[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <200806171155.10842.turkay.eren@gmail.com>
Date: Tue, 17 Jun 2008 11:55:10 +0300
From: Eren Türkay <turkay.eren@...il.com>
To: oss-security@...ts.openwall.com
Cc: edwin@...mav.net
Subject: Re: CVE id request: Clamav
On 17 Jun 2008 Tue 10:38:13 Eren Türkay wrote:
> * libclamav/mbox.c, shared/network.c: prevent uninitialized use of
> hostent structure (bb #1003).
>
> The bug entry says that after zip file's arriving at clamd, it suddenly
> dies and nothing can be retrieved thereafter. Clamav developer also
> comfirms that this happens when MailFollowURLs is enabled.
Hello,
I talked to Edwin on #clamav channel. He says this is a rare-case and he
thinks that it's a vulnerability rather than a security flaw.
Edwin, could you please inform us about important vulnerabilities/security
flaws fixed in 0.93.1?
My best regards,
Eren
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
