Re: bzip2 update please

2011-01-12 Thread Reini Urban
2011/1/12 Yaakov (Cygwin/X) : > On Tue, 2011-01-11 at 12:43 +0100, Reini Urban wrote: >> Dear bzip2 maintainer (Charles), >> 1.0.6 is required against the CVE-2010-0405 decompression attack. >> >> Did Yaakov overlook this? Normally he's the one bugging first. >> clamav had a configure check for thi

Re: bzip2 update please

2011-01-11 Thread Yaakov (Cygwin/X)
On Tue, 2011-01-11 at 12:43 +0100, Reini Urban wrote: > Dear bzip2 maintainer (Charles), > 1.0.6 is required against the CVE-2010-0405 decompression attack. > > Did Yaakov overlook this? Normally he's the one bugging first. > clamav had a configure check for this. I did miss this one, but I'll ad

bzip2 update please

2011-01-11 Thread Reini Urban
Dear bzip2 maintainer (Charles), 1.0.6 is required against the CVE-2010-0405 decompression attack. See http://bzip.org/ and http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0405 Did Yaakov overlook this? Normally he's the one bugging first. clamav had a configure check for this. -- Reini U