New ClamAV out
Denis Beauchemin
Denis.Beauchemin at USherbrooke.ca
Tue Dec 12 14:57:35 GMT 2006
Release Name: 0.88.7
Hello all,
Our security guy pointed the following advisory for Clam 0.88.6 and
prior versions: http://www.frsirt.com/english/advisories/2006/4948
Clam AntiVirus MIME Attachments Handling Remote Denial of Service
Vulnerability
This comes from Clam 0.88.7:
This version improves scanning of mail and tar files.
Changes:
Mon Dec 11 02:47:03 CET 2006
----------------------------
* Bugfixes:
- libclamav/message.c: handle consecutive errors in base64 decoding
- libclamav/mbox.c: honour recursion limit when scanning email messages
- clamscan: new option --mail-max-recursion
- clamd/clamav-milter: new option MailMaxRecursion
- libclamav/untar.c: honour archive limits
Denis
--
_
°v° Denis Beauchemin, analyste
/(_)\ Université de Sherbrooke, S.T.I.
^ ^ T: 819.821.8000x62252 F: 819.821.8045
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3595 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20061212/e22f5261/smime.bin
More information about the MailScanner
mailing list