lp:ubuntu/hardy/clamav

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

43. By Nico Golde <email address hidden> on 2008-04-19

* Non-maintainer upload by the Security Team.
* This update addresses the following security issue:
  - CVE-2008-1833: heap-based buffer overflow allows remote
    attackers to execute arbitrary code via a crafted WWPack compressed
    PE binary (Closes: #476694).

42. By Stephen Gran on 2008-04-15

* libclamav/pe.c: possible integer overflow in wwpack
* [CVE-2008-1100]: libclamav/pe.c: possible integer overflow in upack
* [CVE-2008-1387]: libclamav/spin.c: possible integer overflow
* libclamav/unarj.c: DoS in unarj

41. By Scott Kitterman on 2008-03-08

* Non-maintainer upload.
* Remove non-free unrar files and repack orig.tar.gz (Closes: #470073)

40. By Stephen Gran on 2008-02-12

* New upstream bugfix release
  - [2007-6595]: libclamav/others.c: symlink vulnerability
    cli_gentempfd now calls open with O_EXCL (closes: #458532)
  - [CVE-2008-0318]: libclamav/pe.c: possible integer overflow
  - libclamav/mew.c: possible heap corruption
* Add a note to NEWS.Debian about unrar support being dropped
  (closes: #465203)
* clamav-milter: off-by-one programming error in pingServer
  (closes: #458204)
* Copyright now complete (thanks Scott Kitterman <email address hidden>)
  (closes: #456770)
* Attempt to work around clamav-milter not bothering to check if another
  instance is running on startup (reported as LP bug 179169)

39. By Stephen Gran on 2007-12-19

Drop obsolete option NodalCoreAcceleration (closes: #457051)

38. By Scott Kitterman on 2007-12-18

Fake sync to get the new clamav into the NEW queue

37. By Scott Kitterman on 2007-12-01

* Merge from Debian unstable. Remaining Ubuntu changes:
  - Change maintainer to MOTU
  - Check to see if $RUNDIR exists before changing ownership in clamav-base
    postinst

36. By Scott Kitterman on 2007-11-03

* Remove extraneous libcurl3-gnutls depends
* Remove extraneous Build-Depends on libcurl4-gnutls-dev
* Change debian/clamav-freshclam.init.in to use the documented method for
  specifying a PID file
* Use provided standard method to create the PID dir on upgrade in
  debian/clamav-base.postinst.in

35. By Scott Kitterman on 2007-10-12

Correct Postfix socket location for clamav-milter in
debian/clamav-milter.default (LP: #151850)

34. By Scott Kitterman on 2007-09-13

* Merge from Debian unstable. Remaining Ubuntu changes:
  - Update debian/watch so it works
  - Add libcurl3-gnutls depends for clamav-freshclam, clamav-milter,
    clamav-daemon
  - In debian/clamav-base.postinst.in add test on upgrade to create
    /var/run/clamav if it does not exist
  - debian/control: Maintainers updated for Ubuntu.
  - debian/clamav-freshclam.init.in specify pidfile when starting.
  - Add an explicit Build-Depends on libcurl4-gnutls-dev.