[Pkg-clamav-devel] ClamAV. again

[Michael Tautschnig]

> On Sat, 6 Sep 2008 02:06:30 am Stephen Gran wrote:
> > Hello all,
> >
> > Attached is my proposed upload for the latest round of security problems
> > in clamav.  It seems that CVE-2008-1389 does not apply to etch security,
> > and CVE-2008-3914 only partially applies (that is, they appear to have
> > added new fd leaks in versions after etch).
> >
> > I realize none of these are critical vulnerabilities, so if you don't
> > want me to upload, that's fine.  The upload is prepared if you want it.
> >
> > Please include the mailing list in replies.
> Thanks for your work. For lenny, can we get the four issues list here[0] fixed 
> somehow? The diff between the lenny and the sid version is rather large, so I 
> guess it won't be included in lenny, but if you have the patches for the 
> issues filtered out, we could get it fixed via testing-security.
> 
[...]

I could try to take care of this tomorrow afternoon. If anyone intends to do it
before, just go for it.

Best,
Michael

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20080908/1c6dbbdf/attachment.pgp