...
SpamAssassin 3.4.4 was released on 28 January, 2020. It was primarily a security release, fixing two CVEs, all then known outstanding open security issues on the project.
Release Previous reports to the Board have described the release of SpamAssassin 3.4.5 is as "imminent", fixing a subsequently reported CVE level security issue. CVE obtained in February, 2020. That should have triggered a process resulting in a release with 90 days. The last publicly released build for it was 3.4.5 Pre-Release 1 was built on June 21, 2020. Development continued after that, without a formal release yet. We recognize that this has been unacceptable. There do not appear to be any issues blocking the release at this time. We intend to run the release process as soon as possible on the current 3.4 branch. After that we will look at how to modify our development and release processes to better conform to modern CI practices, further automate releases, and add time targets to our process steps.
We intend to return our primary focus to development of version 4.0.0 . A Pre-Release 1 of 4.0.0 is plannedonce 3.4.5 is released.
Releases:
The last release was Apache SpamAssassin version 3.4.4 on 28 January 2020.
...