*** This bug is a security vulnerability ***
Public security bug reported:
I was running a routine antivirus scan on my local repository mirror and got
the following output from clamav:
/mnt/iscsi/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/m/mydms/mydms_1.7.2+1.7.3-1.diff.gz:
JS.Obfus-217 FOUND
ClamAV information:
ClamAV 0.97.8/17647/Thu Aug 8 12:13:54 2013
Jul 23 10:12 bytecode.cvd
Aug 8 12:51 daily.cld
Jul 23 10:09 main.cvd
Aug 8 12:51 safebrowsing.cvd
Output:
# clamscan -ri
/mnt/iscsi/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/m/mydms/mydms_1.7.2+1.7.3-1.diff.gz:
JS.Obfus-217 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 3275734
Engine version: 0.97.8
Scanned directories: 1
Scanned files: 4
Infected files: 1
Data scanned: 5.39 MB
Data read: 0.61 MB (ratio 8.90:1)
Time: 6.696 sec (0 m 6 s)
** Affects: mydms (Ubuntu)
Importance: Undecided
Status: New
** Information type changed from Private Security to Public Security
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1210237
Title:
Anti-virus threat detected in repo diff.gz file
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mydms/+bug/1210237/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
