clamav-0.90

[jdow]

From: "Denis Leroy" <denis at poolshark.org>

> Dario Lesca wrote:
>> Il giorno lun, 19/02/2007 alle 15.14 +0100, Denis Leroy ha scritto:
>>
>>> If there are issues with the version if clamav provided by Fedora 
>>> Extras, please file bugs at http://bugzilla.redhat.com/. Thanks!
>>
>> Clamav provided by Fedora Extras does not have some kind of bugs.
>> It's only very hard to config ... the clamd service, and logrotate, and
>> pid of process, and config files, for a user ...
>>
>> Probably would be sufficient, at least, release into paan user (clamav
>> for example) already configured.
>>
>> I am not a expert of linux and with ATrpms package I succeed to install
>> clamav.
>
> As I said, not on this list :-) Please file a bugzilla ticket against 
> clamav. This is related to the way clamav is packaged, so it belongs 
> there.

Denis, that should not be required, period.

ClamAV is out of date. It has a denial of service vulnerability for the
version RedHat supplies. 0.90 is what is suggested by the ClamAV people
for use. You should get CERT advisories, fellas. Amd you should act on
them.

{`_'}