Steve Kemp wrote: > > I see no copy of the vulnerable code in the Debian version of unzoo, > I suspect this is only an issue for the non-free version of unzoo, > which we'll not release an update for.
I don't believe this issue is important; if a antivirus scanning solution uses external packers it should rather implement timeouts/upper limits for executed external programs. For unzoo being called on the shell it's a non-issue anyway. Cheers, Moritz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]