Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 19 Nov 2014 08:19:19 +0100
From: Gynvael Coldwind <>
Subject: Re: RE: [security-vendor] Re: Fuzzing
 findings (and maybe CVE requests) - Image/GraphicsMagick, elfutils, GIMP,
 gdk-pixbuf, file, ndisasm, less

On Wed, Nov 19, 2014 at 7:41 AM, Michal Zalewski <>
> Tavis looked at several commercial AV engines some time ago, I think
> it wasn't pretty. I suspect that clamav may be very much worth fuzzing
> or auditing.
> /mz

We fuzzed clamav in 2012 or so and reported some bugs. Definitely a good

To be honest I would love to see all AV security tested, not just the open
source one. If they claim they make people more secure, it would be great
to know that that is backed by e.g. fuzzing and bug bounty programs.

Gynvael Coldwind

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.