~ubuntu-branches/ubuntu/hardy/clamav/hardy-updates : changes

~ubuntu-branches/ubuntu/hardy/clamav/hardy-updates » Changes from revision 56

From Revision 56 to 37

Rev	Summary	Authors	Tags	Date
56	[ Seth Arnold ] [ Seth Arnold ] * SECURITY UPDATE: Updated to 0.97.8 to fix multiple security issues. - CVE-2013-2020 and CVE-2013-2021 [ Scott Kitterman ] * Merge from Debian unstable (LP: #1172981). Remaining changes: - Drop build-dep on electric-fence (in Universe) - Add apparmor profiles for clamd and freshclam along with maintainer script changes * Changes to adapt to Hardy: - Build without llvm support on lpia to fix FTBFS (not a regression as llvm has never built on hardy lpia) - Drop -T -W from apparmor_parser calls in clamav-daemon and freshclam postinsts since it is not supported in Hardy's apparmor - Drop deny rule in freshclam apparmor profile since deny is not supported in Hardy's apparmor - Drop dh_lintian from debian/rules and adjust version of debhelper build-dep - Drop build-dep and libclamav-dev depends on non-existent libtommath-dev - Changed Section to 'utils' for clamav-dbg package - Ignore test suite errors on hppa - Build-depend on libltdl3-dev instead of libltdl-dev - Drop hardening flags changes - Drop unneeded versioning on lsb-base (clamav ships it's own status function)	Scott Kitterman	0.97.8+dfsg-1ubuntu1.08.04.1	10 years ago
55	[ Marc Deslauriers ] [ Marc Deslauriers ] * SECURITY UPDATE: Updated to 0.97.7 to fix multiple security issues. (LP: #1157385) - CVE numbers pending [ Scott Kitterman ] * Changes to adapt to Hardy: - Build without llvm support on lpia to fix FTBFS (not a regression as llvm has never built on hardy lpia) - Drop -T -W from apparmor_parser calls in clamav-daemon and freshclam postinsts since it is not supported in Hardy's apparmor - Drop deny rule in freshclam apparmor profile since deny is not supported in Hardy's apparmor - Drop dh_lintian from debian/rules and adjust version of debhelper build-dep - Drop build-dep and libclamav-dev depends on non-existent libtommath-dev - Changed Section to 'utils' for clamav-dbg package - Ignore test suite errors on hppa - Build-depend on libltdl3-dev instead of libltdl-dev - Drop hardening flags changes - Drop unneeded versioning on lsb-base (clamav ships it's own status function)	Scott Kitterman	0.97.7+dfsg-1ubuntu0.08.04.1	11 years ago
54	* SECURITY UPDATE: denial of service via double free in vba ... * SECURITY UPDATE: denial of service via double free in vba processing - libclamav/vba_extract.c: set buf to NULL when it gets freed. - http://git.clamav.net/gitweb?p=clamav-devel.git;a=commit;h=d21fb8d975f8c9688894a8cef4d50d977022e09f - CVE-2011-1003	Marc Deslauriers	0.95.3+dfsg-1ubuntu0.09.04~hardy2.6	13 years ago
53	* SECURITY UPDATE: fix integer overflow in BZ2_decompress() * SECURITY UPDATE: fix integer overflow in BZ2_decompress() - libclamav/nsis/bzlib.c: return error if N is larger than 2*1024^2 which keeps us from overflowing but leaves enough room for the 900k maximum value of the RUNA/RUNB encoding - patch based on upstream bzip2 - CVE-2010-0405	Jamie Strandboge	0.95.3+dfsg-1ubuntu0.09.04~hardy2.5	13 years ago
52	* SECURITY UPDATE: fix crash via heap overflow when processi... * SECURITY UPDATE: fix crash via heap overflow when processing malformed PDF file - libclamav/pdf.c: make sure enough space is allocated for tmpbuf in cli_pdf() - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2016 - clamav git f0eb394501ec21b9fe67f36cbf5db788711d4236	Jamie Strandboge	0.95.3+dfsg-1ubuntu0.09.04~hardy2.4	13 years ago
51	* SECURITY UPDATE: (LP: #553266) * SECURITY UPDATE: (LP: #553266) * References clamav bugs #1771 and #1826 * libclamav/mspack.c: fix Quantum decompressor (bb#1771) - clamav git 224fee54dd6cd8933d7007331ec2bfca0398d4b4 * libclamav/mspack.c: improve unpacking of malformed cabinets (bb#1826) - clamav git 31b77b3fb589ab07e7b4d84f8b3825178864ee51	Scott Kitterman	0.95.3+dfsg-1ubuntu0.09.04~hardy2.3	14 years ago
50	No change rebuild from hardy-backports per microrelease exce... No change rebuild from hardy-backports per microrelease exception	Jamie Strandboge	0.95.3+dfsg-1ubuntu0.09.04~hardy2.2	14 years ago
49	No change rebuild from backports for use with ClamAV 0.94 No change rebuild from backports for use with ClamAV 0.94	Jamie Strandboge	0.94.dfsg.2-1ubuntu0.3~hardy4	14 years ago
48	* SECURITY UPDATE: re-enable modules disabled due to resolve... * SECURITY UPDATE: re-enable modules disabled due to resolved security deficiencies: * References * Clamav svn commit 4550 LP: #317923	Scott Kitterman	0.92.1~dfsg2-1.1ubuntu0.5	15 years ago
47	* SECURITY UPDATE: denial of service via out-of-memory null ... * SECURITY UPDATE: denial of service via out-of-memory null dereferences, memory leaks, and file descriptor leaks: - 29_CVE-2008-3912.dpatch: backported upstream fixes. - 30_CVE-2008-3913.dpatch: backported upstream fixes. - 31_CVE-2008-3914.dpatch: backported upstream fixes. - LP: #271546 * SECURITY UPDATE: denial of service via crafted JPEG file - 32_cli_check_jpeg_exploit.dpatch: backported upstream fixes. - CVE-2008-5314, LP: #304017	Leonel Nunez	0.92.1~dfsg2-1.1ubuntu0.4	15 years ago
46	* SECURITY UPDATE: fix off-by-one heap overflow * SECURITY UPDATE: fix off-by-one heap overflow * References : LP #296704, Debian Bug #505134 * Updated 28_of-by-1.dpatch - libclamav/vba_extract.c	Leonel Nunez	0.92.1~dfsg2-1.1ubuntu0.3	15 years ago
45	* SECURITY UPDATE: fix possible DoS due to invalid memory ac... * SECURITY UPDATE: fix possible DoS due to invalid memory access * References CVE-2008-2713 Debian Bug #490925 * Updated 27_petite.c.dpatch (LP: #249316) - libclamav/petite.c: fix one more spot	Scott Kitterman	0.92.1~dfsg2-1.1ubuntu0.2	15 years ago
44	* SECURITY UPDATE: fix possible invalid memory access * SECURITY UPDATE: fix possible invalid memory access * added 27_petite.c.dpatch: (LP: #238575) - libclamav/petite.c: fix possible invalid memory access * References CVE-2008-2713	Leonel Nunez	0.92.1~dfsg2-1.1ubuntu0.1	15 years ago
43	* Non-maintainer upload by the Security Team. * Non-maintainer upload by the Security Team. * This update addresses the following security issue: - CVE-2008-1833: heap-based buffer overflow allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary (Closes: #476694).	Nico Golde	0.92.1~dfsg2-1.1	16 years ago
42	* libclamav/pe.c: possible integer overflow in wwpack * libclamav/pe.c: possible integer overflow in wwpack * [CVE-2008-1100]: libclamav/pe.c: possible integer overflow in upack * [CVE-2008-1387]: libclamav/spin.c: possible integer overflow * libclamav/unarj.c: DoS in unarj	Stephen Gran	0.92.1~dfsg2-1	16 years ago
41	* Non-maintainer upload. * Non-maintainer upload. * Remove non-free unrar files and repack orig.tar.gz (Closes: #470073)	Scott Kitterman	0.92.1~dfsg2-0.1	16 years ago
40	* New upstream bugfix release * New upstream bugfix release - [2007-6595]: libclamav/others.c: symlink vulnerability cli_gentempfd now calls open with O_EXCL (closes: #458532) - [CVE-2008-0318]: libclamav/pe.c: possible integer overflow - libclamav/mew.c: possible heap corruption * Add a note to NEWS.Debian about unrar support being dropped (closes: #465203) * clamav-milter: off-by-one programming error in pingServer (closes: #458204) * Copyright now complete (thanks Scott Kitterman <scott@kitterman.com>) (closes: #456770) * Attempt to work around clamav-milter not bothering to check if another instance is running on startup (reported as LP bug 179169)	Stephen Gran	0.92.1~dfsg-1	16 years ago
39	Drop obsolete option NodalCoreAcceleration (closes: #457051) Drop obsolete option NodalCoreAcceleration (closes: #457051)	Stephen Gran	0.92~dfsg-2	16 years ago
38	Fake sync to get the new clamav into the NEW queue Fake sync to get the new clamav into the NEW queue	Scott Kitterman	0.92~dfsg-0build1	16 years ago
37	* Merge from Debian unstable. Remaining Ubuntu changes: * Merge from Debian unstable. Remaining Ubuntu changes: - Change maintainer to MOTU - Check to see if $RUNDIR exists before changing ownership in clamav-base postinst	Scott Kitterman	0.91.2-4ubuntu1	16 years ago

Older »