[Pkg-clamav-devel] ClamAV. again

[Florian Weimer]

* Moritz Muehlenhoff:

> On Fri, Oct 24, 2008 at 01:22:59PM +0200, Michael Tautschnig wrote:
>> > * Michael Tautschnig:
>> > 
>> > >> Ok, package is built and ready to be uploaded. As this would be my first
>> > >> security upload: Would the above already have been the "ok" to upload, or could
>> > >> we get that ok now?
>> > >> 
>> > >
>> > > Is there still interest by the security team in getting this uploaded? Packages
>> > > are ready and built, waiting for your ok to upload.
>> > 
>> > Is this the interdiff?
>> > 
>> > $ git diff 5a2d726d34305c6aa7901918e66b4a1c1c455584..origin/debian/etch-security
>> > 
>> Yes, it is.
>> 
>> > In this case, it should be fine to upload to security-master.
>> > 
>> Double-checked and uploaded.
>
> FYI: (I don't know if you get the rejects)

Turns out that there has already been an -15 upload by Stephen Gran:

Format: 1.7
Date: Fri, 05 Sep 2008 16:24:15 +0100
Source: clamav
Binary: clamav libclamav-dev clamav-dbg clamav-milter clamav-base clamav-freshclam clamav-testfiles clamav-daemon libclamav2 clamav-docs
Architecture: source i386 all
Version: 0.90.1dfsg-4etch15
Distribution: stable-security
Urgency: low
Maintainer: Stephen Gran <sgran at debian.org>
Changed-By: Stephen Gran <sgran at debian.org>
Description:
 clamav     - antivirus scanner for Unix
 clamav-base - base package for clamav, an anti-virus utility for Unix
 clamav-daemon - antivirus scanner daemon
 clamav-dbg - debug symbols for clamav
 clamav-docs - documentation package for clamav, an anti-virus utility for Unix
 clamav-freshclam - downloads clamav virus databases from the Internet
 clamav-milter - antivirus scanner for sendmail
 clamav-testfiles - use these files to test that your Antivirus program works
 libclamav-dev - clam Antivirus library development files
 libclamav2 - virus scanner library
Changes:
 clamav (0.90.1dfsg-4etch15) stable-security; urgency=low
 .
   * [CVE-2008-3912]: libclamav/mbox.c, libclamav/message.c: out-of-memory null
     dereferences
   * [CVE-2008-3914]: libclamav/htmlnorm.c, libclamav/others.c,
     libclamav/sis.c: fd leaks
   * [CVE-2008-3913]: freshclam/manager.c: memory leaks
Files:
 5c1aca2a402b405e027e79c7d9fdde39 900 utils optional clamav_0.90.1dfsg-4etch15.dsc
 f32684dc7b5c10438ed72ed8c522ced8 211673 utils optional clamav_0.90.1dfsg-4etch15.diff.gz
 24e50f137412d6432f489f0c0bccefa2 202184 utils optional clamav-base_0.90.1dfsg-4etch15_all.deb
 ee5378f52517374ecc6d45d0954a8da8 158456 utils optional clamav-testfiles_0.90.1dfsg-4etch15_all.deb
 058124325863f5c4d6009547b81d3d10 1005428 utils optional clamav-docs_0.90.1dfsg-4etch15_all.deb
 08312dde22cde79581b15286c44f4301 340162 libs optional libclamav2_0.90.1dfsg-4etch15_i386.deb
 8d74ae00e735d95515aa9bb808c6671c 856306 utils optional clamav_0.90.1dfsg-4etch15_i386.deb
 22de0edc3a1de0f0fbcb87edca082d50 172982 utils optional clamav-daemon_0.90.1dfsg-4etch15_i386.deb
 0a5dc62b3aab325ab4ea20276a45442d 9301270 utils optional clamav-freshclam_0.90.1dfsg-4etch15_i386.deb
 db8eac754a12034b9f75eaf05386ca82 175660 utils extra clamav-milter_0.90.1dfsg-4etch15_i386.deb
 d1ef1a5beae644f9f1296d6039bb69ef 338336 libdevel optional libclamav-dev_0.90.1dfsg-4etch15_i386.deb
 9c8893eb2188dadfaf3fd17a434f8b06 560354 utils extra clamav-dbg_0.90.1dfsg-4etch15_i386.deb

I'm currently a bit distracted, will compare the diffs later.