On 05.02.20 17:18, Henrik K wrote:
>The error can only happen if there was unquoted $ in regex.
>
>header   __ZMIfish_ForgedBill01 Message-ID =~ /$Blat.v3/
>
>Newer 3.4.4 don't care about such things, you should upgrade asap since
>there are vulnerabilities.

On Wed, Feb 05, 2020 at 04:55:33PM +0100, Matus UHLAR - fantomas wrote:
the OP reported using debian, which has those bugs fixed in 3.4.2.
developers have backported fixed into the old version.

On 05.02.20 17:58, Henrik K wrote:
It's clearly not using debian version or then the backport is lacking fixes.
I have not reviewed it personally so there are no guarantees.

it's possible that the OP doesn't have security updates installed.

Philipp, please check which SA version you have:

% apt-cache policy spamassassin
spamassassin:
 Installed: 3.4.2-1+deb10u2
 Candidate: 3.4.2-1+deb10u2
 Version table:
*** 3.4.2-1+deb10u2 500
       500 http://security.debian.org/debian-security buster/updates/main i386 
Packages
       100 /var/lib/dpkg/status
    3.4.2-1 500
       500 file:/mount/mirrors/debian buster/main i386 Packages


if it's not 3.4.2-1+deb10u2 (or 3.4.2-1~deb9u3 on Debian 9), try installing
security updated.

I recommend you installing unattended-upgrades package and enabling security
updates, so security updates are installed automatically.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"The box said 'Requires Windows 95 or better', so I bought a Macintosh".

Reply via email to