[Pkg-clamav-devel] Proposed text for clamav VUA

[Michael Tautschnig]

[...]

> > 
> > The bugfixes that are part of this release include a security fix for
> > CVE-2010-0405.  If you use clamav, we highly recommend you upgrade to this
> > version.
> 
> How is that bzip2 bug rectified?  Does this require source changes or certain
> versions of bzip2 to build against?
> 

clamav includes some embedded code copies of bzip, and those were affected too.
Hence a source change was necessary. 

Best,
Michael

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20100925/a9f7b518/attachment.pgp>