Re: [Security-Discuss] Re: [Security Announce] MDKSA-2005:113 - Updated clamav packages fix vulnerability

Tuesday 12 July 2005 16.54 skrev Vincent Danen:
> On 12-Jul-05, at 1:41 AM, Simon Oosthoek wrote:
> >>>  Mandrakelinux 10.1:
> >>>  d1a61855ca50e53018e5c65ef380d8dd  10.1/RPMS/
> >>> clamav-0.81-0.3.101mdk.i586.rpm
> >>
> >> wouldn't it make sense in the case of this package, to update to
> >> the latest
> >> stable version?
> >> Clamav complains about being too old and actually lacks
> >> functionality when
> >> older versions are used...
> >
> > Actually, if I'd have purchased corporate server edition, I'd be
> > offended
> > that this was not the case, since the main reason to get that
> > version is to
> > have better than "free" support. That includes proper fixes to real
> > world
> > problems. And getting warnings like "Your version of clamav is out
> > of date,
> > UPDATE NOW!" is something I'd not put up with for very long from a
> > paid-for
> > OS.
>
> Huh?  Since when was buying Corp Serve analogous with updating
> everything to the latest version?  You think when you buy CS that you
> get the latest apache, php, clamav, samba, etc.?  Think again, my
> friend.  Your better than free support means we support the OS for 5
> years, not that everytime something new comes out we update the OS
> with the latest version.

Good reasoning. For this particular package it won't apply as easy.

As a fact with this software is that sometimes the clamav authors change the 
database structure (the database engine routines) as in 0.81 -> 0.85.x 
rendering it totally useless in protecting for new viruses. Vincent, I am 
sure I have told you about this. So in my opinion Simon Oosthoek is right 
about this particular software. So, fixing a bug in this 0.81 version is 
wasting time. Sure, it plugs the hole, but the software itself remains 
useless. Sorry...

-- 
Regards // Oden Eriksson
Mandriva: http://www.mandriva.com
NUX: http://nux.se

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________