...
Release of SpamAssassin 3.4.5 is imminent, fixing a subsequently reported CVE level security issue. 3.4.5 Pre-Release 1 was built on June 21, 2020.
We intend to return our primary focus to development of version 4.0.0. A Pre-Release 1 of 4.0.0 is planned.
Releases:
The last release was Apache SpamAssassin version 3.4.4 on 28 January 2020.
...