Bug#911186: stretch-pu: package clamav/0.100.1+dfsg-0+deb9u1
On 2018-10-20 10:42:06 [+0100], Adam D. Barratt wrote:
> On Wed, 2018-10-17 at 00:26 +0200, Sebastian Andrzej Siewior wrote:
> > clamav upstream published a new version which contains security
> > relevant bug fixes, one of them has CVE-2018-15378 assigned.
>
> Is the expectation that this would be pushed via -updates?
Yes, please.
CVE-2018-15378
Vulnerability in ClamAV's MEW unpacking feature that could allow an
unauthenticated, remote attacker to cause a denial-of-service (DoS)
condition on an affected device.
> Regards,
>
> Adam
Sebastian
Reply to: