clamav 0.92.1~dfsg2-1.1~gutsy1 source package in Ubuntu

Changelog

clamav (0.92.1~dfsg2-1.1~gutsy1) gutsy-backports; urgency=low

  * Automated backport upload; no source changes.

clamav (0.92.1~dfsg2-1.1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * This update addresses the following security issue:
    - CVE-2008-1833: heap-based buffer overflow allows remote
      attackers to execute arbitrary code via a crafted WWPack compressed
      PE binary (Closes: #476694).

clamav (0.92.1~dfsg2-1) unstable; urgency=high

  * libclamav/pe.c: possible integer overflow in wwpack
  * [CVE-2008-1100]: libclamav/pe.c: possible integer overflow in upack
  * [CVE-2008-1387]: libclamav/spin.c: possible integer overflow
  * libclamav/unarj.c: DoS in unarj

clamav (0.92.1~dfsg2-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * Remove non-free unrar files and repack orig.tar.gz (Closes: #470073)

clamav (0.92.1~dfsg-1) unstable; urgency=low

  * New upstream bugfix release
    - [2007-6595]: libclamav/others.c: symlink vulnerability
      cli_gentempfd now calls open with O_EXCL (closes: #458532)
    - [CVE-2008-0318]: libclamav/pe.c: possible integer overflow
    - libclamav/mew.c: possible heap corruption
  * Add a note to NEWS.Debian about unrar support being dropped
    (closes: #465203)
  * clamav-milter: off-by-one programming error in pingServer
    (closes: #458204)
  * Copyright now complete (thanks Scott Kitterman <email address hidden>)
    (closes: #456770)
  * Attempt to work around clamav-milter not bothering to check if another
    instance is running on startup (reported as LP bug 179169)

clamav (0.92~dfsg-3) unstable; urgency=low

  * Copyright clarifications (closes: #456770) (thanks
    Scott Kitterman <email address hidden>)

clamav (0.92~dfsg-2) unstable; urgency=low

  * Drop obsolete option NodalCoreAcceleration (closes: #457051)

clamav (0.92~dfsg-1) unstable; urgency=medium

  * New upstream version
    - urgency medium due to 3 CVEs:
      * [CVE-2007-6336]: libclamav/mspack.c: Off-by-1 error in LZX_READ_HUFFSYM
      * [CVE-2007-6337]: libclamav/nsis/bzlib_private.h: bzlib issue
      * [CVE-2007-6335]: libclamav/pe.c: MEW PE File Integer Overflow
    - would be urgency=high, except we have soname transition
      - new package libclamav3 thanks to that
    - Memory optimizations in trie building (closes: #420391)
    - Don't create circular lists when two version of the same database are
      loaded (closes: #454052)
    - sigtool prints name of file being processed (closes: #414246)
    - now displays message number during mbox scans with debug enabled
      (closes: #452543)
    - clamav-milter now accepts HUP to reopen logfile (closes: #414993)
  * Packaging changes:
  * Check that directories shipped in the .deb exist before chowning them.
    This is apparently an unreported problem for some Ubuntu users
  * Patches:
    - remove 25_wrong_shebang.dpatch (merged upstream)
    - add 25_skip_sendmail.cf.dpatch (closes: #312575)
  * Translations:
    - fr (closes: #454128)(thanks Christian Perrier <email address hidden>)
  * Handle new option LogTime for freshclam
  * Move clamav-docs to section 'doc'
  * Catch all cases where the init script is called from freshclam's postinst
    and make sure invoke-rc.d is used if available
  * Freshen patches

clamav (0.91.2-4) unstable; urgency=low

  * i18n rework (closes: #444801)
  * New translations:
    - cs (closes: #446786)(thanks Miroslav Kure <email address hidden>)
    - de (closes: #447489)(thanks Helge Kreutzmann <email address hidden>)
    - es (closes: #445605)(thanks Javier Fernández-Sanguino Peña <email address hidden>)
    - fi (closes: #447000)(thanks Esko Arajärvi <email address hidden>)
    - gl (closes: #446473)(thanks Jacobo Tarrio <email address hidden>)
    - it (closes: #445348)(thanks Cristian Rigamonti <email address hidden>)
    - ja (closes: #446208)(thanks Kenshi Muto <email address hidden>)
    - pt (closes: #447291)(thanks Ricardo Silva <email address hidden>)
    - pt_BR (closes: #446940)(thanks Felipe Augusto van de Wiel (faw)
      <email address hidden>)
    - ru (closes: #447356)(thanks Yuri Kozlov <email address hidden>)
    - vi (closes: #446898)(thanks Clytie Siddall <email address hidden>)
  * Get rid of some unused debconf notes
  * Update NEWS.Debian retroactively to quiet lintian
  * Add Build-Dep on po-debconf and call debconf-updatepo in clean target
  * Better watch file (closes: #449622) (thanks Raphael Geissert
    <email address hidden>)
  * Better integration between postfix and clamav-milter (closes: #446404)

 -- Scott Kitterman <email address hidden>   Tue, 29 Apr 2008 14:05:57 +0100