[Technik] [SECURITY] [DSA 1320-1] New clamav packages fix several vulnerabilities

[Noèl Köthe]

Am Samstag, den 23.06.2007, 12:57 +0200 schrieb Moritz Muehlenhoff:

> Debian Security Advisory DSA 1320-1                    security at debian.org
> http://www.debian.org/security/                         Moritz Muehlenhoff
> June 23th, 2007                         http://www.debian.org/security/faq
> 
> Package        : clamav
> Vulnerability  : several
> Problem-Type   : remote
> Debian-specific: no
> CVE ID         : CVE-2007-2650 CVE-2007-3023 CVE-2007-3024 CVE-2007-3122 CVE-2007-3123 

clamav auf yuma aktualisiert.

> For the oldstable distribution (sarge) these problems have been fixed in
> version 0.84-2.sarge.17. Please note that the fix for CVE-2007-3024 hasn't
> been backported to oldstable.

Auf unseren sarge Systemen benutzen wir debian-volatile clamav Pakete
mit der Version 0.90.3-0volatile1

> For the stable distribution (etch) these problems have been fixed
> in version 0.90.1-3etch1.

changelog:
clamav (0.90.1-3etch3) stable-security; urgency=high

  * NMU by the Security Team, based on updated prepared by sgran
    [CVE-2007-2650 CVE-2007-3023 CVE-2007-3024 CVE-2007-3122 CVE-2007-3123]

 -- Moritz Muehlenhoff <jmm at debian.org>  Thu, 21 Jun 2007 11:26:42 +0000

clamav (0.90.1-3etch2) stable-security; urgency=high

  * fix debian/patch/27_pdf.c.CVE-2007-2029 so it actually applies and
    fixes the security issue documented in 0.90.1-3etch1

 -- Noah Meyerhans <noahm at debian.org>  Sat, 19 May 2007 08:50:09 -0400


-- 
Noèl Köthe <noel debian.org>
Debian GNU/Linux, www.debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : /archiv/technik/attachments/20070709/23259486/attachment.pgp