Re: [Security-Discuss] clamav

If a user interested on security risks like this ones after 0.83:
------------------------------------------------------
- libclamav/mbox.c: Some Sober.N were getting through,
* clamd/scanner.c: fix possible crash when MaxStreamLength
* libclamav/vba_extract.c: fix possible crash
* libclamav:	Added TNEF (winmail.dat) decoding. Now finds eicar in test
14
* libclamav/scanners.c: fix encrypted zip detecion
* libclamav/mbox.c:	Not all Worm.Bagle.AC were being caught
* libclamav: call cli_check_jpeg_exploit() independently of pattern
matcher
* clamd/scanner.c: fix ports scan loop
* libclamav/mbox.c:	Some Worm.Yaha.K were not being found

and so on
--------------------------------------------------------------
there must be update.  It's not a good way to wait that nothing goes on.
If mandriva can't do this, the users can also get the 0.85 Version for the mandriva LE2005 Version of clamav here:

ftp://mandrivauser.de/rpm/andyrtr/2005/RPMS/

But ATTENTION this is a private package builder no warranty no support !!

Thank you,

Regards

Dieter

Am Sonntag, den 15.05.2005, 22:07 +0200 schrieb Dieter Schütze:
> I have no panic but if i read the change log
> ----------------------------------------------
> from 0.85
> http://sourceforge.net/project/shownotes.php?release_id=326661
> from 0.84
> http://sourceforge.net/project/shownotes.php?release_id=324140
> 
> i think this is very important for a minimal secure network
> to guard emails and the stupid windows boxes for bad files.
> 
> I see this not so easy as you
> 
> regards 
> 
> Dieter
> 
> 
> Am Sonntag, den 15.05.2005, 21:57 +0200 schrieb Oden Eriksson:
> > söndag 15 maj 2005 21.50 skrev Dieter Schütze:
> > > Hi,
> > > iam wondering about the updates of clamav.
> > > We have now the 0.85 version, but the mandriva LE2005 (main tree) has
> > > only the very old 0.83 no updates available.
> > > If you have installed the 0.83 you get a warning to update immediately.
> > 
> > This is no warning. Don't panic. If it won't work I bet there will be a 
> > updated package soon. I have misread this "Warning" myself, and that resulted 
> > in a totally unneeded update package... (duh!)
> > 
> > einfaches Textdokument-Anlage (message.footer)
> > ____________________________________________________
> > Want to buy your Pack or Services from MandrakeSoft? 
> > Go to http://www.mandrakestore.com
> > Join the Club : http://www.mandrakeclub.com
> > ____________________________________________________

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQBCiHS1extCvIhfR6wRAjYJAJ42t93ApUA8e6cz4ycbaRbbXOIChwCbB5c2
SNRqBvlNxNBf0iY+XabT+T4=
=T3PH
-----END PGP SIGNATURE-----