> > Added: No. Worm.SCO.A found even with 0.65-BugFixesFromCVS-20031123.
> No, it is not deprecated. The comment "Folks, stop wasting our time,
> please!" means "we've been detecting Worm.SCO.A for ages now; please stop
> sending us more samples."
Perhaps it's because my english sucks but for me 'Worm.SCO.A found even
with 0.65-BugFixesFromCVS-20031123' means that 0.65 can't detected it.
0.65 was released on november the 12 (before this bugfix).
But analysing the changlog of the last CVS I've found:
Some virus should pass 0.65 along these notes (especialy Dumaru.Y like
said in the db-update ml):
+++++++++++
Tue Feb 3 22:58:10 GMT 2004 (njh)
---------------------------------
* libclamav: Catch another example of Worm.Dumaru.Y
+++++++++++
Fri Jan 23 08:52:49 GMT 2004 (njh)
----------------------------------
* libclamav: Add detection of uuencoded viruses in single part
multipart/mixed files
+++++++++++
Fri Jan 9 10:21:27 GMT 2004 (njh)
----------------------------------
* libclamav: Locate uuencoded viruses hidden in text poritions of
multipart/mixed mime messages
+++++++++++
Sun Dec 14 18:07:44 GMT 2003 (njh)
----------------------------------
* libclamav: not all viruses were being found in embedded RFC822
messages
+++++++++++
And also buffer overflow ?
+++++++++++
Mon Nov 17 13:28:16 IST 2003 (njh)
----------------------------------
* libclamav: Prevent buffer overflow in broken uuencoded files
Handle spaces at the end of lines of MIME headers
+++++++++++
>
> The SCO worm is detected by ClamAV 0.60 with a current set of signatures.
I get 8 000 SCO.A each day. Most of them are detected by 0.65 but some
had pass before i've upgrade to CVS. Same pb with Dumaru.Y.
>
> 0.65 is the latest stable release. For many people it works fine. Only
> those who need the newer features, or the bugfixes, which are in the CVS tree
> need use anything more recent.
I'd love know wich bugfix are available (and which bug are found)
without having to read the changelog of the CVS.
Regards.
--
==================
Cedric Foll
Ingénieur sécurité & réseaux, Rectorat de Rouen
mèl: [EMAIL PROTECTED]
tèl: 02 35 14 77 51
"L'orgueil a plus de part que la bonté
aux remontrances que nous faisons à
ceux qui commettent des fautes; et nous
ne les reprenons pas tant pour les en
corriger que pour leur persuader que
nous en sommes exempts."
La rochefoucauld
===================
signature.asc
Description: Ceci est une partie de message =?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=
