[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2010-06-07 Thread Jamie Strandboge
Dapper has version 0.95.3+dfsg-1ubuntu0.09.04~dapper4 which has no open CVEs. ** Changed in: clamav (Ubuntu Dapper) Status: New => Fix Released ** Changed in: clamav (Ubuntu Dapper) Assignee: Leonel Nunez (leonelnunez) => (unassigned) -- [hardy] Multiple unfixed CVEs https://bugs.la

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2009-05-07 Thread Sergio Zanchetta
The 18 month support period for Gutsy Gibbon 7.10 has reached its end of life - http://www.ubuntu.com/news/ubuntu-7.10-eol . As a result, we are closing the Gutsy task. ** Changed in: clamav (Ubuntu Gutsy) Status: New => Won't Fix -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.ne

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2009-01-17 Thread Scott Kitterman
The changes for Dapper/Gutsy have been added to debdiffs in Bug #317923. -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lis

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Scott Kitterman
All fixed in 0.94.2 for Intrepid/Jaunty. ** Changed in: clamav (Ubuntu Intrepid) Status: New => Fix Released ** Changed in: clamav (Ubuntu) Status: New => Fix Released ** Changed in: clamav (Ubuntu Dapper) Assignee: (unassigned) => Leonel Nunez (leonelnunez) ** Changed in: cl

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Launchpad Bug Tracker
This bug was fixed in the package clamav - 0.92.1~dfsg2-1.1ubuntu0.4 --- clamav (0.92.1~dfsg2-1.1ubuntu0.4) hardy-security; urgency=low * SECURITY UPDATE: denial of service via out-of-memory null dereferences, memory leaks, and file descriptor leaks: - 29_CVE-2008-3912.dpatc

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Leonel Nunez
Gutsy debdiff applies builds installs and works fine ** Attachment added: "gutsy.debdiff" http://launchpadlibrarian.net/20213891/gutsy.debdiff -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a member of Ubuntu Bugs, w

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Leonel Nunez
Dapper Debdiff applies builds installs and works fine ** Attachment added: "dapper.debdiff" http://launchpadlibrarian.net/20212513/dapper.debdiff -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a member of Ubunt

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Kees Cook
Leonel: great, thanks for getting this prepared. I've adjusted the changelog to follow the SUP format a little more closely. This is building in the security queue now. -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a m

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Scott Kitterman
I've got the update running on a Hardy box with clamsmtp and it seems to work fine. I have not done any formal testing of the vulnerabilities. -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a member of Ubuntu Bugs, which

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Leonel Nunez
Debdiff corrected for hardy Added reference to bug LP# 304017 ** Attachment added: "hardy.debdiff" http://launchpadlibrarian.net/20210619/hardy.debdiff -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a member of Ubun

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-12-04 Thread Leonel Nunez
Debdiff For Hardy applies, builds installs fine Added a patch for CVE-2008-5314 for CVE-2008-1380 the module is disabled but we are working on the patch ** CVE added: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2008-1380 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?nam

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-10-02 Thread Leonel Nunez
** Changed in: clamav (Ubuntu) Assignee: (unassigned) => Leonel Nunez (leonelnunez) -- [hardy] Multiple unfixed CVEs https://bugs.launchpad.net/bugs/271546 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 271546] Re: [hardy] Multiple unfixed CVEs

2008-09-23 Thread Leonel Nunez
For cve-2008-1389 ubuntu version is not vulnerable Tested the provided test files to crash the clamav and didn't crash for cve-2008-3912 clamav has asigned the same bug number as for 3913 and 3914 Working on the patch for cve-2008-3913 and 3914 -- [hardy] Multiple unfixed CVEs https://bug