lp:ubuntu/jaunty-updates/clamav

Created by James Westby and last modified
Get this branch:
bzr branch lp:ubuntu/jaunty-updates/clamav
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Development

Recent revisions

71. By Jamie Strandboge

* SECURITY UPDATE: fix integer overflow in BZ2_decompress()
  - libclamav/nsis/bzlib.c: return error if N is larger than 2*1024^2 which
    keeps us from overflowing but leaves enough room for the 900k maximum
    value of the RUNA/RUNB encoding
  - patch based on upstream bzip2
  - CVE-2010-0405

70. By Jamie Strandboge

* SECURITY UPDATE: fix crash via heap overflow when processing malformed
  PDF file
  - libclamav/pdf.c: make sure enough space is allocated for tmpbuf in
    cli_pdf()
  - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2016
  - clamav git f0eb394501ec21b9fe67f36cbf5db788711d4236

69. By Jamie Strandboge

* SECURITY UPDATE: (LP: #553266)
* References clamav bugs #1771 and #1826
* libclamav/mspack.c: fix Quantum decompressor (bb#1771)
  - clamav git 224fee54dd6cd8933d7007331ec2bfca0398d4b4
* libclamav/mspack.c: improve unpacking of malformed cabinets (bb#1826)
  - clamav git 31b77b3fb589ab07e7b4d84f8b3825178864ee51
* based on work by Scott Kitterman

68. By Scott Kitterman

Update Jaunty per Clamav microversion release exception (LP: #473707)

67. By Scott Kitterman

* Fix clamd apparmor profile to work with havp (LP: #423669)
  - Thanks to Imre Gergely for the fix

66. By Scott Kitterman

* New upstream micro-version ugrade (LP: #394870)
* Upgrade packaging to karmic standard due to immaturity of 0.95 packaging
  when jaunty released:

[ Scott Kitterman ]
* Add the milter logrotate file to the list of purged files
  - Cherry picked from pkg-clamav git (thanks to Stephen Gran)
    0aebeb19f8169da097d21b021dd67ca06ffe3ca6

[ Jamie Strandboge ]
* update clamav-freshclam and clamav-daemon postinst to reload the
  individual AppArmor profiles instead of reloading all of AppArmor
  - LP: #397988

[ Michael Meskes ]
* Applied patch assembled by Christian Perrier <email address hidden>:
  - Debconf templates and debian/control reviewed by the debian-l10n-
    english team as part of the Smith review project. Closes: #523573
  - [Debconf translation updates]
    - Swedish. Closes: #525044
    - Japanese. Closes: #525084
    - French. Closes: #526024
    - Portuguese. Closes: #526644
    - Russian. Closes: #526727
    - German. Closes: #526730
    - Dutch. Closes: #526745
    - Galician. Closes: #527320
    - Basque. Closes: #530854
    - Finnish (closes: #534339)
* Made pid files word readable. There doesn't seem to be any sense in not
  doing this given that the information is available for everyone anyway.
  Closes: #527901

[ Stephen Gran ]
* Lots more milter maintainer script cleanups
* Don't abort dpkg on failed start (closes: #533397)
* Get rid of spurious patch downgrading version (closes: #533638)
* Should fix crash on unofficial sigs (closes: #525483)
* Get rid of ridiculous home rolled suid (closes: #522106)
* Freshclam gets 0400 or 0444 config file (closes: #524356)
* Debconf templates and debian/control reviewed by the debian-l10n-
  english team as part of the Smith review project. Closes: #523573
* [Debconf translation updates]
  - French (closes: #533667)
  - Portuguese (closes: #533779)
  - Russian (closes: #533548)
  - Swedish (closes: #533568)
  - Swedish. Closes: #525044
  - Japanese. Closes: #525084
  - French. Closes: #526024
  - Portuguese. Closes: #526644
  - Russian. Closes: #526727
  - German. Closes: #526730
  - Dutch. Closes: #526745
  - Galician. Closes: #527320
* Define status_of_proc in the event that it's not in lsb/init-functions
  (closes: #527903)
* Stop referencing /etc/default/clamav-milter and drop command line
  arguments in milter init script (closes: #526123)
* Fix wrong variable useage in milter init script
* More work on clamav-milter's init script

[ Michael Tautschnig ]
* Unignored make check results on ia64, sparc (alpha still broken): tell
  electric-fence that the alignment is at least 8 bytes (thanks Aurelien
  Jarno).
* Fixed LogFile handling in clamav-milter.postinst (logrotation was broken)

65. By Imre Gergely

* SECURITY UPDATE: clamav-milter.init changes current directory owner
  to user 'clamav' when run, potentially breaking ssh chroots, user's
  home directories (LP: #365823)
  - debian/clamav-milter.init: fixed pidfile chown on startup from Debian
    clamav git repo
  - debian/clamav-milter.postinst.in: added cleanup code to search for
    and restore clamav-owned directories to root and remove rogue /none
    file (LP: #363796, #363804)

64. By Imre Gergely

* Fixed clamd apparmor profile based on pre-release testing
  - added permissions for qpsmtpd, p3scan spools
* clamav-milter postinst/logrotate fix from pkg-clamav git repo (LP: #363804)
* clamav-milter init script fix (LP: #363796)

63. By Scott Kitterman

[ Scott Kitterman ]
* Merge from debian unstable, remaining changes (LP: #361762):
  - Drop build-dep on electric-fence (in Universe) and run make test on all
    archs since arch specific test failures with electric-fence are not a
    problem
  - Add apparmor profiles for clamd and freshclam along with maintainer
    script changes
* Update suggested version of apparmor to 2.3+1289 due to use of deny in the
  freshclam apparmor profile
* Cherrypick addition clamav-milter init fixes from pkg-clamav git repo

[ Imre Gergely ]
* fix freshclam apparmor profile for clamtk (LP: #359301)

62. By Scott Kitterman

[ Scott Kitterman ]
* New upstream bugfix release
  - libclamav/others.h: harden CLI_ISCONTAINED macro (bb#1552)
  - libclamav/phishcheck.c: fix possible crash in cli_url_canon() (bb#1553)
  - Signficant clamav-milter bug fixes
  - Other fixes throughout
* Drop ArchiveLimitMemoryUsage option from clamav-base.postinst.in (option
  removed upstream)
* Add CommandReadTimeout, SendBufTimeout, and MaxQueue to
  clamav-base.postinst.in
* Add SkipAuthenticated to clamav-milter.postinst.in
* Drop unrar and lha from clamav Suggests since external unpackers are not
  supported since 0.94

[ Jamie Strandboge ]
* fix freshclam apparmor profile for klamav (LP: #359301)

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/natty/clamav
This branch contains Public information 
Everyone can see this information.

Subscribers