Re: [Security-Discuss] clamav updates in updates?

On Jun 2, 2004, at 3:11 AM, Simon Oosthoek wrote:

> I just noticed that my clamav on mdk 10.0 is v0.67 and it complained 
> that it
> was outdated and should be upgraded immediately. Now I can download 
> v0.71
> from clamav.net and do it myself, but I'd be more happy with an 
> official
> mandrake update. For this kind of software, an upgrade is also a 
> security
> fix IMHO, so I hope mandrake agrees with me on this ;-)

Nice try, but no.

*If* it was in main, it would need to have a security flaw or hole to 
be updated.  Just because it thinks it's out of date doesn't make 
updating it a security fix.

clamav is in contribs, and contribs are unsupported, so they never get 
updates.

Guess you get to roll your own.  =)

-- 
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FE6F2AFD : 88D8 0D23 8D4B 3407 5BD7  66F9 2043 D0E5 FE6F 2AFD}