Re: [Security-Discuss] clamav

Ronald Ip wrote:
> Hi guys,
> 
> Dieter Schütze wrote:
> 
>> If a user interested on security risks like this ones after 0.83:
>> ------------------------------------------------------
>> - libclamav/mbox.c: Some Sober.N were getting through,
>> * clamd/scanner.c: fix possible crash when MaxStreamLength
>> * libclamav/vba_extract.c: fix possible crash
>> * libclamav:    Added TNEF (winmail.dat) decoding. Now finds eicar in 
>> test
>> 14
>> * libclamav/scanners.c: fix encrypted zip detecion
>> * libclamav/mbox.c:    Not all Worm.Bagle.AC were being caught
>> * libclamav: call cli_check_jpeg_exploit() independently of pattern
>> matcher
>> * clamd/scanner.c: fix ports scan loop
>> * libclamav/mbox.c:    Some Worm.Yaha.K were not being found
>>
>> and so on
>> --------------------------------------------------------------
>> there must be update.  It's not a good way to wait that nothing goes on.
>> If mandriva can't do this, the users can also get the 0.85 Version for 
>> the mandriva LE2005 Version of clamav here:
>>
>> ftp://mandrivauser.de/rpm/andyrtr/2005/RPMS/
>>
>> But ATTENTION this is a private package builder no warranty no support !!
> 
> 
> Why not just get the SRPM from Cooker and rebuild? It's not supported 
> either way anyway but it's nicer to have the package form highly 
> experienced cooker people :D
> 
> 
> Ronald.
> 

If you're running 10.0 you can't rebuild the latest cooker SRPM because 
it uses a %mkrel macro and possibily other stuff which isn't supported 
by the version of rpm-build that comes with 10.0 ... which means 
rebuilding a later version of rpm... which may involve yet more 
rebuilding and potentially create incompatibilities.

There's also no guarantee that the cooker package will work. Packages 
are in cooker for testing and quite frequently have issues. Just look at 
the changelog for clamav and you'll see why it's at version 0.85 release 6.

-- 
Mark Scott
Caravan Sitefinder UK Ltd Technical Team

Tel: +44 (0)845 6444 185
Email: [email protected]
Web: http://www.caravan-sitefinder.co.uk/

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________