ANNOUNCE: amavisd-new-2.11.1 released

[Mark Martinec]

A release 2.11.1 of amavisd-new now is available at:

https://amavis.org/amavisd-new-2.11.1.tar.bz2

Release notes are at:

https://amavis.org/release-notes.txt



amavisd-new-2.11.1 release notes

- removed a trailing dot element from @INC, as a workaround for a perl
vulnerability CVE-2016-1238;

- amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
for a message "PID <pid> went away", and removed redundant newlines
from some log messages;

- safe_decode() and safe_decode_utf8(): avoid warning messages
"Use of uninitialized value in subroutine entry"
in Encode::MIME::Header when the $check argument is undefined;

- @sa_userconf_maps has been extended to allow loading of per-recipient
(or per- policy bank, or global) SpamAssassin configuration set from
LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
'ldap:' will load SpamAssassin configuration set using the
load_scoreonly_ldap() method; a patch by Atanas Karashenski;

- add some Sanesecurity.Foxhole false positives to the default
list @virus_name_to_spam_score_maps;

- updated some comments;



This is the last release of Amavis from me personally.
The project is moving to gitlab.com, details to be announced separately.

Mark

[Indunil Jayasooriya]

Dear Mark,

Thanks A LOT.

amavisd-new-2.11.0 release was on April 26, 2016.

and

on October 9, 2018, amavisd-new-2.11.1 release.

More than 2 years. It doesn't matter.

I want you to keep on going...

Have a nice day.

Post by Mark Martinec
https://amavis.org/amavisd-new-2.11.1.tar.bz2
https://amavis.org/release-notes.txt
amavisd-new-2.11.1 release notes
vulnerability CVE-2016-1238;
- amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
for a message "PID <pid> went away", and removed redundant newlines
from some log messages;
- safe_decode() and safe_decode_utf8(): avoid warning messages
"Use of uninitialized value in subroutine entry"
in Encode::MIME::Header when the $check argument is undefined;
(or per- policy bank, or global) SpamAssassin configuration set from
'ldap:' will load SpamAssassin configuration set using the
load_scoreonly_ldap() method; a patch by Atanas Karashenski;
- add some Sanesecurity.Foxhole false positives to the default
- updated some comments;
This is the last release of Amavis from me personally.
The project is moving to gitlab.com, details to be announced separately.
Mark

[Danny Horne]

  https://amavis.org/amavisd-new-2.11.1.tar.bz2
  https://amavis.org/release-notes.txt
  Mark

With the large gap between versions, are the various Linux repos still
being updated? (interested in Fedora myself)

[Alexander Dalloz]

Post by Danny Horne

   https://amavis.org/amavisd-new-2.11.1.tar.bz2
   https://amavis.org/release-notes.txt
   Mark

With the large gap between versions, are the various Linux repos still
being updated? (interested in Fedora myself)

https://pkgs.org/download/amavisd-new

Alexander

[Danny Horne]

Post by Alexander Dalloz

Post by Danny Horne
With the large gap between versions, are the various Linux repos still
being updated? (interested in Fedora myself)

https://pkgs.org/download/amavisd-new
Alexander

This link shows what packages are available, but doesn't say if anyone
is actively maintaining them

[John Andersen]

Post by Alexander Dalloz

Post by Danny Horne

   https://amavis.org/amavisd-new-2.11.1.tar.bz2
   https://amavis.org/release-notes.txt
   Mark

With the large gap between versions, are the various Linux repos

still

Post by Danny Horne
being updated? (interested in Fedora myself)

https://pkgs.org/download/amavisd-new
Alexander

John passed away in July. Bottom is not operating right now. A buyer is in the works so watch website for information.

[Ralph Seichter]

Post by Danny Horne
With the large gap between versions, are the various Linux repos still
being updated? (interested in Fedora myself)

I assume that Fedora has a package maintainer mailing list and/or an
issue tracker, and that you'll probably have a better shot at getting
a qualified response there.

-Ralph

[Juan Orti]

Post by Danny Horne
With the large gap between versions, are the various Linux repos still
being updated? (interested in Fedora myself)

Yes, I'm submitting updates to Fedora right now. Any feedback is welcomed.

https://bodhi.fedoraproject.org/updates/?packages=amavisd-new

[Ricky Gutierrez]

Hi , there is some chance for centos 6/7?

regards
El vie., 12 oct. 2018 a las 6:56, Juan Orti

Post by Juan Orti

Post by Danny Horne
With the large gap between versions, are the various Linux repos still
being updated? (interested in Fedora myself)

Yes, I'm submitting updates to Fedora right now. Any feedback is welcomed.
https://bodhi.fedoraproject.org/updates/?packages=amavisd-new

[Juan Orti]

El dom., 14 oct. 2018 a las 8:04, Ricky Gutierrez

Post by Ricky Gutierrez
Hi , there is some chance for centos 6/7?
regards
El vie., 12 oct. 2018 a las 6:56, Juan Orti

Post by Juan Orti

Post by Danny Horne
With the large gap between versions, are the various Linux repos still
being updated? (interested in Fedora myself)

Yes, I'm submitting updates to Fedora right now. Any feedback is welcomed.
https://bodhi.fedoraproject.org/updates/?packages=amavisd-new

After it lands in Fedora and gets more testing I plan to update epel7.
I'm not sure of updating epel6, as it is now in version 2.9.1 and it
can bring some unexpected changes in behaviour.

[David Gessel]

Mark,

Thanks for your work. It has been a significant aid in running a personal email server and not giving my data over to some corporation. I genuinely appreciate it.

-David

-------- Original Message --------
Subject: ANNOUNCE: amavisd-new-2.11.1 released
From: Mark Martinec <Mark.Martinec+***@ijs.si>
To: Amavis users <amavis-***@amavis.org>
Date: Tue Oct 09 2018 20:53:15 GMT+0300

  https://amavis.org/amavisd-new-2.11.1.tar.bz2
  https://amavis.org/release-notes.txt
amavisd-new-2.11.1 release notes
  vulnerability CVE-2016-1238;
- amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
  for a message "PID <pid> went away", and removed redundant newlines
  from some log messages;
- safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
  in Encode::MIME::Header when the $check argument is undefined;
  (or per- policy bank, or global) SpamAssassin configuration set from
  'ldap:' will load SpamAssassin configuration set using the
  load_scoreonly_ldap() method;  a patch by Atanas Karashenski;
- add some Sanesecurity.Foxhole false positives to the default
- updated some comments;
This is the last release of Amavis from me personally.
The project is moving to gitlab.com, details to be announced separately.
  Mark

[Curtis Maurand]

Mark, I have to agree and say thank you for all of your hard work . I've been using amavisd-new for a very long time. Modern cryptography seems to have broken bits of it. I'm really glad that you've made arrangements to hand off the project to a team that can pay more attention to it.

Thank you to all involved and especially Mark.

Sincerely,
Curtis Maurand

Post by David Gessel
Mark,
Thanks for your work. It has been a significant aid in running a
personal email server and not giving my data over to some corporation.
I genuinely appreciate it.
-David
-------- Original Message --------
Subject: ANNOUNCE: amavisd-new-2.11.1 released
Date: Tue Oct 09 2018 20:53:15 GMT+0300

  https://amavis.org/amavisd-new-2.11.1.tar.bz2
  https://amavis.org/release-notes.txt
amavisd-new-2.11.1 release notes

perl

  vulnerability CVE-2016-1238;
- amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
  for a message "PID <pid> went away", and removed redundant newlines
  from some log messages;
- safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
  in Encode::MIME::Header when the $check argument is undefined;

per-recipient

  (or per- policy bank, or global) SpamAssassin configuration set

from
with

  'ldap:' will load SpamAssassin configuration set using the
  load_scoreonly_ldap() method;  a patch by Atanas Karashenski;
- add some Sanesecurity.Foxhole false positives to the default
- updated some comments;
This is the last release of Amavis from me personally.
The project is moving to gitlab.com, details to be announced

separately.

  Mark