Re: [Security-Discuss] Re: [Security Announce] MDKSA-2005:113 - Updated clamav packages fix vulnerability

On Tue, Jul 12, 2005 at 08:17:30AM +0200, Simon Oosthoek wrote:
> On Mon, Jul 11, 2005 at 08:20:40PM -0600, Mandriva Security Team wrote:
> >  Mandrakelinux 10.1:
> >  d1a61855ca50e53018e5c65ef380d8dd  10.1/RPMS/clamav-0.81-0.3.101mdk.i586.rpm
> 
> wouldn't it make sense in the case of this package, to update to the latest
> stable version?
> Clamav complains about being too old and actually lacks functionality when
> older versions are used...

Actually, if I'd have purchased corporate server edition, I'd be offended
that this was not the case, since the main reason to get that version is to
have better than "free" support. That includes proper fixes to real world
problems. And getting warnings like "Your version of clamav is out of date,
UPDATE NOW!" is something I'd not put up with for very long from a paid-for
OS.

Anyway, my "free" solution was to get the tarball from the clamav site and
build it myself outside of the rpm system. I hate to do that, but in this
case I couldn't get the cooker src.rpm to build on 10.0 and there was no
update for 10.0 anyway...

Please don't understand me wrong, I like Mandriva and the speed at which
security updates come, usually...

As a general rule, I'd think there should be more version upgrades (upstream
security releases) in security updates as long as they don't break
configuration files or settings.


/Simon


PS, the sympa list still has .com and .org addresses mixed, please fix that!

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________