Frederic, I believe ruleset 1879934 has been published and should fix the issue. Can you confirm, please? -- Kevin A. McGrail Member, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171
On Wed, Jul 15, 2020 at 7:01 AM Kevin A. McGrail <[email protected]> wrote: > On 7/15/2020 6:29 AM, Frédéric Nass wrote: > > As of today July 15th, sa-update (3.3.1) is trying to install > 1879817.tar.gz and it's still failing to do so. > > Hi Frederic, > > What's the error you are getting specifically? > > Can you tell us in which revision of the signatures this is expected to be > fixed? And confirm that this fix will also work for older versions of SA? > > I cannot because I don't know what problem you are having and it works for > me with no lint errors on 3.4.5. with ruleset 1879817. I'd like to get it > working and will look at the error from your sa-update. > > A couple more points: > > 3.3.1 is ancient released over a decade ago. 3.4.4 is significantly > better not to mention more secure with numerous bugs and security issues > fixed including a few CVEs along the way. > > Also are you aware that the project's rule updates are ending for that > version? We've been working to convey that info and it's on the > website:*** On March 1, 2020, we will stop publishing rulesets with SHA-1 > checksums. If you do not update to 3.4.2 or later, you will be stuck at > the last ruleset with SHA-1 signatures. ***. This change is based on a > policy requirement of the foundation and security issues with these weak > hashes. > > Regards, > > KAM > > > >
