[Pkg-clamav-devel] Bug#617444: clamav: (PRSC) Please backport fix for CVE-2011-1003

Jonathan Wiltshire jmw at debian.org
Tue Mar 8 23:48:07 UTC 2011


Package: clamav
Version: 0.96.5+dfsg-1.1
Severity: important
Tags: squeeze
Usertags: prsc-target-squeeze

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear maintainer,

Recently you fixed one or more security problems as identified in the subject.
These problems were not serious enough for a Debian Security
Advisory, so they are now on my radar for fixing in the following suites
through point releases:

squeeze (6.0.1)

Please prepare a minimal-changes upload targetting each of these suites,
and submit a debdiff to the Release Team [0] for consideration. They will
offer additional guidance or instruct you to upload your package.

Alternatively, if the suite is not affected by this problem please tell
me and close the bug, and I will update our tracker.

I will happily assist you at any stage if the patch is straightforward and
you need help or lack time. Please keep me in CC at all times so I can
track the progress of this request.

For details of this process and the rationale, please see the original
announcement [1] and my blog post [2].

0: debian-release at lists.debian.org
1: <201101232332.11736.thijs at debian.org>
2: http://deb.li/prsc

Thanks,

with his security hat on:
- -- 
Jonathan Wiltshire                                      jmw at debian.org
Debian Developer                         http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=Qku1
-----END PGP SIGNATURE-----





More information about the Pkg-clamav-devel mailing list