Re: CVE-2023-20032 and CVE-2023-20052 Latest security flaws in Cisco's open source ClamAV antivirus engine

Turritopsis Dohrnii Teo En Ming <[email protected]> Wed, 22 Feb 2023 10:26:42 +0800
Newsgroups gmane.comp.security.virus.clamav.devel
Message-ID <CAD3upLtstpV69ngqwCNB+m-oRZ4RDT=-+A53OsvM_9LnW9XDCg@mail.gmail.com>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==