[Pkg-clamav-devel] Bug#910430: clamav: CVE-2018-15378: denial-of-service in MEW unpacking feature

[Salvatore Bonaccorso]

Source: clamav
Version: 0.100.1+dfsg-1
Severity: grave
Tags: security upstream
Control: found -1 0.100.1+dfsg-0+deb9u1

Hi,

The following vulnerability was published for clamav.

CVE-2018-15378[0]:
denial-of-service in MEW unpacking feature

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-15378
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15378
[1] https://blog.clamav.net/2018/10/clamav-01002-has-been-released.html
[2] http://lists.clamav.net/pipermail/clamav-announce/2018/000033.html

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore