Page 1 of 1

ClamAV vulnerability

Posted: Wed Jan 31, 2018 8:50 am
by faris
There's some sort of update out for ClamAV regarding a vulnerability.

What's the situation for the ASL repo? There's no update that I can see.

Thanks,

Re: ClamAV vulnerability

Posted: Thu Feb 01, 2018 1:01 pm
by mikeshinn
It was released earlier this week. That said, systems running ASL kernels were already immune to compromise from these vulnerabilities.

Re: ClamAV vulnerability

Posted: Thu Feb 01, 2018 1:38 pm
by faris
I'm not seeing it in the atomic repo (as used by our Project Gamera boxes, which rely on clamd!)?

But it is in the ASL repo - thanks.

Re: ClamAV vulnerability

Posted: Thu Feb 01, 2018 4:07 pm
by mikeshinn
Yes, its in the ASL repos. The free repos may lag the customer repos.

Re: ClamAV vulnerability

Posted: Fri Feb 02, 2018 1:39 pm
by faris
I understand. Its just that I imagined there might be an exception in this case, given that it is apparently a nasty vulnerability and especially when it would affect anyone with PG boxes.

Please don't think I'm complaining though! Like anyone else who uses these repos, I am extremely grateful for what you provide, out of the kindness of your hearts, without asking for anything in return.