Merge clamav from Debian unstable for mantic
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
clamav (Ubuntu) |
Fix Released
|
Undecided
|
Vladimir Petko | ||
libclamunrar (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
Upstream: tbd
Debian: 1.0.1+dfsg-2
Ubuntu: 0.103.8+
Debian does new releases regularly, so it's likely there will be newer versions available before FF that we can pick up if this merge is done later in the cycle.
If it turns out this needs a sync rather than a merge, please change the tag 'needs-merge' to 'needs-sync', and (optionally) update the title as desired.
### New Debian Changes ###
clamav (1.0.1+dfsg-2) unstable; urgency=medium
* Depend on latest libtfm1 (Closes: #1031896, #1027010).
-- Sebastian Andrzej Siewior <email address hidden> Sun, 26 Feb 2023 17:39:06 +0100
clamav (1.0.1+dfsg-1) unstable; urgency=medium
* Import 1.0.1 (Closes: #1031509)
- CVE-2023-20032 (Possible RCE in the HFS+ file parser).
- CVE-2023-20052 (Possible information leak in the DMG file parser).
-- Sebastian Andrzej Siewior <email address hidden> Fri, 17 Feb 2023 20:29:05 +0100
clamav (1.0.0+dfsg-6) unstable; urgency=medium
[ Sebastian Andrzej Siewior ]
* Add d/p/Add-
rpath issues
[ Scott Kitterman ]
* Remove obsolete usr/share/
longer provided in the package (Thanks to Paul Wise for reporting)
(Closes: #1029173)
* Complete update of d/copyright for upstream file removal/
* Restore and update clamav-freshclam and libclamav lintian-overrides for
current lintian
* Drop depends on obsolete package lsb-base
-- Scott Kitterman <email address hidden> Sat, 21 Jan 2023 18:02:12 -0500
clamav (1.0.0+dfsg-5) unstable; urgency=medium
[ Scott Kitterman ]
* Update paths in d/tests/clamd for new source layout
* Add misc:Pre-Depends to clamav-daemon and clamav-milter for
init-
* Remove obsolete debian/NEWS file
* More lintian override corrections
* Start of removing obsolete d/copyright entries
[ Sebastian Andrzej Siewior ]
* Fix testsuite on big endian architectures.
-- Scott Kitterman <email address hidden> Fri, 06 Jan 2023 12:33:39 -0500
clamav (1.0.0+dfsg-4) unstable; urgency=medium
* Drop unneeded build-depends on rust-lldb (Closes: #1027948).
-- Scott Kitterman <email address hidden> Wed, 04 Jan 2023 18:32:47 -0500
clamav (1.0.0+dfsg-3) unstable; urgency=medium
* Upload to unstable
* Directly trigger html docs build to fix lack of html docs and update
clamav-
* Fixup duplicate globs in d/copyright
* Update paths for new source layout in lintian overrides
* Update clean rule for new tests
* Add debian/
during build
* Remove obsolete overrides from d/rules
-- Scott Kitterman <email address hidden> Wed, 04 Jan 2023 15:06:03 -0500
clamav (1.0.0+dfsg-2) experimental; urgency=medium
[ Scott Kitterman ]
* Add libclamav11 replaces libclamav9 since the libfreshclam so name did not
change (Closes: #1027698).
[ Sebastian Andrzej Siewior ]
* Use a version-script and limit the exported symbols of libclamav and
libfreshclam.
-- Sebastian Andrzej Siewior <email address hidden> Mon, 02 Jan 2023 18:38:42 +0100
clamav (1.0.0+dfsg-1) experimental; urgency=medium
* Update to 1.0.0 (Closes: #1006179).
-- Sebastian Andrzej Siewior <email address hidden> Sat, 31 Dec 2022 13:44:59 +0100
clamav (0.103.7+dfsg-1) unstable; urgency=medium
* Import 0.103.7
- Update symbol file.
-- Sebastian Andrzej Siewior <email address hidden> Sun, 14 Aug 2022 21:33:51 +0200
clamav (0.103.6+dfsg-1) unstable; urgency=medium
* Import 0.103.6
- CVE-2022-20770 (Possible infinite loop vulnerability in the CHM file
parser).
- CVE-2022-20796 (Possible NULL-pointer dereference crash in the scan
verdict cache check).
- CVE-2022-20771 (Possible infinite loop vulnerability in the TIFF file
parser).
### Old Ubuntu Delta ###
clamav (0.103.
* Updated to version 0.103.8 to fix security issues.
- debian/rules: bump CL_FLEVEL to 129.
- debian/
version.
- CVE-2023-20032, CVE-2023-20052
-- David Fernandez Gonzalez <email address hidden> Fri, 24 Feb 2023 09:27:20 +0100
clamav (0.103.
* Merge with Debian unstable (LP: #1993390). Remaining changes:
- clamav-
(LP #1920217)
* Dropped:
- Update translations
-- Bryce Harrington <email address hidden> Fri, 18 Nov 2022 23:35:15 -0800
Related branches
- Dan Bungert: Pending requested
- git-ubuntu import: Pending requested
-
Diff: 66 lines (+44/-0)3 files modifieddebian/changelog (+6/-0)
debian/patches/resolve-armhf-ftbfs.patch (+37/-0)
debian/patches/series (+1/-0)
- Bryce Harrington (community): Needs Information
- Dan Bungert (community): Needs Fixing
- git-ubuntu import: Pending requested
-
Diff: 358 lines (+209/-54)7 files modifieddebian/changelog (+61/-0)
debian/clamav-base.postinst.in (+1/-1)
debian/clamav-freshclam-ifupdown (+104/-52)
debian/clamav-freshclam.links (+3/-0)
debian/control (+2/-1)
debian/patches/resolve-armhf-ftbfs.patch (+37/-0)
debian/patches/series (+1/-0)
- Ubuntu Sponsors: Pending requested
- git-ubuntu import: Pending requested
-
Diff: 300 lines (+165/-54)5 files modifieddebian/changelog (+55/-0)
debian/clamav-base.postinst.in (+1/-1)
debian/clamav-freshclam-ifupdown (+104/-52)
debian/clamav-freshclam.links (+3/-0)
debian/control (+2/-1)
CVE References
Changed in clamav (Ubuntu): | |
milestone: | none → ubuntu-23.07 |
Changed in clamav (Ubuntu): | |
assignee: | nobody → Bryce Harrington (bryce) |
Changed in libclamunrar (Ubuntu): | |
milestone: | none → ubuntu-23.07 |
Changed in clamav (Ubuntu): | |
assignee: | Bryce Harrington (bryce) → Vladimir Petko (vpa1977) |
libclamunrar 1.0.0-2 depends on libclamav11.