[ubuntu/bionic-proposed] clamav 0.99.3~beta1+dfsg-2ubuntu1 (Accepted)

Andreas Hasenack andreas at canonical.com
Thu Nov 23 13:51:14 UTC 2017 

clamav (0.99.3~beta1+dfsg-2ubuntu1) bionic; urgency=medium

  * Merge with Debian unstable (LP: #1732439). Remaining changes:
    - Fix build by forcing llvm 3.9
      (testsuite seems to be failing)
    - debian/patches/fix_newer_zlib.patch: fix compatibility with zlib
      1.2.9 and newer (LP #1692073).
      [DEP3 header updated to indicate it was incorporated upstream]
  * Drop:
    * debian/patches/zlib-check.patch:
      + cherry-pick upstream fix for wrong zlib version check
        [Fixed upstream]
    - SECURITY UPDATE: DoS via crafted e-mail message
      + debian/patches/CVE-2017-6418.patch: fix invalid read in
        libclamav/message.c.
      + CVE-2017-6418
        [Fixed upstream]
    - SECURITY UPDATE: DoS via WWPack compression
      + debian/patches/CVE-2017-6420.patch: add bounds checks to
        libclamav/wwunpack.c.
      + debian/patches/CVE-2017-6420-2.patch: fix unit tests in
        libclamav/wwunpack.c, unit_tests/check_jsnorm.c.
      + CVE-2017-6420
        [Fixed upstream]

clamav (0.99.3~beta1+dfsg-2) unstable; urgency=medium

  * Build again against system's libmspack (dropped by accident)
    (Closes: #872594).
  * Don't replace config file with sample config after debconf gets disabled
    (in milter and daemon (Closes: #870253).
  * Update standards to 4.0.1
    - use invoke-rc.d instead of /etc/init.d.
    - drop priority extra from clamav-milter.
  * Add bytecode.c(l|v)d to log clamav-freshclam.logcheck.ignore.server. Patch
    by Václav Ovsík <vaclav.ovsik at gmail.com> (Closes: #868766).

clamav (0.99.3~beta1+dfsg-1) unstable; urgency=medium

  * Upload to unstable
  * update to official beta1 release:
    - drop fts-no-use-AC_TRY_RUN.patch, applied upstream.

clamav (0.99.3~snapshot20170704+dfsg-1) experimental; urgency=medium

  * Update to upstream snapshot (commit
    144ef69462427b63a650294257c892b047601aac):
    - add config options
    - boost symbol file
    - drop applied patches:
      - Allow-M-suffix-for-PCREMaxFileSize.patch
      - bb11549-fix-temp-file-cleanup-issue.patch
      - clamav_add_private_fts_implementation.patch
      - drop-AllowSupplementaryGroups-option-and-make-it-def.patch
      - fix-ssize_t-size_t-off_t-printf-modifier.patch
      - libclamav-use-libmspack.patch
      - make_it_compile_against_openssl_1_1_0.patch
    - add new ones:
      - fts-no-use-AC_TRY_RUN.patch
      - clamsubmit-add-JSON-libs-to-clamsubmit.patch

Date: Wed, 22 Nov 2017 19:56:26 -0200
Changed-By: Andreas Hasenack <andreas at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: ChristianEhrhardt <christian.ehrhardt at canonical.com>
https://launchpad.net/ubuntu/+source/clamav/0.99.3~beta1+dfsg-2ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Wed, 22 Nov 2017 19:56:26 -0200
Source: clamav
Binary: clamav-base clamav-docs clamav libclamav-dev libclamav7 clamav-daemon clamdscan clamav-testfiles clamav-freshclam clamav-milter
Architecture: source
Version: 0.99.3~beta1+dfsg-2ubuntu1
Distribution: bionic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Andreas Hasenack <andreas at canonical.com>
Description:
 clamav     - anti-virus utility for Unix - command-line interface
 clamav-base - anti-virus utility for Unix - base package
 clamav-daemon - anti-virus utility for Unix - scanner daemon
 clamav-docs - anti-virus utility for Unix - documentation
 clamav-freshclam - anti-virus utility for Unix - virus database update utility
 clamav-milter - anti-virus utility for Unix - sendmail integration
 clamav-testfiles - anti-virus utility for Unix - test files
 clamdscan  - anti-virus utility for Unix - scanner client
 libclamav-dev - anti-virus utility for Unix - development files
 libclamav7 - anti-virus utility for Unix - library
Closes: 868766 870253 872594
Launchpad-Bugs-Fixed: 1732439
Changes:
 clamav (0.99.3~beta1+dfsg-2ubuntu1) bionic; urgency=medium
 .
   * Merge with Debian unstable (LP: #1732439). Remaining changes:
     - Fix build by forcing llvm 3.9
       (testsuite seems to be failing)
     - debian/patches/fix_newer_zlib.patch: fix compatibility with zlib
       1.2.9 and newer (LP #1692073).
       [DEP3 header updated to indicate it was incorporated upstream]
   * Drop:
     * debian/patches/zlib-check.patch:
       + cherry-pick upstream fix for wrong zlib version check
         [Fixed upstream]
     - SECURITY UPDATE: DoS via crafted e-mail message
       + debian/patches/CVE-2017-6418.patch: fix invalid read in
         libclamav/message.c.
       + CVE-2017-6418
         [Fixed upstream]
     - SECURITY UPDATE: DoS via WWPack compression
       + debian/patches/CVE-2017-6420.patch: add bounds checks to
         libclamav/wwunpack.c.
       + debian/patches/CVE-2017-6420-2.patch: fix unit tests in
         libclamav/wwunpack.c, unit_tests/check_jsnorm.c.
       + CVE-2017-6420
         [Fixed upstream]
 .
 clamav (0.99.3~beta1+dfsg-2) unstable; urgency=medium
 .
   * Build again against system's libmspack (dropped by accident)
     (Closes: #872594).
   * Don't replace config file with sample config after debconf gets disabled
     (in milter and daemon (Closes: #870253).
   * Update standards to 4.0.1
     - use invoke-rc.d instead of /etc/init.d.
     - drop priority extra from clamav-milter.
   * Add bytecode.c(l|v)d to log clamav-freshclam.logcheck.ignore.server. Patch
     by Václav Ovsík <vaclav.ovsik at gmail.com> (Closes: #868766).
 .
 clamav (0.99.3~beta1+dfsg-1) unstable; urgency=medium
 .
   * Upload to unstable
   * update to official beta1 release:
     - drop fts-no-use-AC_TRY_RUN.patch, applied upstream.
 .
 clamav (0.99.3~snapshot20170704+dfsg-1) experimental; urgency=medium
 .
   * Update to upstream snapshot (commit
     144ef69462427b63a650294257c892b047601aac):
     - add config options
     - boost symbol file
     - drop applied patches:
       - Allow-M-suffix-for-PCREMaxFileSize.patch
       - bb11549-fix-temp-file-cleanup-issue.patch
       - clamav_add_private_fts_implementation.patch
       - drop-AllowSupplementaryGroups-option-and-make-it-def.patch
       - fix-ssize_t-size_t-off_t-printf-modifier.patch
       - libclamav-use-libmspack.patch
       - make_it_compile_against_openssl_1_1_0.patch
     - add new ones:
       - fts-no-use-AC_TRY_RUN.patch
       - clamsubmit-add-JSON-libs-to-clamsubmit.patch
Checksums-Sha1:
 36236134be6a3bd29d1c2b0fef43cd68e990ddd7 3187 clamav_0.99.3~beta1+dfsg-2ubuntu1.dsc
 b936f63d16b33e26c283985ffe8cf84c1ad33dc4 5883052 clamav_0.99.3~beta1+dfsg.orig.tar.xz
 6b36c95f067d7a5121d3a9b2b8401c14ef019d71 216988 clamav_0.99.3~beta1+dfsg-2ubuntu1.debian.tar.xz
 001b482361672f556dd5a2b636d63abb218196a0 7601 clamav_0.99.3~beta1+dfsg-2ubuntu1_source.buildinfo
Checksums-Sha256:
 4ff51eb8bc1b1c9f1352187891d49777bc1411bdda83ab5d0976bd4eb7d0fa85 3187 clamav_0.99.3~beta1+dfsg-2ubuntu1.dsc
 25ddeb1fca1b6f44f5985b0dfaae68413b51a5c6dd79e28b428d819760f7c020 5883052 clamav_0.99.3~beta1+dfsg.orig.tar.xz
 e510bb2cbf28d12fc35ebc417d7935440a94fb2bdec38485c23b1bea00345863 216988 clamav_0.99.3~beta1+dfsg-2ubuntu1.debian.tar.xz
 1a389f98072b0d382610c3deae33bb8c87bbae3d529cbfd42446884bbe11227a 7601 clamav_0.99.3~beta1+dfsg-2ubuntu1_source.buildinfo
Files:
 7bdd2009f6e458ad340a0f2b9f9131df 3187 utils optional clamav_0.99.3~beta1+dfsg-2ubuntu1.dsc
 04f2220cdaeea29b7938b14001909a39 5883052 utils optional clamav_0.99.3~beta1+dfsg.orig.tar.xz
 a6aeaa9fac57bdbf58a08d91b7c156de 216988 utils optional clamav_0.99.3~beta1+dfsg-2ubuntu1.debian.tar.xz
 b56ad3eafe7098b743544d0eeff23e35 7601 utils optional clamav_0.99.3~beta1+dfsg-2ubuntu1_source.buildinfo
Original-Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=5AD4
-----END PGP SIGNATURE-----

More information about the Bionic-changes mailing list