NOTICE: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now

Security

Apache SpamAssassin のアナウンスメール、なのかなぁ？　勿論(?)、私は使っていませんが影響のある人がいるかも知れませんので参考までに掲載しておきますね。

The following notice has been sent by Daryl C.W. O'Shea, VP of Apache SpamAssassin --

I've posted the following note on the Apache SpamAssassin website about an issue with a rule that may cause wanted email to be classified as spam by SpamAssassin. If you're running SpamAssassin 3.2.x you are encouraged to update you rules (updates were released on sa-update around 1900 UTC Jan 1, 2010).

Y2K10 Rule Bug - Update Your Rules Now!

Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now!

ということですが、変更点 を見る限り、正規表現のアップデートが必要みたいですね。コレ自体は当たり前の話なんだけど、ルールを自動更新にしていない人が多いのかな？

で、対策ですが以下の 2つのどちらかをどうぞ、とのことです。

  1. If your system is configured to use sa-update run sa-update now. An update is available that will correct the rule. No further action is necessary (other than restarting spamd or any service that uses SpamAssassin directly).
  2. Add "score FH_DATE_PAST_20XX 0" without the quotes to the end of your local.cf file to disable the rule. If you require help updating your rules to correct this issue you are encouraged to ask for assistance on the Apache SpamAssassin Users' list. Users' mailing list info is here.