[Bug 66510] Re: Security vulnerability in ClamAV

2006-10-24 Thread Martin Pitt 
Reopening, edgy is not yet fixed.

** Changed in: clamav (Ubuntu)
   Importance: Undecided = High
   Status: Fix Released = In Progress

-- 
Security vulnerability in ClamAV
https://launchpad.net/bugs/66510

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 66510] Re: Security vulnerability in ClamAV

2006-10-24 Thread Martin Pitt 
We should also apply this to Dapper.

** Changed in: clamav (Ubuntu Dapper)
   Importance: Undecided = High
   Status: Unconfirmed = In Progress

-- 
Security vulnerability in ClamAV
https://launchpad.net/bugs/66510

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 66510] Re: Security vulnerability in ClamAV

2006-10-24 Thread Kees Cook 
** Changed in: clamav (Ubuntu Dapper)
   Status: In Progress = Fix Released

** Changed in: clamav (Ubuntu)
   Status: In Progress = Fix Released

-- 
Security vulnerability in ClamAV
https://launchpad.net/bugs/66510

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 66510] Re: Security vulnerability in ClamAV

2006-10-24 Thread Kees Cook 
clamav (0.88.4-1ubuntu2) edgy; urgency=low

  * SECURITY UPDATE: multiple denial of service attacks in file processors.
  * Add 'debian/patches/30_pe_chm_overflows.dpatch' to close overflows.
Patch from Debian stable (Closes Malone #66510).
  * References
CVE-2006-4182, CVE-2006-5295

-- 
Security vulnerability in ClamAV
https://launchpad.net/bugs/66510

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 66510] Re: Security vulnerability in ClamAV

2006-10-24 Thread Kees Cook 
clamav (0.88.2-1ubuntu1.2) dapper-security; urgency=low

  * SECURITY UPDATE: multiple denial of service attacks in file processors. 
  * Add 'debian/patches/30_pe_chm_overflows.dpatch' to close overflows.
Patch from Debian stable (Closes Malone #66510).
  * References
CVE-2006-4182, CVE-2006-5295

-- 
Security vulnerability in ClamAV
https://launchpad.net/bugs/66510

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 66510] Re: Security vulnerability in ClamAV

2006-10-23 Thread Kees Cook 

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2006-4018

** CVE removed: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2006-4018

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2006-4182

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2006-5295

** Changed in: clamav (Ubuntu)
   Status: Unconfirmed = Confirmed

** Attachment added: patch from upstream debian stable
   http://librarian.launchpad.net/4930563/clamav-security.diff

-- 
Security vulnerability in ClamAV
https://launchpad.net/bugs/66510

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 66510] Re: Security vulnerability in ClamAV

2006-10-23 Thread Kees Cook 
This will be fixed in edgy, and dapper will be available shortly.

** Changed in: clamav (Ubuntu)
   Status: Confirmed = Fix Released

-- 
Security vulnerability in ClamAV
https://launchpad.net/bugs/66510

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 66510] Re: Security vulnerability in ClamAV

2006-10-17 Thread Nicola 
Look at this bug report:

https://launchpad.net/distros/ubuntu/+source/clamav/+bug/53856

is there since July ...

seems no developer care about ...

-- 
Security vulnerability in ClamAV
https://launchpad.net/bugs/66510

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs