Please copy 0.94.dfsg.2-1ubuntu0.3~dapper1 and rdepends from dapper-backports to dapper-security

Bug #368785 reported by Imre Gergely
256
Affects Status Importance Assigned to Milestone
clamav (Ubuntu)
Fix Released
High
Unassigned

Bug Description

Binary package hint: clamav

This will resolve the following security bugs:

- bug #360502 (bb#1552)
- bug #354190 (#1335, #1462, CVE 2008-6680, CVE 2009-1270)

Source packages that need copying:

clamav 0.94.dfsg.2-1ubuntu0.3~dapper1
avscan 3.2.2-openssl-1build1~dapper1
clamassassin 1.2.4-1~dapper1
clamcour 0.2.2-1.2build1~dapper2
dansguardian 2.9.9.7-2~dapper1
gurlchecker 0.10.2-2ubuntu1~dapper1
havp 0.89-2ubuntu1~dapper1
klamav 0.44-3~dapper1
python-clamav 0.4.1-1build2~dapper1
python-pyclamd 0.1.1-0ubuntu1~dapper1 (new package, needed to replace functions dropped from python-clamav)
php-clamavlib 0.12a-4~dapper2
sylpheed-claws-gtk-clamav 1.0.5-5.1ubuntu0.1~dapper2
sylpheed-claws-gtk2-clamav 2.6.0-1.1ubuntu1.1~dapper2

Imre Gergely (cemc)
description: updated
Changed in clamav (Ubuntu):
importance: Undecided → High
status: New → In Progress
security vulnerability: yes → no
security vulnerability: no → yes
visibility: private → public
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

These need to be rebuilt in the security PPA, so rather than doing a pocket copy, I will do a no change rebuild for each. Also 'sylpheed-claws-gtk-clamav' should be simply 'sylpheed-claws-clamav'.

Revision history for this message
Scott Kitterman (kitterman) wrote : Re: [Bug 368785] Re: Please copy 0.94.dfsg.2-1ubuntu0.3~dapper1 and rdepends from dapper-backports to dapper-security

There are two different source packages in Dapper, sylpheed-claws (gtk2
port) and slypheed-claws-gtk (gtk version). I do think we need them both.

Revision history for this message
Scott Kitterman (kitterman) wrote :

Silght correction:

sylpheed-claws = GTK 1 version
sylpheed-claws-gtk2 = GTK 2 version

we need them both (OTOH, the chances that these packages have any users are roughly nil, so I'm reasonably certain I'm not very excited either way - I just like to be complete).

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Yeah, I wasn't commenting on sylpheed-claws-* worth, just that sylpheed-claws-gtk-clamav should be 'sylpheed-claws' (I know I said sylpheed-claws-clamav, but I meant sylpheed-claws ;). I am working on these now.

Revision history for this message
Scott Kitterman (kitterman) wrote :

Ah, right. Source package versus binary package. Got it. I'm slow today.

Changed in clamav (Ubuntu):
status: In Progress → Fix Committed
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

clamav (0.94.dfsg.2-1ubuntu0.3~dapper2) dapper-security; urgency=low

  * No change rebuild from backports

Changed in clamav (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers