Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 29404 - SpamAssassin 2.60 released (for real this time)
Summary: SpamAssassin 2.60 released (for real this time)
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal
Assignee: Gentoo Perl team
URL:
Whiteboard:
Keywords:
: 29389 31335 31550 (view as bug list)
Depends on: 29156 29447
Blocks: 35423
  Show dependency tree
 
Reported: 2003-09-22 22:21 UTC by Rajiv Aaron Manglani (RETIRED)
Modified: 2003-12-15 11:02 UTC (History)
6 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Fix to work with new install restrictions. (spamassassin.patch,1.75 KB, patch)
2003-09-23 11:15 UTC, Wayne Davison
Details | Diff
Mail-SpamAssassin-2.60-r1.ebuild (Mail-SpamAssassin-2.60-r1.ebuild,3.02 KB, text/plain)
2003-09-24 04:24 UTC, Malte S. Stretz
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Rajiv Aaron Manglani (RETIRED) gentoo-dev 2003-09-22 22:21:41 UTC
 
Comment 1 Rajiv Aaron Manglani (RETIRED) gentoo-dev 2003-09-22 22:23:36 UTC
*** Bug 29389 has been marked as a duplicate of this bug. ***
Comment 2 Rajiv Aaron Manglani (RETIRED) gentoo-dev 2003-09-22 22:24:44 UTC
2.60 is for real this time. no more wacky RC or cvs releases.


Pick it up from:

  http://SpamAssassin.org/released/Mail-SpamAssassin-2.60.tar.gz
  http://SpamAssassin.org/released/Mail-SpamAssassin-2.60.tar.bz2
  http://SpamAssassin.org/released/Mail-SpamAssassin-2.60.zip

md5sum:
  bd1607d8fa52ef3f5fdda5e05f971e9d  Mail-SpamAssassin-2.60.tar.bz2
  46d1db67ed1d860ddb136e0beb5f6ac3  Mail-SpamAssassin-2.60.tar.gz
  f35b1b558c846a4e7fd7a50a7986cc26  Mail-SpamAssassin-2.60.zip


------- Forwarded Message

From: Theo Van Dinter <felicity@kluge.net>
To: SpamAssassin-talk@lists.sourceforge.net,
   SpamAssassin-devel@lists.sourceforge.net,
   SpamAssassin-announce@lists.sourceforge.net
User-Agent: Mutt/1.4.1i
X-Spam-Score: -3.4 (---)
X-Spam-Report: -3.4/5.0
	Spam Filtering performed by sourceforge.net.
	See http://spamassassin.org/tag/ for more details.
	Report problems to https://sf.net/tracker/?func=add&group_id=1&atid=200001
	PGP_SIGNATURE_2    (-2.5 points) Contains a PGP-signed message (signature attached)
	BULK_EMAIL         (1.6 points)  BODY: Talks about bulk email
	USER_AGENT_MUTT    (-2.5 points) User-Agent header indicates a non-spam MUA (Mutt)
Subject: [SA-Announce] SpamAssassin 2.60 released!!
Sender: spamassassin-announce-admin@lists.sourceforge.net
List-Help: <mailto:spamassassin-announce-request@lists.sourceforge.net?subject=help>
List-Post: <mailto:spamassassin-announce@lists.sourceforge.net>
List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/spamassassin-announce>,
	<mailto:spamassassin-announce-request@lists.sourceforge.net?subject=subscribe>
List-Id: Announcements of releases etc <spamassassin-announce.lists.sourceforge.net>
List-Unsubscribe: <https://lists.sourceforge.net/lists/listinfo/spamassassin-announce>,
	<mailto:spamassassin-announce-request@lists.sourceforge.net?subject=unsubscribe>
List-Archive: <http://sourceforge.net/mailarchive/forum.php?forum=spamassassin-announce>
Date: Mon, 22 Sep 2003 22:33:47 -0400

SpamAssassin 2.60 is released!  SpamAssassin 2.60 is the first major
update of SpamAssassin since February 2003 (when the 2.50 series was
released).

SpamAssassin is a mail filter which uses advanced statistical
and heuristic tests to identify spam (also known as unsolicited
commercial/bulk email).

Downloading
-----------

Pick it up from:

  http://SpamAssassin.org/released/Mail-SpamAssassin-2.60.tar.gz
  http://SpamAssassin.org/released/Mail-SpamAssassin-2.60.tar.bz2
  http://SpamAssassin.org/released/Mail-SpamAssassin-2.60.zip

md5sum:
  bd1607d8fa52ef3f5fdda5e05f971e9d  Mail-SpamAssassin-2.60.tar.bz2
  46d1db67ed1d860ddb136e0beb5f6ac3  Mail-SpamAssassin-2.60.tar.gz
  f35b1b558c846a4e7fd7a50a7986cc26  Mail-SpamAssassin-2.60.zip

sha1sum:
  2b2ee745c4964f27005f2a791f4f4880b13795fa  Mail-SpamAssassin-2.60.tar.bz2
  5d42b39430da13443dd94e78a2dad6c2b1c7cb5a  Mail-SpamAssassin-2.60.tar.gz
  7e88af2cb92acb899d772752c1236d50991e80ee  Mail-SpamAssassin-2.60.zip


The release files also have a .asc accompanying them.  The file serves
as an external GPG signature for the given release file.  The signing
key is available via the wwwkeys.pgp.net keyserver, as well as
http://www.spamassassin.org/released/GPG-SIGNING-KEY

The key information is:

pub  1024D/265FA05B 2003-06-09 SpamAssassin Signing Key <release@spamassassin.org>
     Key fingerprint =3D 26C9 00A4 6DD4 0CD5 AD24  F6D7 DEE0 1987 265F A05B

The release will also be available via CPAN within a few days.


Important installation notes
----------------------------

- Bayes FYI: 2.60 has a new Bayes backend and database format.  Your old
  database(s) will automatically be upgraded the first time 2.60 tries to
  write to the DB, and any journal, if it exists, will be wiped out without
  being synced.

  In addition, we have had to drop support for Bayes databases in formats
  other than DB_File, due to a large number of serious issues (including
  crash and concurrency bugs) with those formats.

  So, what you want to do is something like this:

  - stop running spamassassin/spamd (ie: you don't want it to be running
    during the upgrade)
  - run "sa-learn --rebuild", this will sync your journal.
  - upgrade SA to 2.60
  - install DB_File module if necessary
  - if you were using another database module, run "sa-learn --import"
    to migrate the data into new DB_File files
  - run "sa-learn --rebuild", this will cause the db format to be upgraded
  - start running spamassassin/spamd again

  Obviously the steps will be different depending on your environment,
  but you get the idea. :)

- Bayes FYI 2: Because of the new database format, "check_bayes_db" will
  no longer function properly.  The functionality from that script was
  added to sa-learn via the "--dump" parameter.  Please see the sa-learn
  man/pod documentation for more info.

- SpamAssassin 2.6x will be the last release supporting perl 5.005,
  so it's suggested to upgrade to at least perl 5.6.1

- Razor2 isn't fully taint safe.  So since SpamAssassin 2.60 enables
  taint mode by default, there's a Razor2.patch file which needs to be
  applied to Razor2.  Documentation exists in the patch file.


Summary of major changes since 2.5x
-----------------------------------

spamd improvements

  - spamd now supports UNIX-domain sockets for low-overhead scanning, thanks
    to Steve Friedl for this.  This is strongly recommended if you're running
    spamc on the same host as the spamd server

Bayes improvements

  - new tweaks to the Bayes engine: it now breaks down email addresses and URI
    elements while learning to use as additional features when testing email

  - new bayes backend, including new database format, ability to learn messages
    to the journal, etc.  Improved expiration mechanism

HTML parser improvements

  - HTML::Parser 3.24 or higher is now required

  - major improvements to the HTML engine, including better support for
    detecting 'invisible text' and similar obfuscation techniques used in
    spam

DNS blacklist and network testing improvements

  - DNS blacklists (RBLs) overhauled; lots of new lists, including SORBS and
    SpamCop; dropped Osirusoft due to their retirement (brought on by a DDOS)

  - RBL timeouts are now handled much more efficiently; if one RBL is taking
    much longer than all the others, it will be cut short and ignored

  - the RBL engine improves the extraction and selection of IP addresses
    queried by inferring trust relationships between Received headers; trust
    can also be manually specified using the new "trusted_networks" option

  - a generalised Received-header parser to more easily detect HELO string
    forgery and faked relay lines

  - support for domain-based blacklists and TXT record queries

  - dccifd support added

  - Razor 1 support dropped

Report improvements

  - to reduce confusion, the default report now includes the hostname of the
    machine where SpamAssassin is running and the installer also asks for an
    administrative address or URL

  - more flexible header and report rewriting including a simple template
    system

Other changes

  - workaround for red hat kernel with NPTL reporting "application bug" in
    spamd due to use of waitpid() when SIGCHLD is set to SIG_IGN

  - taint mode is now enabled by default (for perl versions 5.6.0 and
    higher) for extra security

  - Makefile variables were changed to use DESTDIR instead of the various
    INST_* variables.  Please read the PACKAGING file for more information.

  - Lots of bugs fixed and new rules added. ;)

  - timelog code has been removed

-- 
Randomly Generated Tagline:
Down *every* path lies madness, if you're talking about documentation.
              -- Larry Wall in <200002081801.KAA00141@kiev.wall.org>

Content-Type: application/pgp-signature
Content-Disposition: inline



------- End of Forwarded Message

Comment 3 Wayne Davison 2003-09-23 11:15:21 UTC
Created attachment 18213 [details, diff]
Fix to work with new install restrictions.

SpamAssassin now requires a different method of installation for package
builders: you need to have at least ExtUtils::MakeMaker 6.11 installed, and use
DESTDIR. The attached patch implements this by overriding the perl base class
for all the compile and install rules. It must therefore depend on getting
MakeMaker 6.11 installed on the system (which is currently broken in portage,
so there will be another bug dependency added soon).

The patch also switches over to the .bz2 version of the tar file to avoid
problems with the mirrors having an older RC version cached.

Finally, the RUN_RAZOR2_TESTS value is now ineffectual, so I changed it to be
RUN_RAZOR_TESTS.
Comment 4 Malte S. Stretz 2003-09-24 04:24:59 UTC
Created attachment 18257 [details]
Mail-SpamAssassin-2.60-r1.ebuild

Better ebuild :o) Sets the *VENDOR stuff correctly and adds some dependencies
and docs (and an info output about a Bayes dependenciy). Still uses the
routines from perl-module_src_install but skips the install part with a small
hack. I had to call this one -r1 because else weirdo ebuild refused to use the
new SRC_URI...

There's also a file Razor2.patch in the SA tarball which should be applied
against the Razor package to make it work with SA (for now I just kludged
around the bug via disabling taint mode if Razor is installed). I'll open a
separate bug for that.

The perl-module.eclass is pretty broken in respect to new ExtUtil::MakeMakers
btw. I'll try to catch somebody who's repsonsible for that one -- there are
some possible solutions for this. Oh, I'm the creator of the new SpamAssassin
build system btw ;-)
Comment 5 Heinrich Wendel (RETIRED) gentoo-dev 2003-10-19 10:10:13 UTC
*** Bug 31335 has been marked as a duplicate of this bug. ***
Comment 6 Heinrich Wendel (RETIRED) gentoo-dev 2003-10-19 10:12:30 UTC
Michael: can you please add the last attachement as -r2 since it also fixes
bug #31335
Comment 7 Heinrich Wendel (RETIRED) gentoo-dev 2003-10-19 16:41:54 UTC
*** Bug 31550 has been marked as a duplicate of this bug. ***
Comment 8 Rajiv Aaron Manglani (RETIRED) gentoo-dev 2003-12-09 01:16:48 UTC
is there anything left to be done on this bug? what about the bugs it depends on?
spamassassin 2.61 is out and bug #35423 will track that.
Comment 9 Malte S. Stretz 2003-12-15 05:22:53 UTC
This bug can be closed. I'd done it myself if I had the appropriate bugzilla rights.
Comment 10 Rajiv Aaron Manglani (RETIRED) gentoo-dev 2003-12-15 11:02:00 UTC
looks like this is all done. anything more, see Bug 35423.