I've seen the clamav security breach notice from SANS, and read the recent threads here in this forum. Given that someone has already identified a diff, when will ver 0.87 be available?
Just to opine a bit: 1) I looked forward to clamav being added as an official package/port for OpenBSD. But the result seems to be that changes are slower to be incorporated. Maybe there's a reason for this??? 2) The foolishness with the arc, unarj & unrar packages should be stopped. If these packages can't be included in the OpenBSD package set, then the OpenBSD port of clamav should be configured not to use them. I don't recall ever getting an arc, rar or arj archive in an email attachment; I for one would be most happy to simply strip any such attachments, and send a message back to the sender to "get with the program". V/r, Jay
