* Michael Gilbert:

> there is currently an unpatched vulnerability in clamav (stable and
> testing) which has yet to receive a cve id.  the bug has been
> submitted to the debian bts [1], but it has not yet been entered into
> the security tracker.  please update the tracker to include this
> issue.

It's already been there for a couple of hours.  It's CVE-2008-5314.

> btw, would it be possible/worthwhile to automate tracker updates by
> parsing/scraping the bug database for bugs tagged security?

This will lead to a lot of noise because people set it overeagerly
when reporting bugs.  Something to compare the database with the BTS
would definitely be welcome, but automatic import ist not feasible,
IMHO.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to