[clamav-users] ClamAV CVE's

[Chris Pollock]

On Fri, 2019-08-23 at 18:47 +0200, Matus UHLAR - fantomas wrote:
> On 22.08.19 16:12, Chris Pollock via clamav-users wrote:
> > The most current version is ClamAV 0.100.3 for Ubuntu 18.04.3 LTS.
> > Is
> > there a list of CVE's that I can reference in a bug report to try
> > and
> > get ClamAV updated to the latest version?
> 
> Debian has this:
> 
> https://security-tracker.debian.org/tracker/source-package/clamav
> ...which currently only links to:
> https://security-tracker.debian.org/tracker/CVE-2019-12625
> 
> and ubuntu has this:
> 
> https://people.canonical.com/~ubuntu-security/cve/pkg/clamav.html
> ...which currently only links to:
> 
https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-12625.html
> 
> I haven't looked what the "needs-triage" means.
> 
Hi Matus, I believe this actually relates to the 0.100.3 release.

https://launchpad.net/ubuntu/bionic/+source/clamav

Here's the bug report I did back in March of this year to get the
update done. I'll go in and file a new one this afternoon to see about
getting it updated to the most current release.

https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1822503

Chris

-- 
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.90167 (Elev. 1092 ft)
15:21:54 up 10 days, 6:38, 1 user, load average: 0.97, 0.92, 0.69
Description:	Ubuntu 18.04.3 LTS, kernel 5.0.0-25-generic
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: This is a digitally signed message part
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20190823/0fc6e569/attachment.sig>