All: We are working on a new CVE which we will work to address with the SA 3.4.3. RC is delayed.
Regards, KAM -- Kevin A. McGrail VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171