Re: Need to track clamav vulnerability
* Michael Gilbert:
> there is currently an unpatched vulnerability in clamav (stable and
> testing) which has yet to receive a cve id. the bug has been
> submitted to the debian bts [1], but it has not yet been entered into
> the security tracker. please update the tracker to include this
> issue.
It's already been there for a couple of hours. It's CVE-2008-5314.
> btw, would it be possible/worthwhile to automate tracker updates by
> parsing/scraping the bug database for bugs tagged security?
This will lead to a lot of noise because people set it overeagerly
when reporting bugs. Something to compare the database with the BTS
would definitely be welcome, but automatic import ist not feasible,
IMHO.
Reply to: