Accepted clamav 0.101.4+dfsg-0+deb9u1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 25 Aug 2019 14:08:40 +0200
Source: clamav
Architecture: source
Version: 0.101.4+dfsg-0+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel@lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Closes: 921190 934359
Changes:
clamav (0.101.4+dfsg-0+deb9u1) stretch; urgency=medium
.
* Import 0.101.4 (Closes: 921190)
- CVE-2019-12625 (Add scan time limit to limit the processing zip-bombs)
(Closes:934359)
- CVE-2019-12900 (An out of bounds write was possible within ClamAV's
NSIS bzip)
- update symbols file (bump to 101.4 and drop unused cli_strnstr).
Checksums-Sha1:
69d9c3bb793bb26f9c16b08a15cfc743ebb0372d 2889 clamav_0.101.4+dfsg-0+deb9u1.dsc
ae609c30ebf523a2f5e1b5f3cf25332cbb48686d 4975416 clamav_0.101.4+dfsg.orig.tar.xz
7c614cbca89e6a7a92412e7ec71bdd56143f49d8 218824 clamav_0.101.4+dfsg-0+deb9u1.debian.tar.xz
4fe97c0ba8361fc4d3f1955b2871863d47b06602 6508 clamav_0.101.4+dfsg-0+deb9u1_source.buildinfo
Checksums-Sha256:
e83ab95832a72e2dee0e1e687d2e07cdf34cc84382d50f1501c8d88925e749f2 2889 clamav_0.101.4+dfsg-0+deb9u1.dsc
f97e09180cf15391db8b5c9db18a1409b748a417861a6aa4621db8844dde3c23 4975416 clamav_0.101.4+dfsg.orig.tar.xz
cd31b1fa022a1b6bf3d999451f89b47d5824ff808f5a390b3f7466210074bb0b 218824 clamav_0.101.4+dfsg-0+deb9u1.debian.tar.xz
c6173dce621fe5c932f1241b3910cb75a73a614a86751765d8dd1a8e851a2018 6508 clamav_0.101.4+dfsg-0+deb9u1_source.buildinfo
Files:
ef28c57709b63882766dfcd67f5d5be6 2889 utils optional clamav_0.101.4+dfsg-0+deb9u1.dsc
915d7b2d6113055a31d8adcca1e0d0dd 4975416 utils optional clamav_0.101.4+dfsg.orig.tar.xz
efaab28bd668ae55f4875b3dd285184d 218824 utils optional clamav_0.101.4+dfsg-0+deb9u1.debian.tar.xz
fd5938bf6930ab3d04358730cf18ac57 6508 utils optional clamav_0.101.4+dfsg-0+deb9u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=WqiB
-----END PGP SIGNATURE-----
Reply to: