bugtraq - Re: Y2K10 spamassassin bug, 2010 year mails discared as spam

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 05 Jan 2010 00:32:47 +0100
From: Rudy Zijlstra <rudy@...mpydevil.homelinux.org>
To: Eduardo Romero <edo@....cl>
Cc: bugtraq@...urityfocus.com
Subject: Re: Y2K10 spamassassin bug, 2010 year mails discared as spam

Eduardo Romero wrote:
> Hi,
>
> Please review your spamassassin rules, the FH_DATE_PAST_20XX rule marks the
> 2010 mails as spam with 3.6 points app, the workaround possible are:
>
> .- file /usr/share/spamassassin/72_active.cf
>
> replace :
>
> header   FH_DATE_PAST_20XX      Date =~ /20[1-9][0-9]/ [if-unset: 2006]
>
> by:
>
> header   FH_DATE_PAST_20XX      Date =~ /20[2-9][0-9]/ [if-unset: 2006]
>
>
> .- add score 0 to this rule at /usr/share/spamassassin/50_scores.cf
>
> replace:
> score FH_DATE_PAST_20XX 2.075 3.384 3.554 3.188 # n=2by:
>
> by:
> score FH_DATE_PAST_20XX 0
>
>
>
> The 'sa-update' options not always works for me.
>
> Regards
> Edo.
>   
The daily update of spamassassin catches this. Mine was already updated 
before i got around to check it

Cheers,

Rudy