▽SpamAssassin News ●03/25 02:30 2021-03-24: Apache SpamAssassin 3.4.5 has been released! Apache SpamAssassin 3.4.5 is primarily a security release. In this release, there are bug fixes for one CVE: CVE-2020-1946 for Malicious rule configuration (.cf) files can be configured to run system commands. *** On March 1, 2020, we stopped publishing rulesets with SHA-1 checksums. If you do not update to 3.4.2 or later, you will be stuck