Please copy 0.94.dfsg.2-1ubuntu0.3~dapper1 and rdepends from dapper-backports to dapper-security

Bug #368785 reported by Imre Gergely
256
Affects Status Importance Assigned to Milestone
clamav (Ubuntu)
Fix Released
High
Unassigned

Bug Description

Binary package hint: clamav

This will resolve the following security bugs:

- bug #360502 (bb#1552)
- bug #354190 (#1335, #1462, CVE 2008-6680, CVE 2009-1270)

Source packages that need copying:

clamav 0.94.dfsg.2-1ubuntu0.3~dapper1
avscan 3.2.2-openssl-1build1~dapper1
clamassassin 1.2.4-1~dapper1
clamcour 0.2.2-1.2build1~dapper2
dansguardian 2.9.9.7-2~dapper1
gurlchecker 0.10.2-2ubuntu1~dapper1
havp 0.89-2ubuntu1~dapper1
klamav 0.44-3~dapper1
python-clamav 0.4.1-1build2~dapper1
python-pyclamd 0.1.1-0ubuntu1~dapper1 (new package, needed to replace functions dropped from python-clamav)
php-clamavlib 0.12a-4~dapper2
sylpheed-claws-gtk-clamav 1.0.5-5.1ubuntu0.1~dapper2
sylpheed-claws-gtk2-clamav 2.6.0-1.1ubuntu1.1~dapper2

Imre Gergely (cemc)
description: updated
Changed in clamav (Ubuntu):
importance: Undecided → High
status: New → In Progress
security vulnerability: yes → no
security vulnerability: no → yes
visibility: private → public
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

These need to be rebuilt in the security PPA, so rather than doing a pocket copy, I will do a no change rebuild for each. Also 'sylpheed-claws-gtk-clamav' should be simply 'sylpheed-claws-clamav'.

Revision history for this message
Scott Kitterman (kitterman) wrote : Re: [Bug 368785] Re: Please copy 0.94.dfsg.2-1ubuntu0.3~dapper1 and rdepends from dapper-backports to dapper-security

There are two different source packages in Dapper, sylpheed-claws (gtk2
port) and slypheed-claws-gtk (gtk version). I do think we need them both.

Revision history for this message
Scott Kitterman (kitterman) wrote :

Silght correction:

sylpheed-claws = GTK 1 version
sylpheed-claws-gtk2 = GTK 2 version

we need them both (OTOH, the chances that these packages have any users are roughly nil, so I'm reasonably certain I'm not very excited either way - I just like to be complete).

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Yeah, I wasn't commenting on sylpheed-claws-* worth, just that sylpheed-claws-gtk-clamav should be 'sylpheed-claws' (I know I said sylpheed-claws-clamav, but I meant sylpheed-claws ;). I am working on these now.

Revision history for this message
Scott Kitterman (kitterman) wrote :

Ah, right. Source package versus binary package. Got it. I'm slow today.

Changed in clamav (Ubuntu):
status: In Progress → Fix Committed
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

clamav (0.94.dfsg.2-1ubuntu0.3~dapper2) dapper-security; urgency=low

  * No change rebuild from backports

Changed in clamav (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.