*** This bug is a duplicate of bug 217256 ***
    https://bugs.launchpad.net/bugs/217256

CVE 2008-1837 does refer to code not present in the Debian/Ubuntu
package.  The others are all fixed in 0.92.1~dfsg2-1.1.  The fixes were
backported from 0.93 shortly after 0.93's release.  Progress of these
fixes (these new CVE numbers seem duplicative ) is being tracked in Bug
#217256.

** CVE removed: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2008-1837

** CVE removed: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2008-1836

** CVE removed: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2008-1835

** CVE removed: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-6596

** This bug has been marked a duplicate of bug 217256
   ClamAV Upack Processing Buffer Overflow Vulnerability

-- 
[clamav] several open CVE issues
https://bugs.launchpad.net/bugs/227327
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to