Re: [Pkg-clamav-devel] Bug#868956: libmspack: CVE-2017-11423

2017-08-06 Thread Stuart Caie
On 05/08/17 10:36, Stuart Caie wrote: libmspack is wrong to convert to unsigned without checking for errors first. When I get to my computer, I'll check all calls to mspack_system read/write/seek/tell methods, to be sure this doesn't happen anywhere else. I checked all the other mspack_system

Re: [Pkg-clamav-devel] Bug#868956: libmspack: CVE-2017-11423

2017-08-06 Thread Sebastian Andrzej Siewior
On 2017-08-06 10:22:11 [+0100], Stuart Caie wrote: > Commited a fix: > https://github.com/kyz/libmspack/commit/17038206fcc384dcee6dd9e3a75f08fd3ddc6a38 > > I'll put out a release in the near future. thank you Stuart. Marc do plan you upload something to unstable/security soon, wait for a new

[Pkg-clamav-devel] Processing of clamav_0.99.3~beta1+dfsg-1_source.changes

2017-08-06 Thread Debian FTP Masters
clamav_0.99.3~beta1+dfsg-1_source.changes uploaded successfully to localhost along with the files: clamav_0.99.3~beta1+dfsg-1.dsc clamav_0.99.3~beta1+dfsg.orig.tar.xz clamav_0.99.3~beta1+dfsg-1.debian.tar.xz clamav_0.99.3~beta1+dfsg-1_source.buildinfo Greetings, Your Debian queue

[Pkg-clamav-devel] clamav_0.99.3~beta1+dfsg-1_source.changes ACCEPTED into unstable

2017-08-06 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 06 Aug 2017 22:13:23 +0200 Source: clamav Binary: clamav-base clamav-docs clamav libclamav-dev libclamav7 clamav-daemon clamdscan clamav-testfiles clamav-freshclam clamav-milter Architecture: source Version: