UbuntuUpdates.org

Package "clamav-base"

Name: clamav-base

Description:

anti-virus utility for Unix - base package
Latest version: 0.103.12+dfsg-0ubuntu0.20.04.1
Release: focal (20.04)
Level: security
Repository: main
Head package: clamav
Homepage: https://www.clamav.net/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "clamav-base"

All arch deb package
APT INSTALL

Other versions of "clamav-base" in Focal

Repository Area Version
base main 0.102.2+dfsg-2ubuntu1
updates main 0.103.12+dfsg-0ubuntu0.20.04.1

Changelog

Version: 0.103.5+dfsg-1~20.04.1 2022-01-18 16:07:20 UTC

  clamav (0.103.5+dfsg-1~20.04.1) focal-security; urgency=medium

  * Rebuild as security update for focal.

 -- Marc Deslauriers <email address hidden> Mon, 17 Jan 2022 08:19:19 -0500
Source diff to previous version

Version: 0.103.2+dfsg-0ubuntu0.20.04.2 2021-05-04 02:07:02 UTC

  clamav (0.103.2+dfsg-0ubuntu0.20.04.2) focal-security; urgency=medium

  * SECURITY REGRESSION: clamdscan - MULTISCAN parameter causes
    Segmentation fault.
    (LP: #1926300)
    - debian/patches/lp_1926300_multiscan_param_segfault.patch: fix
      --fdpass -m & ExcludePath crash in clamd/scanner.c,
      libclamav/others.h, libclamav/others_common.c,
      unit_tests/check_clamd.c.

 -- Leonidas Da Silva Barbosa <email address hidden> Thu, 29 Apr 2021 08:25:03 -0300
Source diff to previous version
1926300 clamdscan - MULTISCAN parameter causes Segmentation fault error

Version: 0.103.2+dfsg-0ubuntu0.20.04.1 2021-04-19 21:07:02 UTC

  clamav (0.103.2+dfsg-0ubuntu0.20.04.1) focal-security; urgency=medium

  * Updated to version 0.103.2 to fix security issues.
    - CVE-2021-1252, CVE-2021-1404, CVE-2021-1405

 -- Marc Deslauriers <email address hidden> Thu, 15 Apr 2021 12:39:30 -0400
Source diff to previous version
CVE-2021-1252 A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated
CVE-2021-1404 A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.0 and all prior versions could allow an unauthenticated
CVE-2021-1405 A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote att

Version: 0.102.4+dfsg-0ubuntu0.20.04.1 2020-07-27 16:06:52 UTC

  clamav (0.102.4+dfsg-0ubuntu0.20.04.1) focal-security; urgency=medium

  * Updated to 0.102.2 to fix security issues
    - debian/libclamav9.symbols: updated for new version.
    - debian/rules: bumped CL_FLEVEL to 115.
    - CVE-2020-3327
    - CVE-2020-3350
    - CVE-2020-3481

 -- Marc Deslauriers <email address hidden> Thu, 23 Jul 2020 09:08:18 -0400
Source diff to previous version
CVE-2020-3327 A vulnerability in the ARJ archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.2 could allow an unauthenticated, remote attacke
CVE-2020-3350 A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the runn
CVE-2020-3481 A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remo

Version: 0.102.3+dfsg-0ubuntu0.20.04.1 2020-05-21 18:06:46 UTC

  clamav (0.102.3+dfsg-0ubuntu0.20.04.1) focal-security; urgency=medium

  * Updated to 0.102.2 to fix security issues
    - debian/libclamav9.symbols: updated for new version.
    - debian/rules: bumped CL_FLEVEL to 114.
    - CVE-2020-3327
    - CVE-2020-3341

 -- Marc Deslauriers <email address hidden> Tue, 19 May 2020 14:24:37 -0400
CVE-2020-3327 A vulnerability in the ARJ archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.2 could allow an unauthenticated, remote attacke
CVE-2020-3341 A vulnerability in the PDF archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.101 - 0.102.2 could allow an unauthenticated, remote


About   -   Send Feedback to @ubuntu_updates