Re: [clamav-users] New ClamAV update?

2017-07-03 Thread Joel Esler (jesler)
All the ones listed in that list are fixed if you are running the current version. -- Joel Esler | Talos: Manager | jes...@cisco.com On Jul 3, 2017, at 9:54 AM, Mark Foley mailto:mfo...@novatec-inc.com>> wrote: On Sun, 02 Jul 2017 11:25:34 -0700 Al Varnell mailto

Re: [clamav-users] New ClamAV update?

2017-07-03 Thread Mark Foley
On Sun, 02 Jul 2017 11:25:34 -0700 Al Varnell wrote > On Jul 2, 2017, at 7:44 AM, Mark Foley wrote: > > On Jun 29, 2017, at 5:10 PM, Al Varnell wrote: > >> The list of CVE's known to apply to ClamAV can be found here: > >>

Re: [clamav-users] New ClamAV update?

2017-07-02 Thread Al Varnell
On Jul 2, 2017, at 7:44 AM, Mark Foley wrote: > On Jun 29, 2017, at 5:10 PM, Al Varnell wrote: >> The list of CVE's known to apply to ClamAV can be found here: >> . > > I've check that known CVE list.

Re: [clamav-users] New ClamAV update?

2017-07-02 Thread Mark Foley
On Jun 29, 2017, at 5:10 PM, Al Varnell mailto:alvarn...@mac.com>> wrote: > The list of CVE's known to apply to ClamAV can be found here: > . I've check that known CVE list. That's a great link! Is

Re: [clamav-users] New ClamAV update?

2017-07-01 Thread Joel Esler (jesler)
We are currently planning on 0.99.3 coming out near the end of July. -- Joel Esler | Talos: Manager | jes...@cisco.com On Jun 29, 2017, at 5:10 PM, Al Varnell mailto:alvarn...@mac.com>> wrote: CVE-2012-6706 concerns a VMSF_DELTA memory corruption was discovered in

Re: [clamav-users] New ClamAV update?

2017-06-29 Thread Al Varnell
CVE-2012-6706 concerns a VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. . The list of CVE's known

[clamav-users] New ClamAV update?

2017-06-29 Thread Paul Kosinski
I just got a security notice from SuSE talking about updating ClamAV. The CVE looks quite old: is SuSE so far behind, or is there something recent to worry about? SUSE Security Update: Security update for clamav _