[ubuntu/lucid-security] clamav 0.97.7+dfsg-1ubuntu0.10.04.1 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Thu Mar 21 11:54:23 UTC 2013


clamav (0.97.7+dfsg-1ubuntu0.10.04.1) lucid-security; urgency=low

  * SECURITY UPDATE: Updated to 0.97.7 to fix multiple security issues.
    (LP: #1157385)
    - CVE numbers pending

clamav (0.97.7+dfsg-1ubuntu1) raring; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes

clamav (0.97.7+dfsg-1) unstable; urgency=medium

  * New upstream release
  * Update libclamav6 lintian override to match updated soversion
  * Urgency medium due to security fixes

clamav (0.97.6+dfsg-1ubuntu1) quantal; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes

clamav (0.97.6+dfsg-1) unstable; urgency=low

  * New upstream release (Closes: #689487)
  * Update libclamav6 lintian override to match updated soversion

clamav (0.97.5+dfsg-6ubuntu2) quantal; urgency=low

  * debian/clamav-base.install, debian/source_clamav.py: Install apport
    hook so we can get AppArmor denials in bug reports.

clamav (0.97.5+dfsg-6ubuntu1) quantal; urgency=low

  * Merge from Debian unstable (LP: #1015405).  Remaining changes:
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes

clamav (0.97.5+dfsg-6) unstable; urgency=medium

  * Urgency medium for RC bug fix the addressess regression from 0.97.3
  * Add changes from upstream commit 6a879ad98460303b23a6fc119769a3b463a902f8
    to fix unpack errors for various compressed files including some .bz2,
    .xls, .doc, and PDF (Closes: #684697)

clamav (0.97.5+dfsg-5) unstable; urgency=low

  * Drop /var/run/clamav from the directories shipped in clamav-base (policy
    9.1.4) and trust it will get cleaned up on boot
    - Thanks to Andreas Beckmann for the cluebat

clamav (0.97.5+dfsg-4) unstable; urgency=low

  * Drop postrm snippets from clamav-base, clamav-freshclam, clamav-daemon,
    and clamav-milter that remove /var/log/clamav, /var/lib/clamav,
    /var/run/clamav, and /etc/clamav and and let dpkg remove the directories
    once they are empty in order to fix problems with directory removal by a
    package that did not own the directory (Closes: #681960)
  * Add /var/run/clamav to directories shipped by clamav-base so dpkg cleanup
    will work for it too.

clamav (0.97.5+dfsg-3ubuntu1) quantal; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes

clamav (0.97.5+dfsg-3) unstable; urgency=low

  * Fix proxy port configuration handling in clamav-freshclam.postinst so that
    failure to specify port does not result in an invalid configuration
    (Closes: #678247), (LP: #784797)

clamav (0.97.5+dfsg-2ubuntu1) quantal; urgency=low

  * Merge from Debian Unstable.  Remaining Ubuntu changes:
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes

clamav (0.97.5+dfsg-2) unstable; urgency=medium

  * Medium urgency due to security fixes
  * Update debian/clamav-base.postinst.in to test for the existence of the
    actual .cvd files before trying to install them and not just the directory
    they should be in (Closes: #678019)
  * Remove /var/run/clamav on purge (LP: #829945)
    - Thanks to Imre Gergely for the patch
  * Add call to /sbin/restorecon in debian/common_functions make_directory to
    to label the /run directory for SE Linux (Closes: #677686)
    - Thanks to Russell Coker for the patch
  * Remove obsolete reference to clamav-data package in clamav-daemon init log
    failure message

clamav (0.97.5+dfsg-1ubuntu1) quantal; urgency=low

  * Merge from Debian Unstable.  Remaining Ubuntu changes:
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes
  * New upstream version no longer includes virus definition files
   (LP: #460316)

clamav (0.97.5+dfsg-1) unstable; urgency=medium

  [ Scott Kitterman ]
  * Urgency medium due to security fixes
  * New upstream release (Closes: #669370)
    - Addresses possible evasion cases in some archive formats (CVE-2012-1419,
      CVE-2012-1457, CVE-2012-1458, CVE-2012-1459) (Closes: #668273)
    - Repack tarball to remove non-free unrar code and win32 directory
    - Add contrib/split-tarball.sh and docs/man/clambc.1 in the diff.gz
      (these used to be added to the Debian specific upstream tarball, but
      aren't upstream so are better in the diff)
    - Change etc/clamav-milter.conf to Debian defaults 
  * Enabled hardened build flags (Closes: #653958)
    - Thanks to Moritz Muehlenhoff for the patch
  * Remove var/lib/clamav/daily.cvd and main.cvd from clamav-base.examples
    because they aren't installed by the build system anymore (and are
    provided only as empty files in the upstream tarball)
  * Fix typos in README.Debian (Closes: #667831)
  * Update libclamav6 binary lintian override to match current filename
  * Bump standards version to 3.9.3 without further change

  [ Stephen Gran ]
    - Add a note about RAR functionality to README.Debian (Closes: #652009)

clamav (0.97.3+dfsg-2.2) unstable; urgency=low

  * Non-maintainer upload.
  * Fix "FTBFS: llvm/lib/ExecutionEngine/JIT/Intercept.cpp:69:67: error:
    'lseek64' was not declared in this scope": add missing <unistd.h> include.
    Also fixed in upstream git already [bb8ab5c].
    (Closes: #674330)

clamav (0.97.3+dfsg-2.1ubuntu1) precise; urgency=low

  * Merge from Debian Unstable.  Remaining Ubuntu changes:
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes

clamav (0.97.3+dfsg-2.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix spelling error in debconf templates. Closes: #660966
  * Fix pending l10n issues. Debconf translations:
    - Dutch; (Jeroen Schot).  Closes: #651405
    - German (Thomas Müller).  Closes: #653409
    - Polish (Michał Kułach).  Closes: #659369
    - Japanese (Kenshi Muto).  Closes: #659980
    - Czech (Miroslav Kure).  Closes: #660319
    - Italian (Luca Monducci).  Closes: #660475

clamav (0.97.3+dfsg-2ubuntu1) precise; urgency=low

  * Merge from Debian Unstable.  Remaining Ubuntu changes:
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes

clamav (0.97.3+dfsg-2) unstable; urgency=low

  [ Loïc Minier ]
  * Pass --without-included-ltdl to configure instead of hardcoding
    --with-ltdl-include= and --with-ltdl-lib= pathnames, the pathnames
    wouldn't work with multiarch anymore.
  * rules: let clamav-dbg depend on libclamav6 as it seems to require it and
    this could make rules -j safe (didn't manage to reproduce the -j2 failure
    I was getting with the change).

  [ Stephen Gran ]
  * Add VERBOSE=1 to make check

  [ Scott Kitterman ]
  * Add myself to uploaders

clamav (0.97.3+dfsg-1ubuntu3) precise; urgency=low

  * No-change rebuild to drop spurious libsfgcc1 dependency on armhf.

clamav (0.97.3+dfsg-1ubuntu2) precise; urgency=low

  * Pass --without-included-ltdl to configure instead of hardcoding
    --with-ltdl-include= and --with-ltdl-lib= pathnames, the pathnames
    wouldn't work with multiarch anymore.
  * rules: let clamav-dbg depend on libclamav6 as it seems to require it and
    this could make rules -j safe (didn't manage to reproduce the -j2 failure
    I was getting with the change).

clamav (0.97.3+dfsg-1ubuntu1) precise; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes

clamav (0.97.3+dfsg-1) unstable; urgency=medium

  [ Michael Tautschnig ]
  * New upstream release: Fixes potential DoS

clamav (0.97.2+dfsg-1ubuntu2) oneiric; urgency=low

  [ Imre Gergely ]
  * Fix clamd apparmor profile to work with mimedefang (LP: #829089)
  * Stop samba related log spamming from freshclam apparmor profile
    (LP: #752833)

clamav (0.97.2+dfsg-1ubuntu1) oneiric; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes

clamav (0.97.2+dfsg-1) unstable; urgency=low

  [ Michael Tautschnig ]
  * New upstream release
    - Fixes off-by-one-error (closes: #635599)
    - Fixes opcode 20 is not implemented error (closes: #635340)
    - New option ExtraDatabase for freshclam
  * Debconf translation updates
    - Portuguese (closes: #630954)
    - French (closes: #631978)
    - Swedish (closes: #632144)
    - Danish (closes: #632558)
    - Spanish (closes: #633883)
    - Russian (closes: #635145)

clamav (0.97.1+dfsg-1ubuntu3) oneiric; urgency=low

  * SECURITY UPDATE: denial of service via hash manager off-by-one
    - libclamav/matcher-hash.c: fix count.
    - http://git.clamav.net/gitweb?p=clamav-devel.git;a=commit;h=4842733eb3f09be61caeed83778bb6679141dbc5
    - CVE-2011-2721

clamav (0.97.1+dfsg-1ubuntu2) oneiric; urgency=low

  * adjust AppArmor profile for /var/run -> /run (LP: #810270)

clamav (0.97.1+dfsg-1ubuntu1) oneiric; urgency=low

  * Merge from debian unstable.  Remaining changes:
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes

clamav (0.97.1+dfsg-1) unstable; urgency=low

  [ Michael Tautschnig ]
  * New upstream release
    - New option ClamukoExcludeUID for clamd
  * Added debconf question for clamav-milter/LogClean (closes: #617890).
  * Clarified text about clamav-milter's temporary directory in debconf
    question (closes: #617889).
  * Debconf translation updates
    - Japanese (closes: #624802)
  * Remove references to other libraries from dependency_libs field
    (closes: #621206). Thanks Luk Claes for the patch.
  * Added doc-base file to clamav-docs (closes: #629357). Thanks John Vogel.
  * Bumped Standards-Version to 3.9.2, no changes needed.

  [ Stephen Gran ]
  * Update README.Debian to reflect reality for the milter (closes: #597048)

clamav (0.97+dfsg-2ubuntu1) natty; urgency=low

  * Merge from debian unstable.  Remaining Ubuntu changes:
    - Drop initial signature definitions from clamav-base
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes

clamav (0.97+dfsg-2) unstable; urgency=low

  [ Michael Tautschnig ]
  * Proper suite name.
  * More tidy up: new upstream release also fixed problems with
    ExtendedDetectionInfo (upstream bb#2409, closes: #617262).

clamav (0.97+dfsg-1) UNRELEASED; urgency=low

  [ Alberto Wu ]
  * New upstream release

  [ Stephen Gran ]
  * General tidy up

clamav (0.97+dfsg-0ubuntu1) natty; urgency=low

  * Merge from debian unstable (0ubuntu1 because the Debian upload was
    inadvertently left marked UNRELEASED).  Remaining changes:
    - Drop initial signature definitions from clamav-base
    - Drop build-dep on electric-fence (in Universe)
    - Add apparmor profiles for clamd and freshclam along with maintainer
      script changes

clamav (0.97+dfsg-1) UNRELEASED; urgency=low

  [ Alberto Wu ]
  * New upstream release

  [ Stephen Gran ]
  * General tidy up

clamav (0.96.5+dfsg-2) UNRELEASED; urgency=low
  
  [ Stephen Gran ]
  * Remove ucf backup files in cron.d directory (closes: #607053).
  
  [ Michael Tautschnig ]
  * Acknowledge NMU - thanks Christian for fixing my earlier broken upload
    (probably 0.96.3+dfsg-1) (closes: #610058).
  * Debconf translation updates
    - Danish (closes: #605626)
    - Dutch (closes: #605903)
  * Cherry-pick bc0ef08bb7312b5f295cd4070d44be96d4aed9d2 to fix crashes in
    paranoid mode (closes: #606308).
  * Cherry-pick ee50848a509662aa21c6c6a41b72c4053b1eedf3 to improve scanning
    of mbox files (closes: #589767).

clamav (0.96.5+dfsg-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix encoding of Italian debconf translation.

clamav (0.96.5+dfsg-1ubuntu2) natty; urgency=low

  * Cherry pick 1d99d54d9d5794af0bc7308389e68cf1cc90f4b8 from Debian
    pkg-clamav git to remove leftover temp files from /etc/cron.d/
    clamav-freshclam since cron will consider them valid and use them

Date: 2013-03-20 11:50:26.026716+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/lucid/+source/clamav/0.97.7+dfsg-1ubuntu0.10.04.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Lucid-changes mailing list