-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sat, 19 Jul 2008 06:26:52 +0000 Source: clamav Binary: clamav libclamav-dev clamav-dbg clamav-milter clamav-base clamav-freshclam clamav-testfiles clamav-daemon libclamav2 clamav-docs Architecture: i386 Version: 0.90.1dfsg-3etch13 Distribution: stable-security Urgency: high Maintainer: Debian/i386 Build Daemon Changed-By: Devin Carraway Description: clamav - antivirus scanner for Unix clamav-daemon - antivirus scanner daemon clamav-dbg - debug symbols for clamav clamav-freshclam - downloads clamav virus databases from the Internet clamav-milter - antivirus scanner for sendmail libclamav-dev - clam Antivirus library development files libclamav2 - virus scanner library Changes: clamav (0.90.1dfsg-3etch13) stable-security; urgency=high . * Non-maintainer upload by the security team * Backport upstream fix for CVE-2008-2713, addressing a denial of service vulnerability in the Petite executable unpacker. A maliciously crafted petite-packed executable could trigger an out-of-bound memory read, resulting in a crash. Thanks to Stephen Gran for his help identifying the problem. Files: abda6f85b907020002db72c72bfc9e7f 339634 libs optional libclamav2_0.90.1dfsg-3etch13_i386.deb f0d807d0d78925dfafd6e4df8f395824 852928 utils optional clamav_0.90.1dfsg-3etch13_i386.deb 9e7400982700784cc88a1dda2f86265c 175214 utils optional clamav-daemon_0.90.1dfsg-3etch13_i386.deb 9ea5f4014a561d1c8c81bb4ed149aba8 9299918 utils optional clamav-freshclam_0.90.1dfsg-3etch13_i386.deb dc4b6324abca43d7eea2b11b7fcf660a 175750 utils extra clamav-milter_0.90.1dfsg-3etch13_i386.deb 477ce1e1eb226df1025408eee37e1b3b 338050 libdevel optional libclamav-dev_0.90.1dfsg-3etch13_i386.deb 44ef9740caff7cb69206597e398f9e3a 559534 utils extra clamav-dbg_0.90.1dfsg-3etch13_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFIg7AEU5XKDemr/NIRArIPAJ9r4fahdbavLbGU6w0prKHEtx/VcwCeLftx n6I1zw2THgSkw/XF9BH1S1w= =B82K -----END PGP SIGNATURE-----