...
Release of SpamAssassin 3.4.5 is imminent, fixing a subsequently reported CVE level security issue. 3.4.5 Pre-Release 1 was built on June 21, 2020.
We intend to return our primary focus to development of version 4.0.0.We voted to replace use of "blacklist" and "whitelist" with words such as block/deny/allow, after seeing similar action by UK National Cyber Security Centre and Chromium. The changes will be phased to avoid breaking existing installations, with technical details now to be worked out in our normal development process A Pre-Release 1 of 4.0.0 is planned.
Releases:
The last release was Apache SpamAssassin version 3.4.4 on 28 January 2020.
...