[VUA 37-1] Updated SpamAssassin package fixes security flaw

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 37-1     http://volatile.debian.org
debian-volatile <at> lists.debian.org                               Stephen Gran
November 11, 2007
---------------------------------------------------------------------------

Package              : spamassassin
Version              : 3.2.3-0.volatile1
Importance           : low
CVE IDs              : CVE-2007-2873

The following security flaw was found and fixed in spamassassin:

[CVE-2007-2873]  A local user symlink vulnerability in some non-standard
                 configurations could lead to arbitrary file overwrites.

Additionally, this version brings many new enhancements and bugfixes.

For etch, an updated spamassassin package is available in etch/volatile 
as version 3.2.3-0.volatile1.

We recommend that you update your system.

Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/s/spamassassin