[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Accepted clamav 0.90.1-2~bpo.1 (source i386 all)


On Wed, Apr 18, 2007 at 07:49:21PM +0000, Sebastian Harl wrote:
> Source: clamav
> [...]
> Version: 0.90.1-2~bpo.1
> Distribution: sarge-backports

Does that package version makes sense to upload?

Volatile for Sarge already has clamav 0.90.2
(0.90.2-0volatile1). Doesn't have volatile more strict requirements
than bpo?

And clamav 0.90.1 has some known security issues (CVE-2007-1745,
CVE-2007-1997, https://wwws.clamav.net/bugzilla/show_bug.cgi?id=459)
and via updates disabled CHM, CAB and PDF scanners since 3 days. See
http://lurker.clamav.net/message/20070413.012951.1d50edff.en.html for
the announce.

		Kind regards, Axel Beckert
Axel Beckert <beckert@phys.ethz.ch>       support: +41 44 633 2668
IT Support Group, HPR E 86.1              voice:   +41 44 633 4189
Departement Physik, ETH Zurich            fax:     +41 44 633 1239
CH-8093 Zurich, Switzerland		  http://nic.phys.ethz.ch/

Reply to: