From owner-freebsd-questions@FreeBSD.ORG Wed Sep 14 09:54:39 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4BEBA16A41F for ; Wed, 14 Sep 2005 09:54:39 +0000 (GMT) (envelope-from chantal@antenna.nl) Received: from site4u.nl (fanth.site4u.nl [194.9.84.88]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8F6A143D46 for ; Wed, 14 Sep 2005 09:54:38 +0000 (GMT) (envelope-from chantal@antenna.nl) Received: from [192.168.4.11] [62.221.235.161] by site4u.nl with ESMTP (SMTPD32-8.15) id A133EE100C2; Wed, 14 Sep 2005 11:45:23 +0200 Message-ID: <4327F35A.4060407@antenna.nl> Date: Wed, 14 Sep 2005 11:54:34 +0200 From: Chantal Rosmuller User-Agent: Mozilla Thunderbird 0.9 (X11/20041103) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Dan Nelson References: <4320494D.6030503@antenna.nl> <200509082309.43229.yuanjue122@gmail.com> <20050908173948.GE49084@xor.obsecurity.org> <200509090813.06887.yuanjue122@gmail.com> <4321328C.6090306@antenna.nl> <20050909142359.GD84582@dan.emsphone.com> In-Reply-To: <20050909142359.GD84582@dan.emsphone.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org, Kris Kennaway Subject: Re: question about zlib security patch X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Sep 2005 09:54:39 -0000 Dan Nelson wrote: >In the last episode (Sep 09), Chantal Rosmuller said: > > >>Thanks everyone for the advice, I installed the sources and applied >>the patch, so I guess I took care of the zlib security issue The >>clamav error remained though but someone at the qmail rocks >>mailinglist suggested that clamav cannot see that zlib is patched so >>it is safe to ignore the error. To be on the safe side I will post >>the question about the error on the clamav mailing list. >> >> > >Yes, clamav only checks the version number in the header; it doesn't >actually test the bug. > > > Thanks, good to know Chantal