LTS

2019-08-10 Thread Доценко Дмитро
-- З повагою, Старший менеджер відділу сервісних звернень м.Одеса, Семафорний пров., 4Т 7773 (внутрішній номер)

clamav triage (updated via -updates)

2019-08-10 Thread Hugo Lefeuvre
Hi, I am taking a look at clamav's zip bomb issue[0] in jessie. This issue is no-dsa in buster/stretch: "ClamAV is updated via -updates". What is this -updates mechanism? I might have missed something, does clamav have an auto-update mechanism? regards, Hugo [0] https://bugs.debian.org/934359

Re: clamav triage (updated via -updates)

2019-08-10 Thread Holger Levsen
hi, On Sat, Aug 10, 2019 at 10:03:38AM +0200, Hugo Lefeuvre wrote: > I am taking a look at clamav's zip bomb issue[0] in jessie. This issue is > no-dsa in buster/stretch: "ClamAV is updated via -updates". > > What is this -updates mechanism? I might have missed something, does clamav > have an au

Re: clamav triage (updated via -updates)

2019-08-10 Thread Moritz Muehlenhoff
On Sat, Aug 10, 2019 at 10:03:38AM +0200, Hugo Lefeuvre wrote: > Hi, > > I am taking a look at clamav's zip bomb issue[0] in jessie. This issue is > no-dsa in buster/stretch: "ClamAV is updated via -updates". > > What is this -updates mechanism? I might have missed something, does clamav > have a

Re: clamav triage (updated via -updates)

2019-08-10 Thread Hugo Lefeuvre
Hi Holger and Moritz, > > What is this -updates mechanism? I might have missed something, does clamav > > have an auto-update mechanism? > > It's what used to be volatile some years ago. ClamAV is only getting updated > via -updates as it can't reasonably be part of a regular stable release; new