>
Changed-By: Duncan Findlay <[EMAIL PROTECTED]>
Description:
spamassassin - Perl-based spam filter using text analysis
spamc - Client for SpamAssassin spam filtering daemon
Closes: 238613 268035 271869 274194 276621 276778 288617 290615 290660 290978
291093 292327 292610 293485 296682 297899 298372 300809 306496 316368 317355
318349 318360 319014
Changes:
spamassassin (3.1.0a-1) unstable; urgency=low
.
* Upload to unstable
* Clean up NEWS.Debian, so it isn't so verbose for people upgrading from
3.0.x
.
spamassassin (3.1.0-1) experimental; urgency=low
.
* New upstream release.
* Add libdigest-sha1-perl to Build-Depends.
.
spamassassin (3.0.99pre3.1.0+rc2-1) experimental; urgency=low
.
* New upstream release
* Upstream bug fixes:
- MIME boundary regexp improved (Closes: #288617)
.
spamassassin (3.0.99pre3.1.0+rc1-1) experimental; urgency=low
.
* New major upstream release:
- More Bayes storage options -- SDBM, MySQL, PostgreSQL
- Apache preforking algorithm; number of children scaled according to
demand
- New plugins: DomainKeys (off by default), MIMEHeader, ReplaceTags,
WhiteListSubject
- Razor2, DCC disabled by deafult because they are no longer free for
non-personal use
- AWL is now a plugin (Closes: #292610)
- Includes sa-update which can be used to update rules between
releases (currently must be manually invoked)
.
* Bugs in BTS fixed upstream:
- Stop checking for long descriptions (Closes: #274194)
- No longer uses Storable (Closes: #293485)
- Minor doc fixes (Closes: #276621, #290660)
- Avoid unitialized value error in Reporter.pm (Closes: #290615)
- Logging and error messages improved throughout (Closes: #318349)
- SIGHUP now works when running with -u on a privileged port (Closes:
#296682)
- Avoid ALL_TRUSTED misfire when Received: parsing fails (Closes:
#300809)
- Fix __FROM_PHONE to be more permissive (Closes: #238613)
- Avoid MSN Groups FPs (Closes: #290978)
- Better handling of UTF-8 (Closes: #291093, #297899, #306496,
#319014)
- BAYES_* scores manually set (Closes: #292327)
- local.cf has more comments (Closes: #271869)
- sa-learn is quieter (Closes: #268035)
- spamassassin --debug more verbose, displays files read (Closes:
#276778)
.
* No longer support the upgrade path for versions prior to
sarge. Including:
- Debconf questions about upgrading from 2.20-1woody and 2.4x
- Explanation of the libdb problems caused by upgrades from perl 5.6
to 5.8 recent versions of spamassassin (not an issue with
woody->testing) (Closes: #318360, #298372)
- Downgrade spamassassin's Depends: on spamc to Recommends: (Closes:
#316368)
- Remove the woody build hack with debconf
.
* Correct Suggest: on libnet-smtp-perl to libnet-perl (Closes: #317355)
* Upgrade to Standards Version 3.6.2.0 (by incrementing the number in
debian/control)
* Updated the way debian/rules uses dpatch to be the "new
way". (i.e. calls dpatch directly)
* No longer use debconf *at all*. As soon as I find questions worth
asking, we'll go back.
Files:
4c92af5102656ba33b3a2199fd7a974b 741 mail optional spamassassin_3.1.0a-1.dsc
f70c1fcab3d9563731bbc307eda7d69e 1185499 mail optional
spamassassin_3.1.0a.orig.tar.gz
eae63e9891228dae49be6477d8f108d9 26691 mail optional
spamassassin_3.1.0a-1.diff.gz
1f0f1b4fab9047042ce60bef8d0bb040 994064 mail optional
spamassassin_3.1.0a-1_all.deb
bd78ceaf33566b773dfde62edf09dd86 136404 mail optional spamc_3.1.0a-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFDRZ0cqjUzNGvmnNARArq5AJ91EM2LTe84qMrEJ8sX4TE9Xwa0egCeMOb4
kCIajK1zRAyMYVKtQp2DwAM=
=ExDU
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
