ืžืขืœื“ื•ื ื’ ืคื•ืŸ SpamAssassin 3.4.5 ืกืคึผืึทื ืคึฟื™ืœื˜ืจื™ืจื•ื ื’ ืกื™ืกื˜ืขื ืžื™ื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื™ืœื™ืžืึทื ื™ื™ืฉืึทืŸ

ื“ื™ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ ืกืคึผืึทื ืคึฟื™ืœื˜ืจื™ืจื•ื ื’ ืคึผืœืึทื˜ืคืึธืจืžืข ืื™ื– ื‘ื ื™ืžืฆื - SpamAssassin 3.4.5. SpamAssassin ื™ืžืคึผืœืึทืžืึทื ืฅ ืึทืŸ ื™ื ืึทื’ืจื™ื™ื˜ื™ื“ ืฆื•ื’ืึทื ื’ ืฆื• ื‘ืึทืฉืœื™ืกืŸ ืฆื™ ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ: ื“ืขืจ ืึธื ื–ืึธื’ ืื™ื– ืื•ื ื˜ืขืจื˜ืขื ื™ืง ืฆื• ืึท ื ื•ืžืขืจ ืคื•ืŸ ื˜ืฉืขืงืก (ืงืึธื ื˜ืขืงืกื˜ื•ืึทืœ ืึทื ืึทืœื™ืกื™ืก, DNSBL ืฉื•ื•ืึทืจืฅ ืื•ืŸ ื•ื•ื™ื™ึทืก ืจืฉื™ืžื•ืช, ื˜ืจื™ื™ื ื“ Bayesian ืงืœืึทืกืกื™ืคื™ืขืจืก, ื›ืกื™ืžืข ืงืึธื ื˜ืจืึธืœื™ืจื•ื ื’, ืกืขื ื“ืขืจ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืžื™ื˜ SPF ืื•ืŸ DKIM, ืืื–"ื• ื•). ื ืึธืš ื™ื•ื•ืึทืœื™ื•ื™ื™ื˜ื™ื ื’ ื“ื™ ืึธื ื–ืึธื’ ืžื™ื˜ ืคืึทืจืฉื™ื“ืขื ืข ืžืขื˜ื”ืึธื“ืก, ืึท ื–ื™ื›ืขืจ ื•ื•ืึธื’ ืงืึธื•ืึทืคื™ืฉืึทื ื˜ ืื™ื– ืึทืงื™ื•ืžื™ืึทืœื™ื™ื˜ื™ื“. ืื•ื™ื‘ ื“ื™ ืงืึทืœืงื™ืึทืœื™ื™ื˜ื™ื“ ืงืึธื•ืึทืคื™ืฉืึทื ื˜ ื™ืงืกื™ื“ื– ืึท ื–ื™ื›ืขืจ ืฉื•ื•ืขืœ, ื“ืขืจ ืึธื ื–ืึธื’ ืื™ื– ืืคื’ืขืฉื˜ืขืœื˜ ืึธื“ืขืจ ืื ื’ืขืฆื™ื™ื›ื ื˜ ื•ื•ื™ ืกืคึผืึทื. ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืึทืคึผื“ื™ื™ื˜ื™ื ื’ ืคึฟื™ืœื˜ืจื™ืจื•ื ื’ ื›ึผืœืœื™ื ื–ืขื ืขืŸ ื’ืขืฉื˜ื™ืฆื˜. ื“ืขืจ ืคึผืขืงืœ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืื•ื™ืฃ ื‘ื™ื™ื“ืข ืงืœื™ืขื ื˜ ืื•ืŸ ืกืขืจื•ื•ืขืจ ืกื™ืกื˜ืขืžืขืŸ. ื“ื™ SpamAssassin ืงืึธื“ ืื™ื– ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ ืคึผืขืจืœ ืื•ืŸ ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ืื•ื ื˜ืขืจ ื“ื™ ืึทืคึผืึทื˜ืฉื™ ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ.

ื“ื™ ื ื™ื™ึทืข ืžืขืœื“ื•ื ื’ ืคื™ืงืกื™ื– ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2020-1946) ื•ื•ืึธืก ืึทืœืึทื•ื– ืึท ืึทื˜ืึทืงืขืจ ืฆื• ื•ื™ืกืคื™ืจืŸ ืกื™ืกื˜ืขื ืงืึทืžืึทื ื“ื– ืื•ื™ืฃ ื“ื™ ืกืขืจื•ื•ืขืจ ื•ื•ืขืŸ ื™ื ืกื˜ืึธืœื™ื ื’ ืึทื ื•ื•ืขืจืึทืคื™ื™ื“ ื‘ืœืึทืงื™ื ื’ ื›ึผืœืœื™ื ื‘ืืงื•ืžืขืŸ ืคื•ืŸ ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ืงื•ื•ืืœืŸ.

ืฆื•ื•ื™ืฉืŸ ื“ื™ ืขื ื“ืขืจื•ื ื’ืขืŸ ื•ื•ืึธืก ื–ืขื ืขืŸ ื ื™ืฉื˜ ืฉื™ื™ึทื›ื•ืช ืฆื• ื–ื™ื›ืขืจื”ื™ื™ื˜ ื–ืขื ืขืŸ ื™ืžืคึผืจื•ื•ื•ืžืึทื ืฅ ืฆื• ื“ื™ ืึทืจื‘ืขื˜ ืคื•ืŸ ื“ื™ OLEVBMacro ืื•ืŸ AskDNS ืคึผืœื•ื’ื™ื ืก, ื™ืžืคึผืจื•ื•ื•ืžืึทื ืฅ ืฆื• ื“ื™ ื“ืึทื˜ืŸ ื•ื•ืึธืก ืจื™ื›ื˜ืŸ ืคึผืจืึธืฆืขืก ืื™ืŸ ื“ื™ ื‘ืืงื•ืžืขืŸ ืื•ืŸ EnvelopeFrom ื›ืขื“ืขืจื–, ืงืขืจืขืงืฉืึทื ื– ืฆื• ื“ื™ Userpref SQL ืกื˜ืฉืขืžืึท, ื™ืžืคึผืจื•ื•ื•ื“ ืงืึธื“ ืคึฟืึทืจ ื˜ืฉืขืงืก ืื™ืŸ rbl ืื•ืŸ hashbl, ืื•ืŸ ืึท ืœื™ื™ื–ื•ื ื’ ืฆื• ื“ืขื ืคึผืจืึธื‘ืœืขื ืžื™ื˜ TxRep ื˜ืึทื’ืก.

ืขืก ืื™ื– ื‘ืืžืขืจืงื˜ ืึทื– ื“ื™ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ื“ื™ 3.4.x ืกืขืจื™ืข ืื™ื– ืึธืคึผื’ืขืฉื˜ืขืœื˜ ืื•ืŸ ืขื ื“ืขืจื•ื ื’ืขืŸ ื•ื•ืขื˜ ื ื™ื˜ ืžืขืจ ื–ื™ื™ืŸ ื’ืขืฉื˜ืขืœื˜ ืื™ืŸ ื“ืขื ืฆื•ื•ื™ื™ึทื’. ืึท ื•ื™ืกื ืขื ืื™ื– ื’ืขืžืื›ื˜ ื‘ืœื•ื™ื– ืคึฟืึทืจ ืคึผืึทื˜ืฉืึทื– ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–, ืื™ืŸ ื“ื™ ื’ืขืฉืขืขื ื™ืฉ ืคื•ืŸ ื•ื•ืึธืก ืžืขืœื“ื•ื ื’ 3.4.6 ื•ื•ืขื˜ ื–ื™ื™ืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“. ืึทืœืข ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ืึทืงื˜ื™ื•ื•ื™ื˜ืขื˜ืŸ ื–ืขื ืขืŸ ืคืึธื•ืงื™ืกื˜ ืื•ื™ืฃ ื“ืขืจ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ื“ื™ 4.0 ืฆื•ื•ื™ื™ึทื’, ื•ื•ืึธืก ื•ื•ืขื˜ ื™ื ืกื˜ืจื•ืžืขื ื˜ ืคื•ืœ-ืคืœืขื“ื–ืฉื“ ื’ืขื‘ื•ื™ื˜-ืื™ืŸ UTF-8 ืคึผืจืึทืกืขืกื™ื ื’.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’