Apache SpamAssassin 3.4.2 released
SpamAssassin 3.4.2 is out, the first release from this spam-filtering
project since 3.4.1
came out in April 2015. It fixes some remotely
exploitable security issues, so SpamAssassin users probably want to
update in the near future. "The exploit has been seen in the wild but not believe to have been
purposefully part of a Denial of Service attempt.  We are concerned that
there may be attempts to abuse the vulnerability in the future. 
Therefore, we strongly recommend all users of these versions upgrade to
Apache SpamAssassin 3.4.2 as soon as possible."