~ubuntu-branches/ubuntu/dapper/clamav/dapper-updates

• Changes
• Files

~ubuntu-branches/ubuntu/dapper/clamav/dapper-updates » Changes from revision 25

From Revision 25 to 6

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
25		* SECURITY UPDATE: fix integer overflow in BZ2_decompress() * SECURITY UPDATE: fix integer overflow in BZ2_decompress()   - libclamav/nsis/bzlib.c: return error if N is larger than 2*1024^2 which     keeps us from overflowing but leaves enough room for the 900k maximum     value of the RUNA/RUNB encoding   - patch based on upstream bzip2   - CVE-2010-0405	Jamie Strandboge	0.95.3+dfsg-1ubuntu0.09.04~dapper4.1	13 years ago
24		* SECURITY UPDATE: fix crash via heap overflow when processi... * SECURITY UPDATE: fix crash via heap overflow when processing malformed   PDF file   - libclamav/pdf.c: make sure enough space is allocated for tmpbuf in     cli_pdf()   - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2016   - clamav git f0eb394501ec21b9fe67f36cbf5db788711d4236	Jamie Strandboge	0.95.3+dfsg-1ubuntu0.09.04~dapper4	13 years ago
23		* SECURITY UPDATE: (LP: #553266) * SECURITY UPDATE: (LP: #553266) * References clamav bugs #1771 and #1826 * libclamav/mspack.c: fix Quantum decompressor (bb#1771)   - clamav git 224fee54dd6cd8933d7007331ec2bfca0398d4b4 * libclamav/mspack.c: improve unpacking of malformed cabinets (bb#1826)   - clamav git 31b77b3fb589ab07e7b4d84f8b3825178864ee51 * debian/clamav-milter.templates: remove comments and blank lines at the   beginning of the file since Dapper doesn't like them (LP: #558598)	Scott Kitterman	0.95.3+dfsg-1ubuntu0.09.04~dapper3	14 years ago
22		No change rebuild from dapper-backports per microrelease exc... No change rebuild from dapper-backports per microrelease exception	Jamie Strandboge	0.95.3+dfsg-1ubuntu0.09.04~dapper2	14 years ago
21		No change rebuild from backports No change rebuild from backports	Jamie Strandboge	0.94.dfsg.2-1ubuntu0.3~dapper2	14 years ago
20		[ Leonel Nunez ] [ Leonel Nunez ] * SECURITY UPDATE: * [CVE-2008-5314]: remote attack by sending a specially crafted JPEG   file   libclamav/special.c, libclamav/special.h, libclamav/scanners.c * [CVE-2008-3912]: libclamav/mbox.c, libclamav/message.c:   out-of-memory  null dereferences * [CVE-2008-3914]: libclamav/htmlnorm.c, libclamav/others.c,   libclamav/sis.c: fd leaks * [CVE-2008-3913]: freshclam/manager.c: memory leaks * added 29_CVE-2008-3912.dpatch 30_CVE-2008-3913.dpatch    32_cli_check_jpeg_exploit.dpatch  31_CVE-2008-3914.dpatch * References: LP #271546, #304017 [ Scott Kitterman ] * SECURITY UPDATE: re-enable modules disabled due to resolved security   deficiencies: * References: Clamav svn commit 4550, LP #317923	Scott Kitterman	0.92.1~dfsg2-1.1~dapper3.3	15 years ago
19		* SECURITY UPDATE: fix off-by-one heap overflow * SECURITY UPDATE: fix off-by-one heap overflow   * References : LP #296704, Debian Bug #505134 * Updated 28_of-by-1.dpatch   - libclamav/vba_extract.c	Leonel Nunez	0.92.1~dfsg2-1.1~dapper3.2	15 years ago
18		* SECURITY UPDATE: fix possible DoS due to invalid memory ac... * SECURITY UPDATE: fix possible DoS due to invalid memory access * References   CVE-2008-2713   Debian Bug #490925 * Updated 27_petite.c.dpatch (LP: #249316)   - libclamav/petite.c: fix one more spot	Michael Casadevall	0.92.1~dfsg2-1.1~dapper3.1	15 years ago
17		* SECURITY UPDATE: fix possible invalid memory access * SECURITY UPDATE: fix possible invalid memory access * added  27_petite.c.dpatch: (LP: #238575)   - libclamav/petite.c: fix possible invalid memory access * References   CVE-2008-2713	Leonel Nunez	0.92.1~dfsg2-1.1~dapper3	15 years ago
16		no change rebuild for -security no change rebuild for -security	Jamie Strandboge	0.92.1~dfsg2-1.1~dapper2	15 years ago
15		* Source backport for dapper-backports. Changes: * Source backport for dapper-backports.  Changes:   - Change ${binary:Version} and ${source:Version} depends to     {Source-Version} in debian/control and drop dpkg-dev     dependency to (>= 1.13.11) as a result   - Add CC=gcc-3.4 to configure options in debian/rules and build-dep for     gcc-3.4 to avoid GCC bug 28045   - Remove leading comments from debian/clamav-base.templates and     debian/clamav-freshclam.templates to work around Dapper tool chain     problem (inserts extra line in the template).	Scott Kitterman	0.92.1~dfsg2-1.1~dapper1	16 years ago
14		* SECURITY UPDATE: possible integer overflow and tempfile sy...  * SECURITY UPDATE: possible integer overflow and tempfile symlink    vulnerability  * Added : 27_others.c.CVE-2007-6595.dpatch Fixes Tempfile symlink    vulnerability  * Added 26_pe.c.CVE-2008-0318.dpatch: Fixes posible integer overflow  * References  CVE-2007-6595 CVE-2008-0318 (LP: 191150)	Leonel Nunez	0.92~dfsg-2~dapper1ubuntu0.1	16 years ago
13		* Source backport for dapper-backports. Changes: * Source backport for dapper-backports.  Changes:   - Change ${binary:Version} and ${source:Version} depends to      {Source-Version} in debian/control and drop dpkg-dev      dependency to (>= 1.13.11) as a result   - Add CC=gcc-3.4 to configure options in debian/rules and build-dep for     gcc-3.4 to avoid GCC bug 28045   - Remove leading comments from debian/clamav-base.templates and      debian/clamav-freshclam.templates to work around Dapper tool chain      problem (inserts extra line in the template.	Scott Kitterman	0.92~dfsg-2~dapper1	16 years ago
12		* SECURITY UPDATE: Fix a MIME decode bypass vulnerability. * SECURITY UPDATE: Fix a MIME decode bypass vulnerability. * Add 'debian/patches/35_message_c_mimedecode_bypass.dpatch'   for the fix, taken from the difference of liblcamav/message.c   between this and the fixed version (0.88.7). * References:   CVE 2006-6406. * Also disable the use of podebconf in debian rules,  since it    mangles debian/control and updates the translations, which is    not suited for a security update.	Stefan Potyra	0.88.2-1ubuntu1.3	17 years ago
11		* SECURITY UPDATE: multiple denial of service attacks in fil... * SECURITY UPDATE: multiple denial of service attacks in file processors.  * Add 'debian/patches/30_pe_chm_overflows.dpatch' to close overflows.   Patch from Debian stable (Closes Malone #66510). * References   CVE-2006-4182, CVE-2006-5295	Kees Cook	0.88.2-1ubuntu1.2	17 years ago
10		* Add 'debian/patches/20_cve-2006-4018.dpatch'. Patch from ... * Add 'debian/patches/20_cve-2006-4018.dpatch'.  Patch from upstream   version 0.88.4.  Fixes heap overflow in UPX unpacker, which could   cause denial of service or remote code execution. * CVE-2006-4018	Kees Cook	0.88.2-1ubuntu1.1	17 years ago
9		* Merged new (debian) upstream * Merged new (debian) upstream * Re-Added fixed from Martin Pitt (0.88.1-1ubuntu1)    and Chuck Short (0.88.1-1ubuntu2)	Stephan Hermann	0.88.2-1ubuntu1	17 years ago
8		* debian/clamav-daemon.init. * debian/clamav-daemon.init.   + Fixed init script. (Closes: Malone #39263)	Chuck Short	0.88.1-1ubuntu2	17 years ago
7		* Synchronize to Debian to get new upstream microrelease (UV... * Synchronize to Debian to get new upstream microrelease (UVF exception   approved by Daniel Holbach). This fixes the following vulnerabilities:   - CVE-2006-1614: integer overflow in the PE header parser   - CVE-2006-1615: format string vulnerabilities in logging code   - CVE-2006-1630: DoS due to invalid memory access in cli_bitset_set() * debian/clamav-base.init-stub: Protect 'x && y' with '|| true' to not break   init script if it's run under set -e.	Martin Pitt	0.88.1-1ubuntu1	18 years ago
6		* Ship a new file, /etc/clamav/clamav-base.init, which is a ... * Ship a new file, /etc/clamav/clamav-base.init, which is a stub   containing common setup functions required for each of the other   three init scripts.  Currently, all it does is create the /var/run   directory that we need if /var/run is on tmpfs. * Make all three of our init scripts source the above file.	Adam Conrad	0.88-2ubuntu1	18 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1