Security Advisories + SpamAssassin rules update

Miroslav Lachman 000.fbsd at quip.cz
Thu Jan 7 00:43:46 CET 2010


Do noveho roku hned par novych Security Advisories:

BIND named(8) cache poisoning with DNSSEC validation
http://security.freebsd.org/advisories/FreeBSD-SA-10:01.bind.asc

ntpd mode 7 denial of service
http://security.freebsd.org/advisories/FreeBSD-SA-10:02.ntpd.asc

ZFS ZIL playback with insecure permissions
http://security.freebsd.org/advisories/FreeBSD-SA-10:03.zfs.asc

Erata Notices:

Various FreeBSD 8.0-RELEASE improvements
http://security.freebsd.org/advisories/FreeBSD-EN-10:01.freebsd.asc
Slow NFS client reconnects when using TCP
Possible panics in ZFS
Multicast regression and panic
Panic when invalid SCTP message received during connection shutdown
Panic caused by rename(2)


Aby toho nebylo malo, tak je tu jeste jedna celkem dulezita oprava 
pravidel pro SpamAssassin uverejnena na homepage
http://spamassassin.apache.org/

Y2K10 Rule Bug - Update Your Rules Now!

Jedna se o problem v souboru 72_active.cf kde je pravidlo 
FH_DATE_PAST_20XX, ktere regularnim vyrazem porovnava datum zpravy a 
cokoliv, co ma v datumu rok 2010 nebo vyssi povazuje za datum z prilis 
vzdalene budoucnosti a pridava zpravam tusim 3.6 bodu na spam skore.

"If your system is configured to use sa-update  run sa-update now"

Mirek


More information about the Users-l mailing list