Re: [Security-Discuss] clamav

Hi guys,

Dieter Schütze wrote:
> If a user interested on security risks like this ones after 0.83:
> ------------------------------------------------------
> - libclamav/mbox.c: Some Sober.N were getting through,
> * clamd/scanner.c: fix possible crash when MaxStreamLength
> * libclamav/vba_extract.c: fix possible crash
> * libclamav:	Added TNEF (winmail.dat) decoding. Now finds eicar in test
> 14
> * libclamav/scanners.c: fix encrypted zip detecion
> * libclamav/mbox.c:	Not all Worm.Bagle.AC were being caught
> * libclamav: call cli_check_jpeg_exploit() independently of pattern
> matcher
> * clamd/scanner.c: fix ports scan loop
> * libclamav/mbox.c:	Some Worm.Yaha.K were not being found
> 
> and so on
> --------------------------------------------------------------
> there must be update.  It's not a good way to wait that nothing goes on.
> If mandriva can't do this, the users can also get the 0.85 Version for the mandriva LE2005 Version of clamav here:
> 
> ftp://mandrivauser.de/rpm/andyrtr/2005/RPMS/
> 
> But ATTENTION this is a private package builder no warranty no support !!

Why not just get the SRPM from Cooker and rebuild? It's not supported 
either way anyway but it's nicer to have the package form highly 
experienced cooker people :D


Ronald.
> 
> Thank you,
> 
> Regards
> 
> Dieter
> 
> Am Sonntag, den 15.05.2005, 22:07 +0200 schrieb Dieter Schütze:
> 
>>I have no panic but if i read the change log
>>----------------------------------------------
>>from 0.85
>>http://sourceforge.net/project/shownotes.php?release_id=326661
>>from 0.84
>>http://sourceforge.net/project/shownotes.php?release_id=324140
>>
>>i think this is very important for a minimal secure network
>>to guard emails and the stupid windows boxes for bad files.
>>
>>I see this not so easy as you
>>
>>regards 
>>
>>Dieter
>>
>>
>>Am Sonntag, den 15.05.2005, 21:57 +0200 schrieb Oden Eriksson:
>>
>>>söndag 15 maj 2005 21.50 skrev Dieter Schütze:
>>>
>>>>Hi,
>>>>iam wondering about the updates of clamav.
>>>>We have now the 0.85 version, but the mandriva LE2005 (main tree) has
>>>>only the very old 0.83 no updates available.
>>>>If you have installed the 0.83 you get a warning to update immediately.
>>>
>>>This is no warning. Don't panic. If it won't work I bet there will be a 
>>>updated package soon. I have misread this "Warning" myself, and that resulted 
>>>in a totally unneeded update package... (duh!)
>>>
>>>einfaches Textdokument-Anlage (message.footer)
>>>____________________________________________________
>>>Want to buy your Pack or Services from MandrakeSoft? 
>>>Go to http://www.mandrakestore.com
>>>Join the Club : http://www.mandrakeclub.com
>>>____________________________________________________


-- 
Ronald Ip                                myself-zSWdYiJ/+5RWk0Htik3J/[email protected]
gpg public key @ http://iphoting.iphoting.com/iphoting.asc
Fingerprint: {6A7E AB1E A822 E621 4DEC 11C4 F355 0635 71D7 1151}

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCiJrc81UGNXHXEVERAoXzAKDIiSGdE8WGQOYlkecVAs1Ozyj/SACfbR2q
iox3RCnkW3d63cn9Jm0vaBs=
=DFf7
-----END PGP SIGNATURE-----