Skip to contentSkip to conversation

clamav: security bump to version 0.98.7

PATCH New Gustavo Zacarias 2 participants 2 messages Apr 29, 2015

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 clamav: security bump to version 0.98.7

Fixes:
CVE-2015-2221 - infinite loop condition on crafted y0da cryptor file. CVE-2015-2668 - infinite loop condition on a crafted "xz" archive file. CVE-2015-2305 - possible heap overflow in Henry Spencer's regex library. CVE-2015-2170 - crash in upx decoder with crafted file. CVE-2015-2222 - crash on crafted petite packed file.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/clamav/clamav.hash | 5 +++--
 package/clamav/clamav.mk   | 2 +-
 2 files changed, 4 insertions(+), 3 deletions(-)
package/clamav/clamav.hash +3 -2
index 7913388..97e4163 100644
@@ -1,2 +1,3 @@
-# From http://sourceforge.net/projects/clamav/files/clamav/0.98.6/
-sha1	03cb9a20a08aba9176b1f58d5527d06ec8261f9c	clamav-0.98.6.tar.gz
+# From http://sourceforge.net/projects/clamav/files/clamav/0.98.7/
+md5	157c601161da1c2d5a0e48ea1b49e067	clamav-0.98.7.tar.gz
+sha1	c9793d67c041e2b944116d912f8681c8bd6e4432	clamav-0.98.7.tar.gz
package/clamav/clamav.mk +1 -1
index 6a8fddf..1cf0af6 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-CLAMAV_VERSION = 0.98.6
+CLAMAV_VERSION = 0.98.7
 CLAMAV_SITE = http://sourceforge.net/projects/clamav/files/clamav/$(CLAMAV_VERSION)
 CLAMAV_LICENSE = GPLv2
 CLAMAV_LICENSE_FILES = COPYING COPYING.bzip2 COPYING.file COPYING.getopt \
Signature · 1 line
2.0.5
#1 lore raw

PATCH 1/1 clamav: security bump to version 0.98.7

Quoted 10 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Gustavo" == Gustavo Zacarias <[email protected]> writes:

Fixes:
CVE-2015-2221 - infinite loop condition on crafted y0da cryptor file. CVE-2015-2668 - infinite loop condition on a crafted "xz" archive file. CVE-2015-2305 - possible heap overflow in Henry Spencer's regex library. CVE-2015-2170 - crash in upx decoder with crafted file. CVE-2015-2222 - crash on crafted petite packed file.

Signed-off-by Gustavo Zacarias <[email protected]>

Committed, thanks.

Signature · 1 line
Bye, Peter Korsgaard