[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2010-06-07 Thread Jamie Strandboge
Dapper has version 0.95.3+dfsg-1ubuntu0.09.04~dapper4 which has no open CVEs. ** Changed in: clamav (Ubuntu Dapper) Status: New = Fix Released ** Changed in: clamav (Ubuntu Dapper) Assignee: Leonel Nunez (leonelnunez) = (unassigned) -- [hardy] Multiple unfixed CVEs

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2010-06-07 Thread Jamie Strandboge
Dapper has version 0.95.3+dfsg-1ubuntu0.09.04~dapper4 which has no open CVEs. ** Changed in: clamav (Ubuntu Dapper) Status: New = Fix Released ** Changed in: clamav (Ubuntu Dapper) Assignee: Leonel Nunez (leonelnunez) = (unassigned) -- [hardy] Multiple unfixed CVEs

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2009-05-07 Thread Sergio Zanchetta
The 18 month support period for Gutsy Gibbon 7.10 has reached its end of life - http://www.ubuntu.com/news/ubuntu-7.10-eol . As a result, we are closing the Gutsy task. ** Changed in: clamav (Ubuntu Gutsy) Status: New = Won't Fix -- [hardy] Multiple unfixed CVEs

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2009-01-17 Thread Scott Kitterman
The changes for Dapper/Gutsy have been added to debdiffs in Bug #317923. -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Leonel Nunez
Debdiff For Hardy applies, builds installs fine Added a patch for CVE-2008-5314 for CVE-2008-1380 the module is disabled but we are working on the patch ** CVE added: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2008-1380 ** CVE added: http://www.cve.mitre.org/cgi-

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Leonel Nunez
Debdiff corrected for hardy Added reference to bug LP# 304017 ** Attachment added: hardy.debdiff http://launchpadlibrarian.net/20210619/hardy.debdiff -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a member of

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Scott Kitterman
I've got the update running on a Hardy box with clamsmtp and it seems to work fine. I have not done any formal testing of the vulnerabilities. -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a member of Ubuntu Bugs,

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Kees Cook
Leonel: great, thanks for getting this prepared. I've adjusted the changelog to follow the SUP format a little more closely. This is building in the security queue now. -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Leonel Nunez
Dapper Debdiff applies builds installs and works fine ** Attachment added: dapper.debdiff http://launchpadlibrarian.net/20212513/dapper.debdiff -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a member of Ubuntu

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Leonel Nunez
Gutsy debdiff applies builds installs and works fine ** Attachment added: gutsy.debdiff http://launchpadlibrarian.net/20213891/gutsy.debdiff -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a member of Ubuntu Bugs,

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Launchpad Bug Tracker
This bug was fixed in the package clamav - 0.92.1~dfsg2-1.1ubuntu0.4 --- clamav (0.92.1~dfsg2-1.1ubuntu0.4) hardy-security; urgency=low * SECURITY UPDATE: denial of service via out-of-memory null dereferences, memory leaks, and file descriptor leaks: -

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Scott Kitterman
All fixed in 0.94.2 for Intrepid/Jaunty. ** Changed in: clamav (Ubuntu Intrepid) Status: New = Fix Released ** Changed in: clamav (Ubuntu) Status: New = Fix Released ** Changed in: clamav (Ubuntu Dapper) Assignee: (unassigned) = Leonel Nunez (leonelnunez) ** Changed in:

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-10-02 Thread Leonel Nunez
** Changed in: clamav (Ubuntu) Assignee: (unassigned) = Leonel Nunez (leonelnunez) -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-09-23 Thread Leonel Nunez
For cve-2008-1389 ubuntu version is not vulnerable Tested the provided test files to crash the clamav and didn't crash for cve-2008-3912 clamav has asigned the same bug number as for 3913 and 3914 Working on the patch for cve-2008-3913 and 3914 -- [hardy] Multiple unfixed CVEs