Nigel, Since I couldn't find any other reference to current CHM bugs at clamav.net I went ahead and posted one: https://wwws.clamav.net/bugzilla/show_bug.cgi?id=742
They seem pretty emphatic about not supporting clamav-win32... "Please do not report any bug affecting software derived from ClamAV and distributed by a third party (e.g. ClamWin, clamav-win32, ClamXav) because we have no control over them. Contact their developers instead. Bugs in the CygWin based ports like ClamWin and clamav-win32 should be reported to Reini Urban" ...so I mentioned your specific instruction to post there Finally, I understand your point of view with regards to broadcasting vulnerabilities, but I figured it was already implied by the common use of clamav as an MTA scanner, and in my defense I simultaneously offered a solution that I've already tested and implemented (downgrade to 0.91.2). On that note, I STRONGLY URGE anyone using clamav 0.92 for MTA scanning or other exposed uses in production systems to immediately test their susceptibility to this problem and take appropriate action (possibly including a downgrade to 0.91.2). Ryan ----- Original Message ----- From: "Nigel Horne" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Sunday, December 23, 2007 06:57 Subject: Re: [clamav-win32] clamd process hangs on particular file > >> FYI, it does not seem to be limited to .chm files, clamav win >> hangs indefinately if I try and scan a winzip.exe installation file. > > Please read: > >> > This happens on all systems, not just Windows, so the best place to > discuss this would be >> > clamav-users, not clamav-win32 > > Please also read: > >> Please raise it as a bug report at www.clamav.net. > > Please take note of this as well: > > BTW, never ever ever divulge possible DOSs on a public mailing list. You > never > know who may be reading. > > -Nigel > > _______________________________________________ > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32 > _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32
