import spamassassin-3.4.4-3.el8

2021-05-18 02:47:01 -04:00 · 2021-05-18 02:47:01 -04:00 · 0c036fae5d
parent 3cb3a6b8fb
commit 0c036fae5d
15 changed files with 899 additions and 3265 deletions
--- a/.gitignore
+++ b/.gitignore
@ -1,2 +1,2 @@
-SOURCES/Mail-SpamAssassin-3.4.2.tar.bz2
-SOURCES/Mail-SpamAssassin-rules-3.4.2.r1840640.tgz
+SOURCES/Mail-SpamAssassin-3.4.4.tar.bz2
+SOURCES/Mail-SpamAssassin-rules-3.4.4.r1873061.tgz
--- a/.spamassassin.metadata
+++ b/.spamassassin.metadata
@ -1,2 +1,2 @@
-9d3128dfe943be5e429edbd77883179138f40536 SOURCES/Mail-SpamAssassin-3.4.2.tar.bz2
-c93006e1572297f816a0e186a98cbbae246a4945 SOURCES/Mail-SpamAssassin-rules-3.4.2.r1840640.tgz
+23ab1edb89570c0367c117cbaf1e816c0dc1fb90 SOURCES/Mail-SpamAssassin-3.4.4.tar.bz2
+ee022f1cc18a66d49c1954936c70c36049c37dcf SOURCES/Mail-SpamAssassin-rules-3.4.4.r1873061.tgz
--- a/SOURCES/0001-Drop-the-ResourceLimits-plugin.patch
+++ b/SOURCES/0001-Drop-the-ResourceLimits-plugin.patch
@ -1,8 +1,8 @@
 diff --git a/MANIFEST b/MANIFEST
-index 95e2af5..d1aa471 100644
+index c4aca1b..5ba3a0c 100644
 --- a/MANIFEST
 +++ b/MANIFEST
-@@ -100,7 +100,6 @@ lib/Mail/SpamAssassin/Plugin/Pyzor.pm
+@@ -101,7 +101,6 @@ lib/Mail/SpamAssassin/Plugin/Pyzor.pm
 lib/Mail/SpamAssassin/Plugin/Razor2.pm
 lib/Mail/SpamAssassin/Plugin/RelayCountry.pm
 lib/Mail/SpamAssassin/Plugin/RelayEval.pm
@ -11,10 +11,10 @@ index 95e2af5..d1aa471 100644
 lib/Mail/SpamAssassin/Plugin/Reuse.pm
 lib/Mail/SpamAssassin/Plugin/Rule2XSBody.pm
 diff --git a/lib/Mail/SpamAssassin/Util/DependencyInfo.pm b/lib/Mail/SpamAssassin/Util/DependencyInfo.pm
-index 7467744..3d92c7d 100644
+index eca12e1..9a6b4fb 100644
 --- a/lib/Mail/SpamAssassin/Util/DependencyInfo.pm
 +++ b/lib/Mail/SpamAssassin/Util/DependencyInfo.pm
-@@ -257,12 +257,6 @@ our @OPTIONAL_MODULES = (
+@@ -233,12 +233,6 @@ our @OPTIONAL_MODULES = (
   check for both Net::DNS and Net::DNS::Nameserver.  However, 
   Net::DNS::Nameserver is only used in make test as of June 2014.',
 },
@ -24,21 +24,21 @@ index 7467744..3d92c7d 100644
 -  desc => 'BSD::Resource provides BSD process resource limit and priority 
 -  functions.  It is used by the optional ResourceLimits Plugin.',
 -},
- );
- 
- our @BINARIES = ();
+ {
+   module => 'Archive::Zip',
+   version => 0,
 diff --git a/rules/v342.pre b/rules/v342.pre
-index 4ab7736..9b425fd 100644
+index 8e0fb07..c4758e9 100644
 --- a/rules/v342.pre
 +++ b/rules/v342.pre
@@ -19,10 +19,6 @@
- # HashBL - Use EBL email blocklist
+ # HashBL - Query hashed/unhashed strings, emails, uris etc from DNS lists
 # loadplugin Mail::SpamAssassin::Plugin::HashBL
 
 -# ResourceLimits - assure your spamd child processes
 -# do not exceed specified CPU or memory limit
 -# loadplugin Mail::SpamAssassin::Plugin::ResourceLimits
 -
- 
 # FromNameSpoof - help stop spam that tries to spoof other domains using 
 # the from name
+ # loadplugin Mail::SpamAssassin::Plugin::FromNameSpoof
--- a/SOURCES/spamassassin-3.4.2-drop-geoip.patch
+++ b/SOURCES/spamassassin-3.4.2-drop-geoip.patch
@ -1,20 +1,8 @@
-From cab335f2c6b096f847402c35ee896a3f3d82958c Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Jaroslav=20=C5=A0karvada?= <jskarvad@redhat.com>
-Date: Mon, 23 Jul 2018 13:28:39 +0200
-Subject: [PATCH] Dropped GeoIP and optional plugins requiring it
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-
-Namely URILocalBL and RelayCountry.
-
-Signed-off-by: Jaroslav Škarvada <jskarvad@redhat.com>
-
 diff --git a/MANIFEST b/MANIFEST
-index 2b1b291..a6bbcdb 100644
+index a988fa1..c4aca1b 100644
 --- a/MANIFEST
 +++ b/MANIFEST
-@@ -117,7 +117,6 @@ lib/Mail/SpamAssassin/Plugin/VBounce.pm
+@@ -118,7 +118,6 @@ lib/Mail/SpamAssassin/Plugin/VBounce.pm
 lib/Mail/SpamAssassin/Plugin/WLBLEval.pm
 lib/Mail/SpamAssassin/Plugin/WhiteListSubject.pm
 lib/Mail/SpamAssassin/PluginHandler.pm
@ -24,10 +12,10 @@ index 2b1b291..a6bbcdb 100644
 lib/Mail/SpamAssassin/SQLBasedAddrList.pm
 diff --git a/lib/Mail/SpamAssassin/Plugin/RelayCountry.pm b/lib/Mail/SpamAssassin/Plugin/RelayCountry.pm
 deleted file mode 100644
-index 2e172f3..0000000
+index 38ec1e3..0000000
 --- a/lib/Mail/SpamAssassin/Plugin/RelayCountry.pm
 +++ /dev/null
-@@ -1,280 +0,0 @@
+@@ -1,407 +0,0 @@
 -# <@LICENSE>
 -# Licensed to the Apache Software Foundation (ASF) under one or more
 -# contributor license agreements.  See the NOTICE file distributed with
@ -57,8 +45,29 @@ index 2e172f3..0000000
 -
 -The RelayCountry plugin attempts to determine the domain country codes
 -of each relay used in the delivery path of messages and add that information
-to the message metadata as "X-Relay-Countries", or the C<_RELAYCOUNTRY_>
-header markup.
+-to the message metadata.
+-
+-Following metadata headers and tags are added:
+-
+- X-Relay-Countries           _RELAYCOUNTRY_
+-   All untrusted relays. Contains all relays starting from the
+-   trusted_networks border. This method has been used by default since
+-   early SA versions.
+-
+- X-Relay-Countries-External  _RELAYCOUNTRYEXT_
+-   All external relays. Contains all relays starting from the
+-   internal_networks border. Could be useful in some cases when
+-   trusted/msa_networks extend beyond the internal border and those
+-   need to be checked too.
+-
+- X-Relay-Countries-All       _RELAYCOUNTRYALL_
+-   All possible relays (internal + external).
+-
+- X-Relay-Countries-Auth      _RELAYCOUNTRYAUTH_
+-   Auth will contain all relays starting from the first relay that used
+-   authentication. For example, this could be used to check for hacked
+-   local users coming in from unexpected countries. If there are no
+-   authenticated relays, this will be empty.
 -
 -=head1 REQUIREMENT
 -
@ -81,11 +90,6 @@ index 2e172f3..0000000
 -
 -our @ISA = qw(Mail::SpamAssassin::Plugin);
 -
-my $db;
-my $dbv6;
-my $db_info;  # will hold database info
-my $db_type;  # will hold database type
-
 -# constructor: register the eval rule
 -sub new {
 -  my $class = shift;
@ -127,10 +131,9 @@ index 2e172f3..0000000
 -    type => $Mail::SpamAssassin::Conf::CONF_TYPE_STRING,
 -    code => sub {
 -      my ($self, $key, $value, $line) = @_;
-      if ( $value !~ /GeoIP|GeoIP2|DB_File|Fast/) {
+-      if ($value !~ /^(?:GeoIP|GeoIP2|DB_File|Fast)$/) {
 -        return $Mail::SpamAssassin::Conf::INVALID_VALUE;
 -      }
-
 -      $self->{country_db_type} = $value;
 -    }
 -  });
@ -141,6 +144,15 @@ index 2e172f3..0000000
 -
 -This option tells SpamAssassin where to find MaxMind GeoIP2 or IP::Country::DB_File database.
 -
+-If not defined, GeoIP2 default search includes:
+- /usr/local/share/GeoIP/GeoIP2-Country.mmdb
+- /usr/share/GeoIP/GeoIP2-Country.mmdb
+- /var/lib/GeoIP/GeoIP2-Country.mmdb
+- /usr/local/share/GeoIP/GeoLite2-Country.mmdb
+- /usr/share/GeoIP/GeoLite2-Country.mmdb
+- /var/lib/GeoIP/GeoLite2-Country.mmdb
+- (and same paths again for -City.mmdb, which also has country functionality)
+-
 -=back
 -
 -=cut
@ -154,84 +166,186 @@ index 2e172f3..0000000
 -      if (!defined $value || !length $value) {
 -        return $Mail::SpamAssassin::Conf::MISSING_REQUIRED_VALUE;
 -      }
-      if (!-f $value) {
+-      if (!-e $value) {
 -        info("config: country_db_path \"$value\" is not accessible");
 -        $self->{country_db_path} = $value;
 -        return $Mail::SpamAssassin::Conf::INVALID_VALUE;
 -      }
-
 -      $self->{country_db_path} = $value;
 -    }
 -  });
+-
+-  push (@cmds, {
+-    setting => 'geoip2_default_db_path',
+-    default => [
+-      '/usr/local/share/GeoIP/GeoIP2-Country.mmdb',
+-      '/usr/share/GeoIP/GeoIP2-Country.mmdb',
+-      '/var/lib/GeoIP/GeoIP2-Country.mmdb',
+-      '/usr/local/share/GeoIP/GeoLite2-Country.mmdb',
+-      '/usr/share/GeoIP/GeoLite2-Country.mmdb',
+-      '/var/lib/GeoIP/GeoLite2-Country.mmdb',
+-      '/usr/local/share/GeoIP/GeoIP2-City.mmdb',
+-      '/usr/share/GeoIP/GeoIP2-City.mmdb',
+-      '/var/lib/GeoIP/GeoIP2-City.mmdb',
+-      '/usr/local/share/GeoIP/GeoLite2-City.mmdb',
+-      '/usr/share/GeoIP/GeoLite2-City.mmdb',
+-      '/var/lib/GeoIP/GeoLite2-City.mmdb',
+-      ],
+-    type => $Mail::SpamAssassin::Conf::CONF_TYPE_STRINGLIST,
+-    code => sub {
+-      my ($self, $key, $value, $line) = @_;
+-      if ($value eq '') {
+-        return $Mail::SpamAssassin::Conf::MISSING_REQUIRED_VALUE;
+-      }
+-      push(@{$self->{geoip2_default_db_path}}, split(/\s+/, $value));
+-    }
+-  });
 -  
 -  $conf->{parser}->register_commands(\@cmds);
 -}
 -
+-sub get_country {
+-    my ($self, $ip, $db, $dbv6, $country_db_type) = @_;
+-    my $cc;
+-    my $IP_PRIVATE = IP_PRIVATE;
+-    my $IPV4_ADDRESS = IPV4_ADDRESS;
+-
+-    # Private IPs will always be returned as '**'
+-    if ($ip =~ /^$IP_PRIVATE$/o) {
+-      $cc = "**";
+-    }
+-    elsif ($country_db_type eq "GeoIP") {
+-      if ($ip =~ /^$IPV4_ADDRESS$/o) {
+-        $cc = $db->country_code_by_addr($ip);
+-      } elsif (defined $dbv6) {
+-        $cc = $dbv6->country_code_by_addr_v6($ip);
+-      }
+-    }
+-    elsif ($country_db_type eq "GeoIP2") {
+-      my ($country, $country_rec);
+-      eval {
+-        if (index($db->metadata()->description()->{en}, 'City') != -1) {
+-          $country = $db->city( ip => $ip );
+-        } else {
+-          $country = $db->country( ip => $ip );
+-        }
+-        $country_rec = $country->country();
+-        $cc = $country_rec->iso_code();
+-        1;
+-      } or do {
+-        $@ =~ s/\s+Trace begun.*//s;
+-        dbg("metadata: RelayCountry: GeoIP2 failed: $@");
+-      }
+-    }
+-    elsif ($country_db_type eq "DB_File") {
+-      if ($ip =~ /^$IPV4_ADDRESS$/o ) {
+-        $cc = $db->inet_atocc($ip);
+-      } else {
+-        $cc = $db->inet6_atocc($ip);
+-      }
+-    }
+-    elsif ($country_db_type eq "Fast") {
+-      $cc = $db->inet_atocc($ip);
+-    }
+-
+-    $cc ||= 'XX';
+-
+-    return $cc;
+-}
+-
 -sub extract_metadata {
 -  my ($self, $opts) = @_;
-  my $geo;
-  my $cc;
+-  my $pms = $opts->{permsgstatus};
 -
-  my $conf_country_db_type = $self->{'main'}{'resolver'}{'conf'}->{country_db_type};
-  my $conf_country_db_path = $self->{'main'}{'resolver'}{'conf'}->{country_db_path};
+-  my $db;
+-  my $dbv6;
+-  my $db_info;  # will hold database info
+-  my $db_type;  # will hold database type
 -
-  if ( $conf_country_db_type eq "GeoIP") {
+-  my $country_db_type = $opts->{conf}->{country_db_type};
+-  my $country_db_path = $opts->{conf}->{country_db_path};
+-
+-  if ($country_db_type eq "GeoIP") {
 -    eval {
 -      require Geo::IP;
 -      $db = Geo::IP->open_type(Geo::IP->GEOIP_COUNTRY_EDITION, Geo::IP->GEOIP_STANDARD);
 -      die "GeoIP.dat not found" unless $db;
 -      # IPv6 requires version Geo::IP 1.39+ with GeoIP C API 1.4.7+
 -      if (Geo::IP->VERSION >= 1.39 && Geo::IP->api eq 'CAPI') {
-       $dbv6 = Geo::IP->open_type(Geo::IP->GEOIP_COUNTRY_EDITION_V6, Geo::IP->GEOIP_STANDARD);
-       if (!$dbv6) {
-         dbg("metadata: RelayCountry: IPv6 support not enabled, GeoIPv6.dat not found");
-       }
-       $db_info = sub { return "Geo::IP " . ($db->database_info || '?') };
+-        $dbv6 = Geo::IP->open_type(Geo::IP->GEOIP_COUNTRY_EDITION_V6, Geo::IP->GEOIP_STANDARD);
+-        if (!$dbv6) {
+-          dbg("metadata: RelayCountry: GeoIP: IPv6 support not enabled, GeoIPv6.dat not found");
+-        }
 -      } else {
-       dbg("metadata: RelayCountry: IPv6 support not enabled, versions Geo::IP 1.39, GeoIP C API 1.4.7 required");
+-        dbg("metadata: RelayCountry: GeoIP: IPv6 support not enabled, versions Geo::IP 1.39, GeoIP C API 1.4.7 required");
+-      }
+-      $db_info = sub { return "Geo::IP IPv4: " . ($db->database_info || '?')." / IPv6: ".($dbv6 ? $dbv6->database_info || '?' : '?') };
+-      1;
+-    } or do {
+-      # Fallback to IP::Country::Fast
+-      dbg("metadata: RelayCountry: GeoIP: GeoIP.dat not found, trying IP::Country::Fast as fallback");
+-      $country_db_type = "Fast";
+-    }
+-  }
+-  elsif ($country_db_type eq "GeoIP2") {
+-    if (!$country_db_path) {
+-      # Try some default locations
+-      foreach (@{$opts->{conf}->{geoip2_default_db_path}}) {
+-        if (-f $_) {
+-          $country_db_path = $_;
+-          last;
+-        }
+-      }
+-    }
+-    if (-f $country_db_path) {
+-      eval {
+-        require GeoIP2::Database::Reader;
+-        $db = GeoIP2::Database::Reader->new(
+-          file => $country_db_path,
+-          locales => [ 'en' ]
+-        );
+-        die "unknown error" unless $db;
+-        $db_info = sub {
+-          my $m = $db->metadata();
+-          return "GeoIP2 ".$m->description()->{en}." / ".localtime($m->build_epoch());
+-        };
+-        1;
+-      } or do {
+-        # Fallback to IP::Country::Fast
+-        $@ =~ s/\s+Trace begun.*//s;
+-        dbg("metadata: RelayCountry: GeoIP2: ${country_db_path} load failed: $@, trying IP::Country::Fast as fallback");
+-        $country_db_type = "Fast";
 -      }
-   } or do {
-     # Fallback to IP::Country::Fast
-     dbg("metadata: RelayCountry: GeoIP.dat not found, IP::Country::Fast enabled as fallback");
-     $conf_country_db_type = "Fast";
-   }
-  } elsif ( $conf_country_db_type eq "GeoIP2" ) {
-     if ( -f $conf_country_db_path ) {
-       eval {
-         require GeoIP2::Database::Reader;
-         $db = GeoIP2::Database::Reader->new(
-            file => $conf_country_db_path,
-            locales	=> [ 'en' ]
-	   );
-         die "${conf_country_db_path} not found" unless $db;
-         $db_info = sub { return "GeoIP2 " . ($db->metadata()->description()->{en} || '?') };
-         1;
-       } or do {
-         # Fallback to IP::Country::Fast
-         dbg("metadata: RelayCountry: ${conf_country_db_path} not found, IP::Country::Fast enabled as fallback");
-         $conf_country_db_type = "Fast";
-       }
-     } else {
-         # Fallback to IP::Country::Fast
-         dbg("metadata: RelayCountry: ${conf_country_db_path} not found, IP::Country::Fast enabled as fallback");
-         $conf_country_db_type = "Fast";
-     }
-  } elsif ( $conf_country_db_type eq "DB_File") {
-    if ( -f $conf_country_db_path ) {
-      require IP::Country::DB_File;
-      $db = IP::Country::DB_File->new($conf_country_db_path);
-      die "Country db not found, please see build_ipcc.pl(1)" unless $db;
-      $db_info = sub { return "IP::Country::DB_File ".localtime($db->db_time()); };
-      1;     
 -    } else {
 -      # Fallback to IP::Country::Fast
-      dbg("metadata: RelayCountry: ${conf_country_db_path} not found, IP::Country::Fast enabled as fallback");
-      $conf_country_db_type = "Fast";
+-      my $err = $country_db_path ?
+-        "$country_db_path not found" : "database not found from default locations";
+-      dbg("metadata: RelayCountry: GeoIP2: $err, trying IP::Country::Fast as fallback");
+-      $country_db_type = "Fast";
+-    }
+-  }
+-  elsif ($country_db_type eq "DB_File") {
+-    if (-f $country_db_path) {
+-      eval {
+-        require IP::Country::DB_File;
+-        $db = IP::Country::DB_File->new($country_db_path);
+-        die "unknown error" unless $db;
+-        $db_info = sub { return "IP::Country::DB_File ".localtime($db->db_time()); };
+-        1;
+-      } or do {
+-        # Fallback to IP::Country::Fast
+-        dbg("metadata: RelayCountry: DB_File: ${country_db_path} load failed: $@, trying IP::Country::Fast as fallback");
+-        $country_db_type = "Fast";
+-      }
+-    } else {
+-      # Fallback to IP::Country::Fast
+-      dbg("metadata: RelayCountry: DB_File: ${country_db_path} not found, trying IP::Country::Fast as fallback");
+-      $country_db_type = "Fast";
 -    }
 -  } 
-  if( $conf_country_db_type eq "Fast") {
+-
+-  if ($country_db_type eq "Fast") {
 -    my $eval_stat = $@ ne '' ? $@ : "errno=$!";  chomp $eval_stat;
-    # Try IP::Country::Fast as backup
 -    eval {
 -      require IP::Country::Fast;
 -      $db = IP::Country::Fast->new();
@ -241,79 +355,80 @@ index 2e172f3..0000000
 -      my $eval_stat = $@ ne '' ? $@ : "errno=$!";  chomp $eval_stat;
 -      dbg("metadata: RelayCountry: failed to load 'IP::Country::Fast', skipping: $eval_stat");
 -      return 1;
-    };
-  };
+-    }
+-  }
 -
-  return 1 unless $db;
+-  if (!$db) {
+-    return 1;
+-  }
 -
 -  dbg("metadata: RelayCountry: Using database: ".$db_info->());
 -  my $msg = $opts->{msg};
 -
-  my $countries = '';
-  my $IP_PRIVATE = IP_PRIVATE;
-  my $IPV4_ADDRESS = IPV4_ADDRESS;
+-  my @cc_untrusted;
 -  foreach my $relay (@{$msg->{metadata}->{relays_untrusted}}) {
 -    my $ip = $relay->{ip};
-    # Private IPs will always be returned as '**'
-    if ( $conf_country_db_type eq "GeoIP" ) {
-	  if ( $ip !~ /^$IPV4_ADDRESS$/o ) {
-	    if ( defined $dbv6 ) {
-	    	$geo = $dbv6->country_code_by_addr_v6($ip) || "XX";
-	    } else {
-		$geo = "XX";
-	    }
-	  } else {
-	    $geo = $db->country_code_by_addr($ip) || "XX";
-	  }
-    } elsif ($conf_country_db_type eq "GeoIP2" ) {
-      if ( $ip !~ /^$IP_PRIVATE$/o ) {
-        my $country = $db->country( ip => $ip );
-        my $country_rec = $country->country();
-        $geo = $country_rec->iso_code() || "XX";
-        $cc = $ip =~ /^$IP_PRIVATE$/o ? '**' : $geo;
-      } else {
-        $cc = '**';
-      }
-    } elsif ( $conf_country_db_type eq "DB_File" ) {
-      if ( $ip !~ /^$IPV4_ADDRESS$/o ) {
-        $geo = $db->inet6_atocc($ip) || "XX";
-      } else {
-        $geo = $db->inet_atocc($ip) || "XX";
-      }		        
-    } elsif ( $conf_country_db_type eq "Fast" ) {
-        $geo = $db->inet_atocc($ip) || "XX";
-    }
-    $cc = $ip =~ /^$IP_PRIVATE$/o ? '**' : $geo;
-    $countries .= $cc." ";
+-    my $cc = $self->get_country($ip, $db, $dbv6, $country_db_type);
+-    push @cc_untrusted, $cc;
 -  }
 -
-  chop $countries;
-  $msg->put_metadata("X-Relay-Countries", $countries);
-  dbg("metadata: X-Relay-Countries: $countries");
+-  my @cc_external;
+-  foreach my $relay (@{$msg->{metadata}->{relays_external}}) {
+-    my $ip = $relay->{ip};
+-    my $cc = $self->get_country($ip, $db, $dbv6, $country_db_type);
+-    push @cc_external, $cc;
+-  }
 -
-  return 1;
-}
+-  my @cc_auth;
+-  my $found_auth;
+-  foreach my $relay (@{$msg->{metadata}->{relays_trusted}}) {
+-    if ($relay->{auth}) {
+-      $found_auth = 1;
+-    }
+-    if ($found_auth) {
+-      my $ip = $relay->{ip};
+-      my $cc = $self->get_country($ip, $db, $dbv6, $country_db_type);
+-      push @cc_auth, $cc;
+-    }
+-  }
 -
-sub parsed_metadata {
-  my ($self, $opts) = @_;
+-  my @cc_all;
+-  foreach my $relay (@{$msg->{metadata}->{relays_internal}}, @{$msg->{metadata}->{relays_external}}) {
+-    my $ip = $relay->{ip};
+-    my $cc = $self->get_country($ip, $db, $dbv6, $country_db_type);
+-    push @cc_all, $cc;
+-  }
 -
-  return 1 unless $db;
+-  my $ccstr = join(' ', @cc_untrusted);
+-  $msg->put_metadata("X-Relay-Countries", $ccstr);
+-  dbg("metadata: X-Relay-Countries: $ccstr");
+-  $pms->set_tag("RELAYCOUNTRY", @cc_untrusted == 1 ? $cc_untrusted[0] : \@cc_untrusted);
+-
+-  $ccstr = join(' ', @cc_external);
+-  $msg->put_metadata("X-Relay-Countries-External", $ccstr);
+-  dbg("metadata: X-Relay-Countries-External: $ccstr");
+-  $pms->set_tag("RELAYCOUNTRYEXT", @cc_external == 1 ? $cc_external[0] : \@cc_external);
+-
+-  $ccstr = join(' ', @cc_auth);
+-  $msg->put_metadata("X-Relay-Countries-Auth", $ccstr);
+-  dbg("metadata: X-Relay-Countries-Auth: $ccstr");
+-  $pms->set_tag("RELAYCOUNTRYAUTH", @cc_auth == 1 ? $cc_auth[0] : \@cc_auth);
+-
+-  $ccstr = join(' ', @cc_all);
+-  $msg->put_metadata("X-Relay-Countries-All", $ccstr);
+-  dbg("metadata: X-Relay-Countries-All: $ccstr");
+-  $pms->set_tag("RELAYCOUNTRYALL", @cc_all == 1 ? $cc_all[0] : \@cc_all);
 -
-  my $countries =
-    $opts->{permsgstatus}->get_message->get_metadata('X-Relay-Countries');
-  my @c_list = split(' ', $countries);
-  $opts->{permsgstatus}->set_tag("RELAYCOUNTRY",
-                                 @c_list == 1 ? $c_list[0] : \@c_list);
 -  return 1;
 -}
 -
 -1;
 diff --git a/lib/Mail/SpamAssassin/Plugin/URILocalBL.pm b/lib/Mail/SpamAssassin/Plugin/URILocalBL.pm
 deleted file mode 100644
-index e190fab..0000000
+index 4fbbcb7..0000000
 --- a/lib/Mail/SpamAssassin/Plugin/URILocalBL.pm
 +++ /dev/null
-@@ -1,658 +0,0 @@
+@@ -1,705 +0,0 @@
 -# <@LICENSE>
 -# Licensed to the Apache Software Foundation (ASF) under one or more
 -# contributor license agreements.  See the NOTICE file distributed with
@ -417,9 +532,9 @@ index e190fab..0000000
 -package Mail::SpamAssassin::Plugin::URILocalBL;
 -use Mail::SpamAssassin::Plugin;
 -use Mail::SpamAssassin::Logger;
+-use Mail::SpamAssassin::Constants qw(:ip);
 -use Mail::SpamAssassin::Util qw(untaint_var);
 -
-use Net::CIDR::Lite;
 -use Socket;
 -
 -use strict;
@ -432,6 +547,7 @@ index e190fab..0000000
 -
 -use constant HAS_GEOIP => eval { require Geo::IP; };
 -use constant HAS_GEOIP2 => eval { require GeoIP2::Database::Reader; };
+-use constant HAS_CIDR => eval { require Net::CIDR::Lite; };
 -
 -# constructor
 -sub new {
@ -463,6 +579,7 @@ index e190fab..0000000
 -
 -  push (@cmds, {
 -    setting => 'uri_block_cc',
+-    type => $Mail::SpamAssassin::Conf::CONF_TYPE_HASH_KEY_VALUE,
 -    is_priv => 1,
 -    code => sub {
 -      my ($self, $key, $value, $line) = @_;
@ -504,6 +621,7 @@ index e190fab..0000000
 -
 -  push (@cmds, {
 -    setting => 'uri_block_cont',
+-    type => $Mail::SpamAssassin::Conf::CONF_TYPE_HASH_KEY_VALUE,
 -    is_priv => 1,
 -    code => sub {
 -      my ($self, $key, $value, $line) = @_;
@ -545,6 +663,7 @@ index e190fab..0000000
 -  
 -  push (@cmds, {
 -    setting => 'uri_block_isp',
+-    type => $Mail::SpamAssassin::Conf::CONF_TYPE_HASH_KEY_VALUE,
 -    is_priv => 1,
 -    code => sub {
 -      my ($self, $key, $value, $line) = @_;
@ -584,10 +703,16 @@ index e190fab..0000000
 -
 -  push (@cmds, {
 -    setting => 'uri_block_cidr',
+-    type => $Mail::SpamAssassin::Conf::CONF_TYPE_HASH_KEY_VALUE,
 -    is_priv => 1,
 -    code => sub {
 -      my ($self, $key, $value, $line) = @_;
 -
+-      if (!HAS_CIDR) {
+-        warn "config: uri_block_cidr not supported, required module Net::CIDR::Lite missing\n";
+-        return $Mail::SpamAssassin::Conf::INVALID_VALUE;
+-      }
+-
 -      if ($value !~ /^(\S+)\s+(.+)$/) {
 -	return $Mail::SpamAssassin::Conf::INVALID_VALUE;
 -      }
@ -629,6 +754,7 @@ index e190fab..0000000
 -
 -  push (@cmds, {
 -    setting => 'uri_block_exclude',
+-    type => $Mail::SpamAssassin::Conf::CONF_TYPE_HASH_KEY_VALUE,
 -    is_priv => 1,
 -    code => sub {
 -      my ($self, $key, $value, $line) = @_;
@ -673,7 +799,7 @@ index e190fab..0000000
 -=item uri_country_db_path STRING
 -
 -This option tells SpamAssassin where to find the MaxMind country GeoIP2 
-database.
+-database. Country or City database are both supported.
 -
 -=back
 -
@ -745,6 +871,7 @@ index e190fab..0000000
 -  # If country_db_path is set I am using GeoIP2 api
 -  if ( HAS_GEOIP2 and ( ( defined $conf_country_db_path ) or ( defined $conf_country_db_isp_path ) ) ) {
 -
+-   eval {
 -    $self->{geoip} = GeoIP2::Database::Reader->new(
 -  		file	=> $conf_country_db_path,
 -  		locales	=> [ 'en' ]
@ -762,6 +889,13 @@ index e190fab..0000000
 -      warn "$conf_country_db_isp_path not found" unless $self->{geoisp};
 -    }
 -    $self->{use_geoip2} = 1;
+-   };
+-   if ($@ || !($self->{geoip} || $self->{geoisp})) {
+-     $@ =~ s/\s+Trace begun.*//s;
+-     warn "URILocalBL: GeoIP2 load failed: $@\n";
+-     return 0;
+-   }
+-
 -  } elsif ( HAS_GEOIP ) {
 -    BEGIN {
 -      Geo::IP->import( qw(GEOIP_MEMORY_CACHE GEOIP_CHECK_CACHE GEOIP_ISP_EDITION) );
@ -775,20 +909,32 @@ index e190fab..0000000
 -
 -    # this code burps an ugly message if it fails, but that's redirected elsewhere
 -    my $flags = 0;
-    eval '$flags = Geo::IP::GEOIP_SILENCE' if ($gip_wanted >= $gip_have);
+-    my $flag_isp = 0;
+-    my $flag_silent = 0;
+-    eval '$flags = GEOIP_MEMORY_CACHE | GEOIP_CHECK_CACHE' if ($gip_wanted >= $gip_have);
+-    eval '$flag_silent = Geo::IP::GEOIP_SILENCE' if ($gip_wanted >= $gip_have);
+-    eval '$flag_isp = GEOIP_ISP_EDITION' if ($gip_wanted >= $gip_have);
 -
-    if ($flags && $gic_wanted >= $gic_have) {
-      $self->{geoip} = Geo::IP->new(GEOIP_MEMORY_CACHE | GEOIP_CHECK_CACHE | $flags);
-      $self->{geoisp} = Geo::IP->open_type(GEOIP_ISP_EDITION, GEOIP_MEMORY_CACHE | GEOIP_CHECK_CACHE | $flags);
+-   eval {
+-    if ($flag_silent && $gic_wanted >= $gic_have) {
+-      $self->{geoip} = Geo::IP->new($flags | $flag_silent);
+-      $self->{geoisp} = Geo::IP->open_type($flag_isp | $flag_silent | $flags);
 -    } else {
 -      open(OLDERR, ">&STDERR");
 -      open(STDERR, ">", "/dev/null");
-      $self->{geoip} = Geo::IP->new(GEOIP_MEMORY_CACHE | GEOIP_CHECK_CACHE);
-      $self->{geoisp} = Geo::IP->open_type(GEOIP_ISP_EDITION, GEOIP_MEMORY_CACHE | GEOIP_CHECK_CACHE);
+-      $self->{geoip} = Geo::IP->new($flags);
+-      $self->{geoisp} = Geo::IP->open_type($flag_isp);
 -      open(STDERR, ">&OLDERR");
 -      close(OLDERR);
 -    }
-  $db_info = sub { return "Geo::IP " . ($self->{geoip}->database_info || '?') };
+-   };
+-    if ($@ || !($self->{geoip} || $self->{geoisp})) {
+-      $@ =~ s/\s+Trace begun.*//s;
+-      warn "URILocalBL: GeoIP load failed: $@\n";
+-      return 0;
+-    }
+-
+-    $db_info = sub { return "Geo::IP " . ($self->{geoip}->database_info || '?') };
 -  } else {
 -    dbg("No GeoIP module available");
 -    return 0;
@ -800,6 +946,8 @@ index e190fab..0000000
 -
 -  my %hit_tests;
 -  my $got_hit = 0;
+-  my @addrs;
+-  my $IP_ADDRESS = IP_ADDRESS;
 -  
 -  if ( defined $self->{geoip} ) {
 -    dbg("check: uri_local_bl evaluating rule %s using database %s\n", $test, $db_info->());
@ -807,12 +955,14 @@ index e190fab..0000000
 -    dbg("check: uri_local_bl evaluating rule %s\n", $test);
 -  }
 -
+-  my $dns_available = $permsg->is_dns_available();
+-
 -  while (my ($raw, $info) = each %uri_detail) {
 -
 -    next unless $info->{hosts};
 -
 -    # look for W3 links only
-    next unless (defined $info->{types}->{a});
+-    next unless (defined $info->{types}->{a} || defined $info->{types}->{parsed});
 -
 -    while (my($host, $domain) = each %{$info->{hosts}}) {
 -
@ -822,11 +972,18 @@ index e190fab..0000000
 -        next;
 -      }
 -
-      # this would be best cached from prior lookups
-      my @addrs = gethostbyname($host);
-
-      # convert to string values address list
-      @addrs = map { inet_ntoa($_); } @addrs[4..$#addrs];
+-      if($host !~ /^$IP_ADDRESS$/) {
+-       if (!$dns_available) {
+-         dbg("check: uri_local_bl skipping $host, dns not available");
+-         next;
+-       }
+-       # this would be best cached from prior lookups
+-       @addrs = gethostbyname($host);
+-       # convert to string values address list
+-       @addrs = map { inet_ntoa($_); } @addrs[4..$#addrs];
+-      } else {
+-       @addrs = ($host);
+-      }
 -
 -      dbg("check: uri_local_bl %s addrs %s\n", $host, join(', ', @addrs));
 -
@ -841,7 +998,12 @@ index e190fab..0000000
 -          dbg("check: uri_local_bl countries %s\n", join(' ', sort keys %{$rule->{countries}}));
 -
 -          if ( $self->{use_geoip2} == 1 ) {
-            my $country = $self->{geoip}->country( ip => $ip );
+-            my $country;
+-            if (index($self->{geoip}->metadata()->description()->{en}, 'City') != -1) {
+-              $country = $self->{geoip}->city( ip => $ip );
+-            } else {
+-              $country = $self->{geoip}->country( ip => $ip );
+-            }
 -            my $country_rec = $country->country();
 -            $cc = $country_rec->iso_code();
 -          } else {
@ -973,14 +1135,22 @@ index e190fab..0000000
 -1;
 -
 diff --git a/lib/Mail/SpamAssassin/Util/DependencyInfo.pm b/lib/Mail/SpamAssassin/Util/DependencyInfo.pm
-index 8127595..17aacbc 100644
+index 2f8aa65..eca12e1 100644
 --- a/lib/Mail/SpamAssassin/Util/DependencyInfo.pm
 +++ b/lib/Mail/SpamAssassin/Util/DependencyInfo.pm
-@@ -124,30 +124,6 @@ our @OPTIONAL_MODULES = (
+@@ -124,46 +124,6 @@ our @OPTIONAL_MODULES = (
   desc => 'Used to check DNS Sender Policy Framework (SPF) records to fight email
   address forgery and make it easier to identify spams.',
 },
 -{
+-  module => 'GeoIP2::Database::Reader',
+-  version => 0,
+-  desc => 'Used by the RelayCountry plugin (not enabled by default) to
+-  determine the domain country codes of each relay in the path of an email. 
+-  Also used by the URILocalBL plugin (not enabled by default) to provide ISP
+-  and Country code based filtering.',
+-},
+-{
 -  module => 'Geo::IP',
 -  version => 0,
 -  desc => 'Used by the RelayCountry plugin (not enabled by default) to determine
@ -988,6 +1158,14 @@ index 8127595..17aacbc 100644
 -  the URILocalBL plugin to provide ISP and Country code based filtering.',
 -},
 -{
+-  module => 'IP::Country::DB_File',
+-  version => 0,
+-  desc => 'Used by the RelayCountry plugin (not enabled by default) to
+-  determine the domain country codes of each relay in the path of an email. 
+-  Also used by the URILocalBL plugin (not enabled by default) to provide
+-  Country code based filtering.',
+-},
+-{
 -  module => 'Net::CIDR::Lite',
 -  version => 0,
 -  desc => 'Used by the URILocalBL plugin to process IP address ranges.',
@ -1008,7 +1186,7 @@ index 8127595..17aacbc 100644
 # module => 'Net::Ident',
 # version => 0,
 diff --git a/rules/init.pre b/rules/init.pre
-index a330bad..6313a03 100644
+index f9ee06a..0539b29 100644
 --- a/rules/init.pre
 +++ b/rules/init.pre
@@ -14,13 +14,6 @@
@ -1041,10 +1219,10 @@ index 489dd4c..7ff8e84 100644
 # PDFInfo - Use several methods to detect a PDF file's ham/spam traits
 # loadplugin Mail::SpamAssassin::Plugin::PDFInfo
 diff --git a/spamassassin.raw b/spamassassin.raw
-index 9d03d4f..443e154 100755
+index 4b52ef9..959297a 100755
 --- a/spamassassin.raw
 +++ b/spamassassin.raw
-@@ -881,9 +881,6 @@ from the SpamAssassin distribution.
+@@ -872,9 +872,6 @@ from the SpamAssassin distribution.
     Mail::SpamAssassin::Plugin::Hashcash
 	perform hashcash verification tests
 
@ -1054,6 +1232,3 @@ index 9d03d4f..443e154 100755
     Mail::SpamAssassin::Plugin::SPF
 	perform SPF verification tests
 
-- 
-2.14.4
-
--- a/SOURCES/spamassassin-3.4.2-fix-CVE-2018-11805.patch
+++ b/SOURCES/spamassassin-3.4.2-fix-CVE-2018-11805.patch
--- a/SOURCES/spamassassin-3.4.2-fix-CVE-2019-12420.patch
+++ b/SOURCES/spamassassin-3.4.2-fix-CVE-2019-12420.patch
@ -1,25 +0,0 @@
-diff -urp Mail-SpamAssassin-3.4.2/lib/Mail/SpamAssassin/Message.pm Mail-SpamAssassin-3.4.2.new/lib/Mail/SpamAssassin/Message.pm
--- Mail-SpamAssassin-3.4.2/lib/Mail/SpamAssassin/Message.pm	2018-09-14 03:27:51.000000000 +0200
-+++ Mail-SpamAssassin-3.4.2.new/lib/Mail/SpamAssassin/Message.pm	2020-04-09 15:17:34.300986337 +0200
-@@ -876,6 +876,7 @@ sub _parse_multipart {
-   my $header;
-   my $part_array;
-   my $found_end_boundary;
-+  my $partcnt = 0;
- 
-   my $line_count = @{$body};
-   foreach ( @{$body} ) {
-@@ -948,6 +949,13 @@ sub _parse_multipart {
- 	}
-       }
- 
-+      # Maximum parts to process
-+      if (++$partcnt == 1000) {
-+        dbg("message: mimepart limit exceeded, stopping parsing");
-+        $self->{'mimepart_limit_exceeded'} = 1;
-+        return;
-+      }
-+
-       # make sure we start with a new clean node
-       $in_body  = 0;
-       $part_msg = Mail::SpamAssassin::Message::Node->new({ normalize=>$self->{normalize} });
--- a/SOURCES/spamassassin-3.4.2-fix-CVE-2020-1930.patch
+++ b/SOURCES/spamassassin-3.4.2-fix-CVE-2020-1930.patch
@ -1,41 +0,0 @@
-diff --git a/lib/Mail/SpamAssassin/Plugin/OneLineBodyRuleType.pm b/lib/Mail/SpamAssassin/Plugin/OneLineBodyRuleType.pm
-index 2d931ea..7b6244e 100644
--- a/lib/Mail/SpamAssassin/Plugin/OneLineBodyRuleType.pm
-+++ b/lib/Mail/SpamAssassin/Plugin/OneLineBodyRuleType.pm
-@@ -89,17 +89,19 @@ sub do_one_line_body_tests {
-     loop_body => sub
-   {
-     my ($self, $pms, $conf, $rulename, $pat, %opts) = @_;
-    $pat = untaint_var($pat);
-    my $sub;
-+    my $sub = '
-+      my ($self, $line) = @_;
-+      my $qrptr = $self->{main}->{conf}->{test_qrs};
-+    ';
- 
-     if (($conf->{tflags}->{$rulename}||'') =~ /\bmultiple\b/)
-     {
-       # avoid [perl #86784] bug (fixed in 5.13.x), access the arg through ref
-      $sub = '
-      my $lref = \$_[1];
-+      $sub .= '
-+      my $lref = \$line;
-       pos $$lref = 0;
-       '.$self->hash_line_for_rule($pms, $rulename).'
-      while ($$lref =~ '.$pat.'g) {
-+      while ($$lref =~ /$qrptr->{q{'.$rulename.'}}/go) {
-         my $self = $_[0];
-         $self->got_hit(q{'.$rulename.'}, "BODY: ", ruletype => "one_line_body");
-         '. $self->hit_rule_plugin_code($pms, $rulename, "one_line_body",
-@@ -108,9 +110,9 @@ sub do_one_line_body_tests {
-       ';
- 
-     } else {
-      $sub = '
-+      $sub .= '
-       '.$self->hash_line_for_rule($pms, $rulename).'
-      if ($_[1] =~ '.$pat.') {
-+      if ($line =~ /$qrptr->{q{'.$rulename.'}}/o) {
-         my $self = $_[0];
-         $self->got_hit(q{'.$rulename.'}, "BODY: ", ruletype => "one_line_body");
-         '. $self->hit_rule_plugin_code($pms, $rulename, "one_line_body", "return 1") . '
--- a/SOURCES/spamassassin-3.4.2-fix-CVE-2020-1931.patch
+++ b/SOURCES/spamassassin-3.4.2-fix-CVE-2020-1931.patch
@ -1,44 +0,0 @@
-diff -urp Mail-SpamAssassin-3.4.2.old/lib/Mail/SpamAssassin/Conf.pm Mail-SpamAssassin-3.4.2/lib/Mail/SpamAssassin/Conf.pm
--- Mail-SpamAssassin-3.4.2.old/lib/Mail/SpamAssassin/Conf.pm	2020-06-15 19:10:21.700917582 +0200
-+++ Mail-SpamAssassin-3.4.2/lib/Mail/SpamAssassin/Conf.pm	2020-06-15 19:07:59.045897164 +0200
-@@ -3414,6 +3414,20 @@ internally, and should not be used.
-     setting => 'priority',
-     is_priv => 1,
-     type => $CONF_TYPE_HASH_KEY_VALUE,
-+    code => sub {
-+      my ($self, $key, $value, $line) = @_;
-+      my ($rulename, $priority) = split(/\s+/, $value, 2);
-+      unless (defined $priority) {
-+        return $MISSING_REQUIRED_VALUE;
-+      }
-+      unless ($rulename =~ IS_RULENAME) {
-+        return $INVALID_VALUE;
-+      }
-+      unless ($priority =~ /^-?\d+$/) {
-+        return $INVALID_VALUE;
-+      }
-+      $self->{priority}->{$rulename} = $priority;
-+    }
-   });
- 
- =back
-diff -urp Mail-SpamAssassin-3.4.2.old/lib/Mail/SpamAssassin/Constants.pm Mail-SpamAssassin-3.4.2/lib/Mail/SpamAssassin/Constants.pm
--- Mail-SpamAssassin-3.4.2.old/lib/Mail/SpamAssassin/Constants.pm	2020-06-15 19:10:21.701917596 +0200
-+++ Mail-SpamAssassin-3.4.2/lib/Mail/SpamAssassin/Constants.pm	2020-06-15 19:07:59.045897164 +0200
-@@ -43,7 +43,7 @@ BEGIN {
- 	HARVEST_DNSBL_PRIORITY MBX_SEPARATOR
- 	MAX_BODY_LINE_LENGTH MAX_HEADER_KEY_LENGTH MAX_HEADER_VALUE_LENGTH
- 	MAX_HEADER_LENGTH ARITH_EXPRESSION_LEXER AI_TIME_UNKNOWN
-	CHARSETS_LIKELY_TO_FP_AS_CAPS MAX_URI_LENGTH RULENAME_RE
-+	CHARSETS_LIKELY_TO_FP_AS_CAPS MAX_URI_LENGTH RULENAME_RE IS_RULENAME
-   );
- 
-   %EXPORT_TAGS = (
-@@ -404,5 +404,7 @@ use constant CHARSETS_LIKELY_TO_FP_AS_CA
- 
- # Allowed rulename format
- use constant RULENAME_RE => qr([_a-zA-Z][_a-zA-Z0-9]{0,127});
-+# Exact match
-+use constant IS_RULENAME => qr/^${\(RULENAME_RE)}$/;
- 
- 1;
--- a/SOURCES/spamassassin-3.4.2-fix-file-handle-leaks.patch
+++ b/SOURCES/spamassassin-3.4.2-fix-file-handle-leaks.patch
@ -1,18 +0,0 @@
--- a/spamc/spamc.c	2018/10/02 16:54:17	1842644
-+++ b/spamc/spamc.c	2018/10/02 17:40:43	1842645
-@@ -616,6 +616,7 @@
- 	        fprintf(stderr,"Exceeded max line size (%d) in %s\n",
-                         CONFIG_MAX_LINE_SIZE-2, config_file);
- 	    }
-+	    fclose(config);
- 	    return EX_CONFIG;
- 	}
- 
-@@ -629,6 +630,7 @@
-             if (*combo_argc >= COMBO_ARGV_SIZE) {
- 	        fprintf(stderr,"Exceeded max number of arguments (%d) in %s\n",
- 	                COMBO_ARGV_SIZE, config_file);
-+		fclose(config);
- 	        return EX_CONFIG;
-             }
-             combo_argv[*combo_argc] = strdup(tok);
--- a/SOURCES/spamassassin-3.4.2-fix-rawbody-rules-documentation.patch
+++ b/SOURCES/spamassassin-3.4.2-fix-rawbody-rules-documentation.patch
@ -1,63 +0,0 @@
--- a/lib/Mail/SpamAssassin/Conf.pm	2019/08/01 12:28:38	1864149
-+++ b/lib/Mail/SpamAssassin/Conf.pm	2019/08/08 08:11:36	1864686
-@@ -3066,12 +3066,19 @@
- as per the header tests, C<#> must be escaped (C<\#>) or else it is considered
- the beginning of a comment.
- 
-The 'body' in this case is the textual parts of the message body;
-any non-text MIME parts are stripped, and the message decoded from
-Quoted-Printable or Base-64-encoded format if necessary.  The message
-Subject header is considered part of the body and becomes the first
-paragraph when running the rules.  All HTML tags and line breaks will
-be removed before matching.
-+The 'body' in this case is the textual parts of the message body; any
-+non-text MIME parts are stripped, and the message decoded from
-+Quoted-Printable or Base-64-encoded format if necessary.  Parts declared as
-+text/html will be rendered from HTML to text.
-+
-+All body paragraphs (double-newline-separated blocks text) are turned into a
-+line breaks removed, whitespace normalized single line.  Any lines longer
-+than 2kB are split into shorter separate lines (from a boundary when
-+possible), this may unexpectedly prevent pattern from matching.  Patterns
-+are matched independently against each of these lines.
-+
-+Note that the message Subject header is considered part of the body and
-+becomes the first line when running the rules.
- 
- =item body SYMBOLIC_TEST_NAME eval:name_of_eval_method([args])
- 
-@@ -3152,6 +3159,10 @@
- tags and line breaks will still be present.  Multiline expressions will
- need to be used to match strings that are broken by line breaks.
- 
-+Note that the text is split into 2-4kB chunks (from a word boundary when
-+possible), this may unexpectedly prevent pattern from matching.  Patterns
-+are matched independently against each of these chunks.
-+
- =item rawbody SYMBOLIC_TEST_NAME eval:name_of_eval_method([args])
- 
- Define a raw-body eval test.  See above.
--- a/lib/Mail/SpamAssassin/PerMsgStatus.pm	2019/08/03 13:55:00	1864336
-+++ b/lib/Mail/SpamAssassin/PerMsgStatus.pm	2019/08/08 08:11:36	1864686
-@@ -1769,8 +1769,10 @@
- Returns the message body, with B<base64> or B<quoted-printable> encodings
- decoded, and non-text parts or non-inline attachments stripped.
- 
-It is returned as an array of strings, with each string representing
-one newline-separated line of the body.
-+This is the same result text as used in 'rawbody' rules.
-+
-+It is returned as an array of strings, with each string being a 2-4kB chunk
-+of the body, split from boundaries if possible.
- 
- =cut
- 
-@@ -1784,6 +1786,8 @@
- get_decoded_body_text_array()), with HTML rendered, and with whitespace
- normalized.
- 
-+This is the same result text as used in 'body' rules.
-+
- It will always render text/html, and will use a heuristic to determine if other
- text/* parts should be considered text/html.
- 
--- a/SOURCES/spamassassin-3.4.2-fix-use-after-free.patch
+++ b/SOURCES/spamassassin-3.4.2-fix-use-after-free.patch
@ -1,10 +0,0 @@
--- a/spamc/getopt.c	2018/09/20 06:52:49	1841432
-+++ b/spamc/getopt.c	2018/09/20 07:18:53	1841433
-@@ -274,7 +274,6 @@
-             } else if(longopts[i].has_arg == optional_argument) {
-                if(((spamc_optind < argc) && (argv[spamc_optind]) && (argv[spamc_optind][0] != '-')) || 
-                      (opt != NULL)) {
-		  free(opt);
-                   if(opt != NULL) {
-                      spamc_optarg = opt;
-                   } else {
--- a/SOURCES/spamassassin-cert_update.patch
+++ b/SOURCES/spamassassin-cert_update.patch
@ -0,0 +1,108 @@
+commit be7b4d87d84f15446652569cd218db1ced7ae92a
+Author: Henrik Krohns <hege@apache.org>
+Date:   Fri Apr 10 07:47:37 2020 +0000
+
+    Bug 7807 - t/spamd_ssl.t fails due to small key size
+    
+    
+    git-svn-id: https://svn.apache.org/repos/asf/spamassassin/trunk@1876347 13f79535-47bb-0310-9956-ffa450edef68
+
+diff --git a/t/data/etc/testhost.cert b/t/data/etc/testhost.cert
+index 86cff9aae..dca7c5a16 100644
+--- a/t/data/etc/testhost.cert
+++ b/t/data/etc/testhost.cert
+@@ -1,23 +1,25 @@
+ -----BEGIN CERTIFICATE-----
+-MIIDyjCCAzOgAwIBAgIBADANBgkqhkiG9w0BAQUFADCBpTELMAkGA1UEBhMCU0Ex
+-CzAJBgNVBAgTAlNBMRowGAYDVQQHExFTcGFtQXNzYXNzaW4gQ2l0eTEVMBMGA1UE
+-ChMMU3BhbUFzc2Fzc2luMRkwFwYDVQQLExBGT1IgVEVTVElORyBPTkxZMRIwEAYD
+-VQQDEwlsb2NhbGhvc3QxJzAlBgkqhkiG9w0BCQEWGHNwYW1hc3Nhc3NpbkBleGFt
+-cGxlLmNvbTAeFw0wNDA3MDkyMTE4NDdaFw0yNDA3MTQyMTE4NDdaMIGlMQswCQYD
+-VQQGEwJTQTELMAkGA1UECBMCU0ExGjAYBgNVBAcTEVNwYW1Bc3Nhc3NpbiBDaXR5
+-MRUwEwYDVQQKEwxTcGFtQXNzYXNzaW4xGTAXBgNVBAsTEEZPUiBURVNUSU5HIE9O
+-TFkxEjAQBgNVBAMTCWxvY2FsaG9zdDEnMCUGCSqGSIb3DQEJARYYc3BhbWFzc2Fz
+-c2luQGV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1l6To
+-Fxkyc2glblqZYFq/BWFSMKh9LsouTVowuxC7yQkEENBjeQ4paHUFsi49s0RnabsA
+-D1c56O8BBT0C89CMiCubRbv/KyHMDut5Nt0brWKS+VRWHgN9T5eYOy3wKPwbc7bm
+-sPdgt5bOCS78F0luL5T6DPcf5mgE7XAv8qp+mwIDAQABo4IBBjCCAQIwHQYDVR0O
+-BBYEFGJWfa4QHDeC9Wn3UNLIaf7prjmUMIHSBgNVHSMEgcowgceAFGJWfa4QHDeC
+-9Wn3UNLIaf7prjmUoYGrpIGoMIGlMQswCQYDVQQGEwJTQTELMAkGA1UECBMCU0Ex
+-GjAYBgNVBAcTEVNwYW1Bc3Nhc3NpbiBDaXR5MRUwEwYDVQQKEwxTcGFtQXNzYXNz
+-aW4xGTAXBgNVBAsTEEZPUiBURVNUSU5HIE9OTFkxEjAQBgNVBAMTCWxvY2FsaG9z
+-dDEnMCUGCSqGSIb3DQEJARYYc3BhbWFzc2Fzc2luQGV4YW1wbGUuY29tggEAMAwG
+-A1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADgYEAsKbOfgXZlBm1rQlM6W2Nxf5g
+-r3QA67liZjVxhIb9chvreCttoe3IkHRSM4axToeKo+x7IV6ceXnqMc5chnu2lUmH
+-2z7m3IYRYmIOaXroXZcfqX/P4HMw9NOphpEZ4yNsvKSl2n3h3bJ3ErqxMgghlTGD
+-KYC+xKTFTsPjOE53Jh8=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+ -----END CERTIFICATE-----
+diff --git a/t/data/etc/testhost.key b/t/data/etc/testhost.key
+index 018e89089..e7fc5711a 100644
+--- a/t/data/etc/testhost.key
+++ b/t/data/etc/testhost.key
+@@ -1,15 +1,28 @@
+------BEGIN RSA PRIVATE KEY-----
+-MIICXQIBAAKBgQC1l6ToFxkyc2glblqZYFq/BWFSMKh9LsouTVowuxC7yQkEENBj
+-eQ4paHUFsi49s0RnabsAD1c56O8BBT0C89CMiCubRbv/KyHMDut5Nt0brWKS+VRW
+-HgN9T5eYOy3wKPwbc7bmsPdgt5bOCS78F0luL5T6DPcf5mgE7XAv8qp+mwIDAQAB
+-AoGAXyirQvAvxQ9TCSJuGaezhhxkpnRXJtppGqBwXc75ct5jehzxht79+9cAU87O
+-ioixlNuEIgDn/bHB5TAAi9aGduwz9hsv4NpNQ89/z7tmRKq43QFpf9hFHxZ3Q4e9
+-Hmey7ZsJ3/TpqFNfhH0IkLy6fA5+iClss3b2/6BbqqL8drkCQQDb9TSAJW56LnY2
+-aRtImgEyoeg2iEgV98SuDvNNUpTYvG0pkFolFlhb49w5KCmKqOtPA+etc/K2vRJf
+-8zkfz/BnAkEA01kVZoojg/am0K184Qfotxr7+t8Rjxn4k4g6Eq7ryth/Uicffixx
+-9E9sp2aadEW+Lt5pao+BsIwxxtLhphkPrQJBALQi1KQ+A4Q8mMNmwNlshp6Yyjwe
+-0Cpth72ksM0aXJxDdIMdnTXSXvqiWbDVm2/bdxp28D21P4k4vtulrZrICPECQQDP
+-RzhQ57wrSXWThgLK5KndIy7sfWhIM81yTBHAjyOcPraoSMx/P3HHjTnf+CYVUO1U
+-JDe5FeO41dZfzCUYdM3FAkA8IXYe74FVG9VM9yzZYbZHaS17TCyztkqagIuUBfDe
+-g0frip4VCEHvh+qDk678GZ1tMJ30utuTx6JgXJ5HeuFi
+------END RSA PRIVATE KEY-----
+-----BEGIN PRIVATE KEY-----
+MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCviD+QFnHcIhht
+907faQI0P7Vp6oaFKEhhyTKvZ4VdxiOgsqm2yVzf1RQwtuxfapbaGadnkhIoEby4
+J645pyRSdx9+AnCoIcd03xBXXyCwij172EiHu36Xg+ftCzdrftCq+er3o8hpEAIh
+g7OxVPazzhxDaJVPEr0b9dNjNCuubGVPeNDC+N57NyQoNQBhgUI9y2m6pcRzPswQ
+GBxSzHff3zMyn2hYL8j72SJSL84c3QZLAa5dlmvET3SVLVoQxm2DBABz63mUJoqn
+bXwWznPeOi2GKw02ggD2gGM1HVjqjlPYKzXFoyLoiJVI3Aj3UXtZ4w0nq37DHXF1
+Ixq6Bo/dAgMBAAECggEAGrgqtMw12MR344VZxDg/1aQ9ATpp76sKGZh+1qRzcKrQ
+kY2gt+o+8POGd0PhB0U6YUi2atWZXfAVQhMIOk5vAP6RFKVacL1zlx69Zg9c8oKY
+iVmK8N5hjr7Ndw/WB87uBJi2Y6vSvetp56AcoknEo+oj8z7gO4EmuDLbUqaGX65v
+08wyrSoWYAUPDhXvOclReBITDkWuGzhd5IDv3kVmf9oizOO6gbKxh5speFKA91Yg
+WMuBbi7hWB41Nn1ycSKfAx9W7kvBhxA35G/QKupXoTPoNNw5Z08zpg2tiqGlrVFS
+xs5SagfBjxqF2I44y/xH9xv3WuYNPSsQDZANxat+AQKBgQDVbWWryhas9AyyQQdr
+uJRCpBf6Gyzd/FwUnb3370YhK/mVogAIbyT2TwTliXjPYTccvDzP9mWnmH2QVBfG
+e5NW7A3zYwCrculucdKL+PZ58PF/LuCzQUuSlZ72fhqIPHXi3Acipjk6NDLntI/4
+OF6HO1ZwNqL7tsf2bFjarOjIbQKBgQDSi7+hI6rg/8ovt9UrJYZEv5bR8wHsZRB3
+4uHvCHHkbNlvZiorAsaVO8w0EoSqT3tsxHTz6l1TskxQhznjru+/mn5QDVu4gHMh
+BFewZ+PRZKxqx61Y1zlvRSHLWM1uXxVcCrBCIC3fFb50oluiCVcI+OE7qXPgX6zN
+Iqd4XB8fMQKBgBT1nVp1iiyJ+wU2ZagqhETXIJOrP4i9U72ikBldIiH305biReaO
+I68cq3pvObID9gmYYtB5fhorW4lk+MDBOgL7Q5N3UYWEz2/NNcQROwNWqiC3VdHE
+w8stbmL+l1Rxu5H/0aORd2VD4wvmK41Q29ej+CUk+HSHyrNkiIVRHbsxAoGBALlq
+rskG8y6QtQsO9uC3fCZBH14nhrMbUcRyfwwVwM8seNQdAde86wtzjOLyx/iAZK6l
+2GUSKTxTEdf9LqLvZV20fbab/QFfxYP3Ig5Nf5jg8uJalLNfXso59Ify3X9spw/W
+reCeHCeRK5flf5MUbJyPKTN0iIK5XyGMejWJ0zKRAoGAc2lrUlT64htPj1//kcgl
+ILzQo51ujjzjOlHYanvN6ekMSfj3Q1ZCTJUp2ArVA64w7Jt16cEEEFCaP4+i9UaW
+aM9/8tho4J29QSllAyxfUIF9i5gcElTfzRhpNGMVrnV/ynyOaTXzUkk7L6FH9soq
+JS3kXA6oQN5NkW6AF/3X314=
+-----END PRIVATE KEY-----
--- a/SOURCES/spamassassin-disable_tests_for_deleted_modules.patch
+++ b/SOURCES/spamassassin-disable_tests_for_deleted_modules.patch
@ -0,0 +1,40 @@
+diff --git a/t/all_modules.t b/t/all_modules.t
+index 855395f..a976012 100755
+--- a/t/all_modules.t
+++ b/t/all_modules.t
+@@ -12,15 +12,7 @@ plan tests => 5;
+ 
+ my $plugins = '';
+ 
+-if (eval { require BSD::Resource; }) {
+-    $plugins .= "loadplugin Mail::SpamAssassin::Plugin::ResourceLimits\n"
+-}
+-if (eval { require Net::CIDR::Lite; }) {
+-    $plugins .= "loadplugin Mail::SpamAssassin::Plugin::URILocalBL\n";
+-}
+-
+ tstpre ("
+-loadplugin Mail::SpamAssassin::Plugin::RelayCountry
+ loadplugin Mail::SpamAssassin::Plugin::URIDNSBL
+ loadplugin Mail::SpamAssassin::Plugin::Hashcash
+ loadplugin Mail::SpamAssassin::Plugin::SPF
+diff --git a/t/data/01_test_rules.pre b/t/data/01_test_rules.pre
+index c4681ca..1694ddf 100644
+--- a/t/data/01_test_rules.pre
+++ b/t/data/01_test_rules.pre
+@@ -21,7 +21,6 @@ loadplugin Mail::SpamAssassin::Plugin::WLBLEval
+ loadplugin Mail::SpamAssassin::Plugin::VBounce
+ 
+ # Try to load some non-default plugins also
+-loadplugin Mail::SpamAssassin::Plugin::RelayCountry
+ loadplugin Mail::SpamAssassin::Plugin::DCC
+ loadplugin Mail::SpamAssassin::Plugin::AntiVirus
+ loadplugin Mail::SpamAssassin::Plugin::AWL
+@@ -32,7 +31,6 @@ loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
+ loadplugin Mail::SpamAssassin::Plugin::ASN
+ #loadplugin Mail::SpamAssassin::Plugin::PhishTag
+ #loadplugin Mail::SpamAssassin::Plugin::TxRep
+-loadplugin Mail::SpamAssassin::Plugin::URILocalBL
+ loadplugin Mail::SpamAssassin::Plugin::PDFInfo
+ loadplugin Mail::SpamAssassin::Plugin::HashBL
+ #loadplugin Mail::SpamAssassin::Plugin::ResourceLimits
--- a/SOURCES/spamassassin-sql92_syntax.patch
+++ b/SOURCES/spamassassin-sql92_syntax.patch
@ -0,0 +1,354 @@
+diff --git a/lib/Mail/SpamAssassin/AutoWhitelist.pm b/lib/Mail/SpamAssassin/AutoWhitelist.pm
+index 627e249..cc3c97b 100644
+--- a/lib/Mail/SpamAssassin/AutoWhitelist.pm
+++ b/lib/Mail/SpamAssassin/AutoWhitelist.pm
+@@ -128,35 +128,35 @@ sub check_address {
+   my $entry = $self->{checker}->get_addr_entry ($fulladdr, $signedby);
+   $self->{entry} = $entry;
+ 
+-  if (!$entry->{msgcount}) {
+  if (!$entry->{count}) {
+     # no entry found
+     if (defined $origip) {
+       # try upgrading a default entry (probably from "add-addr-to-foo")
+       my $noipaddr = $self->pack_addr ($addr, undef);
+       my $noipent = $self->{checker}->get_addr_entry ($noipaddr, undef);
+ 
+-      if (defined $noipent->{msgcount} && $noipent->{msgcount} > 0) {
+      if (defined $noipent->{count} && $noipent->{count} > 0) {
+ 	dbg("auto-whitelist: found entry w/o IP address for $addr: replacing with $origip");
+ 	$self->{checker}->remove_entry($noipent);
+         # Now assign proper entry the count and totscore values of the
+         # no-IP entry instead of assigning the whole value to avoid
+         # wiping out any information added to the previous entry.
+-	$entry->{msgcount} = $noipent->{msgcount};
+	$entry->{count} = $noipent->{count};
+ 	$entry->{totscore} = $noipent->{totscore};
+       }
+     }
+   }
+ 
+-  if ($entry->{msgcount} < 0 ||
+-      $entry->{msgcount} != $entry->{msgcount} ||  # test for NaN
+  if ($entry->{count} < 0 ||
+      $entry->{count} != $entry->{count} ||  # test for NaN
+       $entry->{totscore} != $entry->{totscore})
+   {
+     warn "auto-whitelist: resetting bad data for ($addr, $origip), ".
+-         "count: $entry->{msgcount}, totscore: $entry->{totscore}\n";
+-    $entry->{msgcount} = $entry->{totscore} = 0;
+         "count: $entry->{count}, totscore: $entry->{totscore}\n";
+    $entry->{count} = $entry->{totscore} = 0;
+   }
+ 
+-  return !$entry->{msgcount} ? undef : $entry->{totscore} / $entry->{msgcount};
+  return !$entry->{count} ? undef : $entry->{totscore} / $entry->{count};
+ }
+ 
+ ###########################################################################
+@@ -170,7 +170,7 @@ whitelist correction.
+ 
+ sub count {
+   my $self = shift;
+-  return $self->{entry}->{msgcount};
+  return $self->{entry}->{count};
+ }
+ 
+ 
+@@ -195,7 +195,7 @@ sub add_score {
+     return;		# don't try to add a NaN
+   }
+ 
+-  $self->{entry}->{msgcount} ||= 0;
+  $self->{entry}->{count} ||= 0;
+   $self->{checker}->add_score($self->{entry}, $score);
+ }
+ 
+diff --git a/lib/Mail/SpamAssassin/DBBasedAddrList.pm b/lib/Mail/SpamAssassin/DBBasedAddrList.pm
+index 6aaed86..a1adca3 100644
+--- a/lib/Mail/SpamAssassin/DBBasedAddrList.pm
+++ b/lib/Mail/SpamAssassin/DBBasedAddrList.pm
+@@ -125,10 +125,10 @@ sub get_addr_entry {
+ 	addr			=> $addr,
+   };
+ 
+-  $entry->{msgcount} = $self->{accum}->{$addr} || 0;
+  $entry->{count} = $self->{accum}->{$addr} || 0;
+   $entry->{totscore} = $self->{accum}->{$addr.'|totscore'} || 0;
+ 
+-  dbg("auto-whitelist: db-based $addr scores ".$entry->{msgcount}.'/'.$entry->{totscore});
+  dbg("auto-whitelist: db-based $addr scores ".$entry->{count}.'/'.$entry->{totscore});
+   return $entry;
+ }
+ 
+@@ -137,15 +137,15 @@ sub get_addr_entry {
+ sub add_score {
+     my($self, $entry, $score) = @_;
+ 
+-    $entry->{msgcount} ||= 0;
+    $entry->{count} ||= 0;
+     $entry->{addr}  ||= '';
+ 
+-    $entry->{msgcount}++;
+    $entry->{count}++;
+     $entry->{totscore} += $score;
+ 
+-    dbg("auto-whitelist: add_score: new count: ".$entry->{msgcount}.", new totscore: ".$entry->{totscore});
+    dbg("auto-whitelist: add_score: new count: ".$entry->{count}.", new totscore: ".$entry->{totscore});
+ 
+-    $self->{accum}->{$entry->{addr}} = $entry->{msgcount};
+    $self->{accum}->{$entry->{addr}} = $entry->{count};
+     $self->{accum}->{$entry->{addr}.'|totscore'} = $entry->{totscore};
+     return $entry;
+ }
+diff --git a/lib/Mail/SpamAssassin/Plugin/TxRep.pm b/lib/Mail/SpamAssassin/Plugin/TxRep.pm
+index 2ef3ddc..08b432b 100644
+--- a/lib/Mail/SpamAssassin/Plugin/TxRep.pm
+++ b/lib/Mail/SpamAssassin/Plugin/TxRep.pm
+@@ -1521,7 +1521,7 @@ sub check_reputation {
+ #--------------------------------------------------------------------------
+ 
+ ###########################################################################
+-sub count {my $self=shift;  return (defined $self->{checker})? $self->{entry}->{msgcount}    : undef;}
+sub count {my $self=shift;  return (defined $self->{checker})? $self->{entry}->{count}    : undef;}
+ sub total {my $self=shift;  return (defined $self->{checker})? $self->{entry}->{totscore} : undef;}
+ ###########################################################################
+ 
+@@ -1538,11 +1538,11 @@ sub get_sender {
+   $self->{entry} = $entry;
+   $origip        = $origip || 'none';
+ 
+-  if ($entry->{msgcount}<0 || $entry->{msgcount}=~/^(nan|)$/ || $entry->{totscore}=~/^(nan|)$/) {
+-    warn "TxRep: resetting bad data for ($addr, $origip), count: $entry->{msgcount}, totscore: $entry->{totscore}\n";
+-    $self->{entry}->{msgcount} = $self->{entry}->{totscore} = 0;
+  if ($entry->{count}<0 || $entry->{count}=~/^(nan|)$/ || $entry->{totscore}=~/^(nan|)$/) {
+    warn "TxRep: resetting bad data for ($addr, $origip), count: $entry->{count}, totscore: $entry->{totscore}\n";
+    $self->{entry}->{count} = $self->{entry}->{totscore} = 0;
+   }
+-  return $self->{entry}->{msgcount};
+  return $self->{entry}->{count};
+ }
+ 
+ 
+@@ -1557,7 +1557,7 @@ sub add_score {
+     warn "TxRep: attempt to add a $score to TxRep entry ignored\n";
+     return;                                       # don't try to add a NaN
+   }
+-  $self->{entry}->{msgcount} ||= 0;
+  $self->{entry}->{count} ||= 0;
+ 
+   # performing the dilution aging correction
+   if (defined $self->total() && defined $self->count() && defined $self->{txrep_dilution_factor}) {
+@@ -1587,9 +1587,9 @@ sub remove_score {
+   }
+   # no reversal dilution aging correction (not easily possible),
+   # just removing the original message score
+-  if ($self->{entry}->{msgcount} > 2)
+-        {$self->{entry}->{msgcount} -= 2;}
+-  else  {$self->{entry}->{msgcount}  = 0;}
+  if ($self->{entry}->{count} > 2)
+        {$self->{entry}->{count} -= 2;}
+  else  {$self->{entry}->{count}  = 0;}
+   # subtract 2, and add a score; hence decrementing by 1
+   $self->{checker}->add_score($self->{entry}, -1*$score);
+ }
+diff --git a/lib/Mail/SpamAssassin/SQLBasedAddrList.pm b/lib/Mail/SpamAssassin/SQLBasedAddrList.pm
+index 278f792..f3f40b4 100644
+--- a/lib/Mail/SpamAssassin/SQLBasedAddrList.pm
+++ b/lib/Mail/SpamAssassin/SQLBasedAddrList.pm
+@@ -45,7 +45,7 @@ CREATE TABLE awl (
+   username varchar(100) NOT NULL default '',
+   email varchar(255) NOT NULL default '',
+   ip varchar(40) NOT NULL default '',
+-  msgcount int(11) NOT NULL default '0',
+  count int(11) NOT NULL default '0',
+   totscore float NOT NULL default '0',
+   signedby varchar(255) NOT NULL default '',
+   PRIMARY KEY (username,email,signedby,ip)
+@@ -191,7 +191,7 @@ sub get_addr_entry {
+ 
+   my $entry = { addr     => $addr,
+                 exists_p => 0,
+-                msgcount    => 0,
+                count    => 0,
+                 totscore => 0,
+                 signedby => $signedby,
+               };
+@@ -200,7 +200,7 @@ sub get_addr_entry {
+ 
+   return $entry  unless $email ne '' && (defined $ip || defined $signedby);
+ 
+-  my $sql = "SELECT msgcount, totscore FROM $self->{tablename} " .
+  my $sql = "SELECT count, totscore FROM $self->{tablename} " .
+             "WHERE username = ? AND email = ?";
+   my @args = ( $email );
+   if (!$self->{_with_awl_signer}) {
+@@ -225,7 +225,7 @@ sub get_addr_entry {
+   if (!$rc) { # there was an error, but try to go on
+     info("auto-whitelist: sql-based get_addr_entry %s: SQL error: %s",
+          join('|',@args), $sth->errstr);
+-    $entry->{msgcount} = 0;
+    $entry->{count} = 0;
+     $entry->{totscore} = 0;
+   }
+   else {
+@@ -234,8 +234,8 @@ sub get_addr_entry {
+     # how to combine data if there are several entries (like signed by
+     # an author domain and by a remailer)?  for now just take an average
+     while ( defined($aryref = $sth->fetchrow_arrayref()) ) {
+-      if (defined $entry->{msgcount} && defined $aryref->[1]) {
+-        $entry->{msgcount} = $aryref->[0];
+      if (defined $entry->{count} && defined $aryref->[1]) {
+        $entry->{count} = $aryref->[0];
+         $entry->{totscore} = $aryref->[1];
+       }
+       $entry->{exists_p} = 1;
+@@ -247,8 +247,8 @@ sub get_addr_entry {
+   }
+   $sth->finish();
+ 
+-  dbg("auto-whitelist: sql-based %s scores %s, msgcount %s",
+-      join('|',@args), $entry->{totscore}, $entry->{msgcount});
+  dbg("auto-whitelist: sql-based %s scores %s, count %s",
+      join('|',@args), $entry->{totscore}, $entry->{count});
+ 
+   return $entry;
+ }
+@@ -275,7 +275,7 @@ sub add_score {
+   
+   my ($email, $ip) = $self->_unpack_addr($entry->{addr});
+ 
+-  $entry->{msgcount} += 1;
+  $entry->{count} += 1;
+   $entry->{totscore} += $score;
+   my $signedby = $entry->{signedby};
+   
+@@ -286,7 +286,7 @@ sub add_score {
+ 
+   my $inserted = 0;
+ 
+-  { my @fields = qw(username email ip msgcount totscore);
+  { my @fields = qw(username email ip count totscore);
+     my @signedby;
+     if ($self->{_with_awl_signer}) {
+       push(@fields, 'signedby');
+@@ -327,9 +327,9 @@ sub add_score {
+     # insert failed, assume primary key constraint, so try the update
+ 
+     my $sql = "UPDATE $self->{tablename} ".
+-              "SET msgcount = ?, totscore = totscore + ? ".
+              "SET count = ?, totscore = totscore + ? ".
+               "WHERE username = ? AND email = ?";
+-    my(@args) = ($entry->{msgcount}, $score, $self->{_username}, $email);
+    my(@args) = ($entry->{count}, $score, $self->{_username}, $email);
+     if ($self->{_with_awl_signer}) {
+       my @signedby = !defined $signedby ? () : split(' ', lc $signedby);
+       if (!@signedby) {
+@@ -352,8 +352,8 @@ sub add_score {
+            join('|',@args), $sth->errstr);
+     } else {
+       dbg("auto-whitelist: sql-based add_score/update ".
+-          "new msgcount: %s, new totscore: %s for %s",
+-          $entry->{msgcount}, $entry->{totscore}, join('|',@args));
+          "new count: %s, new totscore: %s for %s",
+          $entry->{count}, $entry->{totscore}, join('|',@args));
+       $entry->{exists_p} = 1;
+     }
+   }
+diff --git a/sql/README.awl b/sql/README.awl
+index 68de4a1..a1ddf40 100644
+--- a/sql/README.awl
+++ b/sql/README.awl
+@@ -75,7 +75,7 @@ setting: "awl") with at least these fields:
+   username varchar(100)	  # this is the username whose e-mail is being filtered
+   email varchar(200)      # this is the address key
+   ip    varchar(40)       # this is the ip key (fits IPv4 or IPv6)
+-  msgcount int(11)        # this is the message counter
+  count int(11)           # this is the message counter
+   totscore float          # this is the total calculated score
+   signedby varchar(255)   # a DKIM or DomainKeys signing domain(s)
+ 
+@@ -109,7 +109,7 @@ CREATE TABLE awl (
+   username varchar(100) NOT NULL default '',
+   email varchar(255) NOT NULL default '',
+   ip varchar(40) NOT NULL default '',
+-  msgcount int(11) NOT NULL default '0',
+  count int(11) NOT NULL default '0',
+   totscore float NOT NULL default '0',
+   signedby varchar(255) NOT NULL default '',
+   PRIMARY KEY (username,email,signedby,ip)
+diff --git a/sql/awl_mysql.sql b/sql/awl_mysql.sql
+index a8b6926..0bfa99a 100644
+--- a/sql/awl_mysql.sql
+++ b/sql/awl_mysql.sql
+@@ -2,7 +2,7 @@ CREATE TABLE awl (
+   username varchar(100) NOT NULL default '',
+   email varbinary(255) NOT NULL default '',
+   ip varchar(40) NOT NULL default '',
+-  msgcount int(11) NOT NULL default '0',
+  count int(11) NOT NULL default '0',
+   totscore float NOT NULL default '0',
+   signedby varchar(255) NOT NULL default '',
+   last_hit timestamp NOT NULL default CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+diff --git a/sql/awl_pg.sql b/sql/awl_pg.sql
+index 2cb3f3e..4f59d72 100644
+--- a/sql/awl_pg.sql
+++ b/sql/awl_pg.sql
+@@ -2,7 +2,7 @@ CREATE TABLE awl (
+   username varchar(100) NOT NULL default '',
+   email varchar(255) NOT NULL default '',
+   ip varchar(40) NOT NULL default '',
+-  msgcount bigint NOT NULL default '0',
+  count bigint NOT NULL default '0',
+   totscore float NOT NULL default '0',
+   signedby varchar(255) NOT NULL default '',
+   last_hit timestamp NOT NULL default CURRENT_TIMESTAMP,
+diff --git a/sql/txrep_mysql.sql b/sql/txrep_mysql.sql
+index 9a4888b..bbe6b95 100644
+--- a/sql/txrep_mysql.sql
+++ b/sql/txrep_mysql.sql
+@@ -2,7 +2,7 @@ CREATE TABLE txrep (
+   username varchar(100) NOT NULL default '',
+   email varchar(255) NOT NULL default '',
+   ip varchar(40) NOT NULL default '',
+-  msgcount int(11) NOT NULL default '0',
+  count int(11) NOT NULL default '0',
+   totscore float NOT NULL default '0',
+   signedby varchar(255) NOT NULL default '',
+   last_hit timestamp NOT NULL default CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+diff --git a/sql/txrep_pg.sql b/sql/txrep_pg.sql
+index 191074c..463006b 100644
+--- a/sql/txrep_pg.sql
+++ b/sql/txrep_pg.sql
+@@ -2,7 +2,7 @@ CREATE TABLE txrep (
+   username varchar(100) NOT NULL default '',
+   email varchar(255) NOT NULL default '',
+   ip varchar(40) NOT NULL default '',
+-  msgcount bigint NOT NULL default '0',
+  count bigint NOT NULL default '0',
+   totscore float NOT NULL default '0',
+   signedby varchar(255) NOT NULL default '',
+   last_hit timestamp NOT NULL default CURRENT_TIMESTAMP,
+diff --git a/UPGRADE b/UPGRADE
+index cfd31ab..b555b0b 100644
+--- a/UPGRADE
+++ b/UPGRADE
+@@ -24,18 +24,6 @@ Note for Users Upgrading to SpamAssassin 3.4.3
+   This is to make sure all the legacy installations and wiki guides etc
+   still using it needlessly get fixed.
+ 
+-- TxRep and Awl plugins has been modified to be compatible 
+-  with latest Postgresql versions.
+-  You should upgrade your sql database running the following command:
+-  MySQL:
+-  "ALTER TABLE `txrep` CHANGE `count` `msgcount` INT(11) NOT NULL DEFAULT '0';"
+-  "ALTER TABLE `awl` CHANGE `count` `msgcount` INT(11) NOT NULL DEFAULT '0';"
+-  "ALTER TABLE `awl` ADD last_hit timestamp NOT NULL default CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP;"
+-  PostgreSQL:
+-  "ALTER TABLE txrep RENAME COLUMN count TO msgcount;"
+-  "ALTER TABLE awl RENAME COLUMN count TO msgcount;"
+-  "ALTER TABLE awl ADD last_hit timestamp NOT NULL default CURRENT_TIMESTAMP;"
+-
+ - body_part_scan_size 50000, rawbody_part_scan_size 500000 defaults added (Bug 6582)
+   These enable safer and faster scanning of large emails.
+ 
--- a/SPECS/spamassassin.spec
+++ b/SPECS/spamassassin.spec
@ -53,20 +53,20 @@
 %define real_name Mail-SpamAssassin
 %{!?perl_vendorlib: %define perl_vendorlib %(eval "`%{__perl} -V:installvendorlib`"; echo $installvendorlib)}

-%global saversion 3.004002
+%global saversion 3.004004
 #%%global prerev rc2

 Summary: Spam filter for email which can be invoked from mail delivery agents
 Name: spamassassin
-Version: 3.4.2
+Version: 3.4.4
 #Release: 0.8.%%{prerev}%%{?dist}
-Release: 10%{?dist}
+Release: 3%{?dist}
 License: ASL 2.0
 Group: Applications/Internet
 URL: https://spamassassin.apache.org/
 Source0: https://www.apache.org/dist/%{name}/source/%{real_name}-%{version}.tar.bz2
 #Source0: %%{real_name}-%%{version}-%%{prerev}.tar.bz2
-Source1: https://www.apache.org/dist/%{name}/source/%{real_name}-rules-%{version}.r1840640.tgz
+Source1: https://www.apache.org/dist/%{name}/source/%{real_name}-rules-%{version}.r1873061.tgz
 #Source1: %%{real_name}-rules-%%{version}.%%{prerev}.tgz
 Source2: redhat_local.cf
 Source3: spamassassin-default.rc
@ -94,15 +94,14 @@ Patch1: spamassassin-3.4.1-add-logfile-homedir-options.patch
 # https://bugzilla.redhat.com/show_bug.cgi?id=1607372
 Patch2: spamassassin-3.4.2-drop-geoip.patch
 Patch3: 0001-Drop-the-ResourceLimits-plugin.patch
+%if 0%{?rhel} <= 8
+Patch4: spamassassin-sql92_syntax.patch
+%endif
+Patch5: spamassassin-disable_tests_for_deleted_modules.patch

 # Patches 100+ are SVN backports (DO NOT REUSE!)
-Patch100: spamassassin-3.4.2-fix-use-after-free.patch
-Patch101: spamassassin-3.4.2-fix-file-handle-leaks.patch
-Patch102: spamassassin-3.4.2-fix-rawbody-rules-documentation.patch
-Patch103: spamassassin-3.4.2-fix-CVE-2019-12420.patch
-Patch104: spamassassin-3.4.2-fix-CVE-2018-11805.patch
-Patch105: spamassassin-3.4.2-fix-CVE-2020-1930.patch
-Patch106: spamassassin-3.4.2-fix-CVE-2020-1931.patch
+
+Patch100: spamassassin-cert_update.patch

 # end of patches

@ -120,16 +119,44 @@ BuildRequires: perl(Time::HiRes)
 BuildRequires: perl(HTML::Parser)
 BuildRequires: perl(NetAddr::IP)
 BuildRequires: openssl-devel
+
+
 %if %{use_systemd}
 BuildRequires: systemd-units
 %endif

+# BuildRequires for test suite
+BuildRequires: perl(Test::Builder)
+BuildRequires: perl(Test) perl(Test::More)
+BuildRequires: perl(Net::DNS::Nameserver)
+BuildRequires: perl(DB_File)
+BuildRequires: perl(DBI) perl(DBD::mysql)
+BuildRequires: perl(Mail::DKIM)
+BuildRequires: perl(LWP::UserAgent)
+BuildRequires: perl(Archive::Zip)
+BuildRequires: perl(IO::String)
+buildrequires: wget
+
+%if 0%{?fedora}
+BuildRequires: perl(Devel::Cycle)
+BuildRequires: perl(Net::Patricia)
+%endif
+
+BuildRequires: perl(Mail::SPF)
+BuildRequires: perl(IO::Socket::INET6)
+BuildRequires: perl(IO::Socket::SSL)
+BuildRequires: perl(Encode::Detect::Detector)
+
+
+
+
 Requires: perl(HTTP::Date)
 Requires: perl(LWP::UserAgent)
 Requires: perl(Net::DNS)
 Requires: perl(Time::HiRes)
 Requires: perl(DB_File)
 Requires: perl(Mail::SPF)
+Requires: perl(IO::String)
 %if %{require_encode_detect}
 Requires: perl(Encode::Detect)
 %endif
@ -205,21 +232,22 @@ To filter spam for all users, add that line to /etc/procmailrc
 %patch0 -p1
 %patch1 -p1
 %patch2 -p1
+rm -f lib/Mail/SpamAssassin/Plugin/RelayCountry.pm
+rm -f lib/Mail/SpamAssassin/Plugin/URILocalBL.pm

 # Drop the ResourceLimits plugin - it requires perl(BSD::Resource)
 # which is not in RHEL-8
 %patch3 -p1
 rm -f lib/Mail/SpamAssassin/Plugin/ResourceLimits.pm
+# Reverting this in thel8 to not complicate update process
+# https://github.com/apache/spamassassin/commit/f7d39bfd3ef2e5ef4a9de480764ee1d73be9349
+%if 0%{?rhel} == 8
+%patch4 -p1
+%endif
+%patch5 -p1

 # Patches 100+ are SVN backports (DO NOT REUSE!)
 %patch100 -p1
-%patch101 -p1
-%patch102 -p1
-%patch103 -p1
-%patch104 -p1
-%patch105 -p1
-%patch106 -p1
-
 # end of patches

 echo "RHEL=%{?rhel} FEDORA=%{?fedora}"
@ -308,6 +336,10 @@ install -m 0644 %{SOURCE13} $RPM_BUILD_DIR/Mail-SpamAssassin-%{version}/
 mkdir   -m 0700 -p          $RPM_BUILD_ROOT%{_sharedstatedir}/razor/
 %endif

+%check
+rm -f t/relaycountry* t/urilocal*
+make disttest
+
 %files -f %{name}-%{version}-filelist
 %doc LICENSE NOTICE CREDITS Changes README TRADEMARK UPGRADE
 %doc USAGE sample-nonspam.txt sample-spam.txt 
@ -402,6 +434,13 @@ exit 0
 %endif

 %changelog
+* Tue Oct  6 2020 Pavel Zhukov <pzhukov@redhat.com> - 3.4.4-3
+- Add tests BRs
+
+* Tue Oct  6 2020 Pavel Zhukov <pzhukov@redhat.com> - 3.4.4-2
+- New version v3.4.4
+- Enable tests
+
 * Mon Jun 15 2020 Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
 - Fixed CVE-2018-11805
 - Resolves: rhbz#1787514