http://permalink.gmane.org/gmane.mail.bogofilter.announce hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://permalink.gmane.org/gmane.mail.bogofilter.announce/179 <pre>bogofilter-SA-2012-01 Topic:heap corruption overrun in bogofilter/bogolexer Announcement:bogofilter-SA-2012-01 Writer:Matthias Andree Version:1.0 CVE ID:CVE-2012-5468 Announced:2012-12-03 Category:vulnerability Type:out of bounds write through invalid input Impact:heap corruption, application crash Credits:Julius Plenz (FU Berlin, Germany) Danger:medium URL:http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01 Affected:bogofilter &lt;= 1.2.2 SVN checkouts before 2012-10-19 UTC (-r6972) Not affected:bogofilter 1.2.3 (r6973) and newer 1. Background ============= Bogofilter is a software package for classifying a message as spam or non-spam. It uses a data base to store words and must be trained which messages are spam and non-spam. It uses the probabilities of individual words for classifying the message. Note that the bogofilter project is issuing security announcements only for current "stable" releases, and not necessarily for past "stable" releases. 2. Problem descri</pre> Matthias Andree 2012-12-03T22:51:53 http://permalink.gmane.org/gmane.mail.bogofilter.announce/178 <pre>Bogofilter v1.2.3 is now available. This release fixes a security issue and several minor code cleanups. A heap corruption caused by invalid base64 input has been fixed. ######################################################################## Files are available at http://sourceforge.net/projects/bogofilter for download. Here are the md5sums for the release: c3ed7f483b83abcbf6d8c797084bd06e bogofilter-1.2.3.tar.bz2 aec710e967a7378f57267db70fe3217b bogofilter-1.2.3.tar.gz 535a47618559f5882e860062b69c8564 NEWS-1.2.3 ######################################################################## Here's the cumulative change log since 1.1.0: ================= BOGOFILTER NEWS ================= !!!!!!!! READ THE RELEASE.NOTES !!!!!!!! This file is in Unicode charset, with UTF-8 encoding. Sections headed '[Incompat &lt;version&gt;]' and '[Major &lt;version&gt;]' are particularly important. They describe changes that are incompatible with earlier releases or are significantly different. </pre> David Relson 2012-12-02T21:30:22 http://permalink.gmane.org/gmane.mail.bogofilter.announce/177 <pre>Bogofilter v1.2.2 is now available. This release fixes a security fix and several minor bugs and cleanups. A heap corruption caused by invalid base64 input has been fixed. A better PRNG is now being used. Support has been updated for Berkeley 4.8 and 5.0 Minimum supported version of SQLite3 has been bumped. Miscellaneous clang and compiler warnings have been fixed. ######################################################################## Files are available at http://sourceforge.net/projects/bogofilter for download. Here are the md5sums for the release: 0d77f9bf9f73d0555cac751088de6d2e bogofilter-1.2.2-1.src.rpm 4bcabdf8c5e7efefcb508eda7e80eebc bogofilter-1.2.2.tar.bz2 39d27c13eae8a5064d68e20d585e60de bogofilter-1.2.2.tar.gz 91e1e120f7815c66735838f149d4020d bogofilter-db42-1.2.2-1.i586.rpm 2d8923111a5a2d08fb36c5827881d41c bogofilter-db42-static-1.2.2-1.i586.rpm ef9a99b71e400b1ba5410222e5a9befb bogofilter-sqlite3-1.2.2-1.i586.rpm 79cb331dfa4e4400ef8fb22007a7626e bogofilter-sqlite3-static</pre> David Relson 2010-07-09T01:34:12 http://permalink.gmane.org/gmane.mail.bogofilter.announce/175 <pre>Bogofilter v1.2.1 has been promoted from "current" to "stable" status. This release fixes 2 message parsing bugs. * Mime decoding of the first line of the message body has been fixed. The problem applies to both base64 encoded and quoted-printable text. * An EOL problem with quoted-printable text has been corrected. ######################################################################## Files are available for download at http://sourceforge.net/projects/bogofilter/files/. Here are the md5sums for the release: 2eb802f4e271b99c3d8f68b14f8df9ef bogofilter-1.2.1.tar.bz2 a12a16d88d6d565dacf2a5e6259a3337 bogofilter-1.2.1.tar.gz 7950dbc01fc7fb3f7f388df0756563f1 bogofilter-db42-1.2.1-1.i586.rpm fcb47a419148fd13571a38dc309a81c9 bogofilter-db42-static-1.2.1-1.i586.rpm ea1b6df3d7da29b70817a8ecc535abc6 bogofilter-sqlite3-1.2.1-1.i586.rpm 5d0da20901112d28bdebe7ab38a8a919 bogofilter-sqlite3-static-1.2.1-1.i586.rpm ######################################################################## Here's th</pre> David Relson 2009-09-15T11:17:37 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.mail.bogofilter.announce