Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Sep 2005 11:54:34 +0200
From:      Chantal Rosmuller <chantal@antenna.nl>
To:        Dan Nelson <dnelson@allantgroup.com>
Cc:        freebsd-questions@freebsd.org, Kris Kennaway <kris@obsecurity.org>
Subject:   Re: question about zlib security patch 
Message-ID:  <4327F35A.4060407@antenna.nl>
In-Reply-To: <20050909142359.GD84582@dan.emsphone.com>
References:  <4320494D.6030503@antenna.nl>	<200509082309.43229.yuanjue122@gmail.com>	<20050908173948.GE49084@xor.obsecurity.org>	<200509090813.06887.yuanjue122@gmail.com>	<4321328C.6090306@antenna.nl> <20050909142359.GD84582@dan.emsphone.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Dan Nelson wrote:

>In the last episode (Sep 09), Chantal Rosmuller said:
>  
>
>>Thanks everyone for the advice, I installed the sources and applied
>>the patch, so I guess I took care of the zlib security issue The
>>clamav error remained though but someone at the qmail rocks
>>mailinglist suggested that clamav cannot see that zlib is patched so
>>it is safe to ignore the error. To be on the safe side I will post
>>the question about the error on the clamav mailing list.
>>    
>>
>
>Yes, clamav only checks the version number in the header; it doesn't
>actually test the bug.
>
>  
>
Thanks, good to know

Chantal



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4327F35A.4060407>