[Mimedefang] FYI: Exploit.JPEG.comment false positive fixed in clamav-devel

Jona Brax jblistat at sll.fi
Sat Oct 9 09:37:09 EDT 2004


FYI:
After upgrading to clamav-0.80rc3 I noticed some false positives tagged 
with "Exploit.JPEG.comment"

With Google I found out that there is indeed a bug in clamav that has 
been fixed in cvs 2004-09-30:
http://lists.clamav.net/lurker/message/20040930.002847.d5a00f87.en.html

You can get clamav-devel with:
cvs -d:pserver:anonymous at cvs.sourceforge.net:/cvsroot/clamav login
<enter>
cvs -z3 -d:pserver:anonymous at cvs.sourceforge.net:/cvsroot/clamav co 
clamav-devel

In RH9 autoconf-2.59-5.noarch.rpm from rawhide is needed to compile 
clamav-devel.
Another option might be to copy libclamav/matcher.c from cvs to 
clamav-0.80rc3 before compiling
(I have not tested this)

Jona



More information about the MIMEDefang mailing list