Re: [Security-Discuss] clamav

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> Ronald Ip wrote:
> > Hi guys,
> >
> > Dieter Schütze wrote:
> >> If a user interested on security risks like this ones after 0.83:
> >> ------------------------------------------------------
> >> - libclamav/mbox.c: Some Sober.N were getting through,
> >> * clamd/scanner.c: fix possible crash when MaxStreamLength
> >> * libclamav/vba_extract.c: fix possible crash
> >> * libclamav:    Added TNEF (winmail.dat) decoding. Now finds eicar in
> >> test
> >> 14
> >> * libclamav/scanners.c: fix encrypted zip detecion
> >> * libclamav/mbox.c:    Not all Worm.Bagle.AC were being caught
> >> * libclamav: call cli_check_jpeg_exploit() independently of pattern
> >> matcher
> >> * clamd/scanner.c: fix ports scan loop
> >> * libclamav/mbox.c:    Some Worm.Yaha.K were not being found
> >>
> >> and so on
> >> --------------------------------------------------------------
> >> there must be update.  It's not a good way to wait that nothing goes on.
> >> If mandriva can't do this, the users can also get the 0.85 Version for
> >> the mandriva LE2005 Version of clamav here:
> >>
> >> ftp://mandrivauser.de/rpm/andyrtr/2005/RPMS/
> >>
> >> But ATTENTION this is a private package builder no warranty no support
> >> !!
> >
> > Why not just get the SRPM from Cooker and rebuild? It's not supported
> > either way anyway but it's nicer to have the package form highly
> > experienced cooker people :D
> >
> >
> > Ronald.
>
> If you're running 10.0 you can't rebuild the latest cooker SRPM because
> it uses a %mkrel macro and possibily other stuff which isn't supported
> by the version of rpm-build that comes with 10.0 ... which means
> rebuilding a later version of rpm... which may involve yet more
> rebuilding and potentially create incompatibilities.
>
> There's also no guarantee that the cooker package will work. Packages
> are in cooker for testing and quite frequently have issues. Just look at
> the changelog for clamav and you'll see why it's at version 0.85 release 6.

Add the following to ~/.rpmmacros:

%mkrel(c:)              %{-c: 0.%{-c*}.}%{!?_with_unstable:%(perl -e '$_="%{1}";m/(.\*)(\\d+)$/;$rel=${2}-1;re;print "$1$rel";').%{?subrel:%subrel}%{!?subrel:1}.%{?distversion:%distversion}%{?!distversion:%(echo $[%{mdkversion}/10])}}%{?_with_unstable:%{1}}%{?distsuffix:%distsuffix}%{?!distsuffix:mdk}

Mark.

- -- 
Mark Watts
Senior Systems Engineer
QinetiQ Trusted Information Management
Trusted Solutions and Services Group
GPG Public Key ID: 455420ED

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFCiK2wBn4EFUVUIO0RAry0AKDxxCXqlIVp4ha7elv3s3+E4O1AcgCeMcGI
f9Wj+CLvygnZ8PFBMsa9rpY=
=h+HB
-----END PGP SIGNATURE-----

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________