Attention ! Gitlab fournissant maintenant nativement des certificats Let’s Encrypt aux domaines personnalisés des Gitlab Pages, nous avons coupé notre service qui le faisait automatiquement pour vous.

Il est impératif, pour que votre domaine personnalisé continue à avoir un certificat Let’s Encrypt à jour, d’activer la fonctionnalité native dans les paramètres de votre projet. Cette activation remplacera votre certificat actuel par un nouveau certificat Let’s Encrypt géré par Gitlab.

Voir les détails sur https://docs.framasoft.org/fr/gitlab/gitlab-pages-le.html

clamav.yaml 122 KB
Newer Older
Etalab's avatar
Etalab committed
1 2 3
name: clamav
canonical:
  longDescription:
Etalab's avatar
Etalab committed
4
    en:
Etalab's avatar
Etalab committed
5
      source: debian
Etalab's avatar
Etalab committed
6
      value: " Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of\n this software is the integration with mail servers (attachment\n scanning). The package provides a flexible and scalable\n multi-threaded daemon in the clamav-daemon package, a command-line\n scanner in the clamav package, and a tool for automatic updating via\n the Internet in the clamav-freshclam package. The programs are based\n on libclamav6, which can be used by other software.\n .\n This package contains the command line interface. Features:\n  - built-in support for various archive formats, including Zip, Tar,\n    Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS and others;\n  - built-in support for almost all mail file formats;\n  - built-in support for ELF executables and Portable Executable files\n    compressed with UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack and\n    obfuscated with SUE, Y0da Cryptor and others;\n  - built-in support for popular document formats including Microsoft\n    Office and Mac Office files, HTML, RTF and PDF.\n .\n For scanning to work, a virus database is needed. There are two options\n for getting it:\n  - clamav-freshclam: updates the database from Internet. This is\n    recommended with Internet access.\n  - clamav-data: for users without Internet access. The package is\n    not updated once installed. The clamav-getfiles package allows\n    creating custom packages from an Internet-connected computer.\n"
Etalab's avatar
Etalab committed
7
    fr:
8
      source: debian
Etalab's avatar
Etalab committed
9
      value: " Clam AntiVirus est une boîte à outils anti-virus pour Unix. Le principal\n but de ce logiciel est l'intégration avec des serveurs de courriels pour\n analyser les pièces jointes. Le paquet «\_clamav-daemon\_» fournit un démon\n flexible, qui passe à l'échelle et multi-thread, «\_clamav\_» fournit\n l'analyseur en ligne de commande et «\_clamav-freshclam\_» fournit un outil\n pour les mises à jour automatiques par internet. Les programmes sont basés\n sur libclamav6, qui peut être utilisé par d'autres logiciels.\n .\n Ce paquet contient l'interface en ligne de commande. Fonctionnalités\_:\n  -  support natif pour certains formats d'archive, notamment Zip, Tar,\n     Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS\_;\n  - support natif pour pratiquement tout les formats de fichiers de\n     courriels\_;\n  - support natif pour les exécutables ELF et les fichiers exécutables\n     portables compressés avec UPX, FSG, Petite, NsPack, wwpack32, MEW,\n     Upack et obscurcis par SUE, Y0da Cryptor et d'autres\_;\n  -  support natif pour les formats populaires de documents, notamment pour\n      les fichiers Microsoft Office et Mac Office, HTML, RTF et PDF.\n .\n Pour que l'analyse fonctionne, une base de données de virus est nécessaire.\n Il y a deux options pour cela\_:\n  -  clamav-freshclam\_: met à jour la base de données depuis Internet.\n     C'est la solution recommandée si un accès internet est disponible\_;\n  -  clamav-data\_: pour les utilisateurs sans accès internet. Ce paquet\n     n'est pas mis à jour une fois installé. Le paquet clamav-getfiles\n     permet de créer un paquet personnalisé depuis un ordinateur relié à\n     Internet.\n"
Etalab's avatar
Etalab committed
10
  screenshot:
11
    source: debian
Etalab's avatar
Etalab committed
12
    value: 'http://screenshots.debian.net/screenshots/c/clamav/5815_large.png'
Emmanuel Raviart's avatar
Emmanuel Raviart committed
13
debian:
14 15 16 17
  _source:
    name: Universal Debian Database
    description_url: 'https://wiki.debian.org/UltimateDebianDatabase'
    url: 'https://git.framasoft.org/codegouv/udd-yaml'
Etalab's avatar
Etalab committed
18
  name: clamav
Emmanuel Raviart's avatar
Emmanuel Raviart committed
19
  description:
20 21 22
    cs:
      description: Antivirus pro Unix - rozhraní pro příkazovou řádku
      long_description: " Clam AntiVirus je antivirus pro Unix. Hlavním účelem tohoto programu je jeho\n integrace s emailovými servery (skenování příloh). Tento balíček nainstaluje\n flexibilní a dostupný více-vláknový daemon clamav-daemon, skener pro příkazovou\n řádku z balíčku clamav a nástroj pro automatickou aktualizaci přes Internet v\n balíčku clamav-freshclam. Programy jsou založené na libclamav6, který je možno\n používat také jinými programy.\n .\n Tento balíček obsahuje programy pro příkazovou řádku. Vlastnosti:\n  - vestavěná podporu různých formátů včetně Zip, Tar,\n    Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS a dalších;\n  - vestavěná podpora pro téměř všechny formáty emailových souborů;\n  - vestavěná podpora pro spustitelné soubory ELF a soubory PE (Portable\n    Executable) komprimované pomocí UPX, FSG, Petite, NsPack, wwpack32, MEW,\n    Upack a SUE, Y0da Cryptor a další;\n  - vestavěná podpora populárních formátů včetně Microsoft Office a Mac\n    Office, HTML, RTF a PDF.\n .\n Pro správnou funkci skenování je potřeba virová databáze. K dispozici jsou\n dvě možnosti jak  získat:\n  - clamav-freshclam: aktualizuje databázi prostřednictvím Internetu. Toto\n    je doporučovaná metoda, pokud máte přístup na Internet.\n  - clamav-data: pro uživatele bez přístupu k Internetu. Balíček není po\n    instalaci aktualizován. Balíček clamav-getfiles vám umožní vytváření\n    vlastních balíčků pomocí jiného počítače, který je k Internetu připojen.\n"
Etalab's avatar
Etalab committed
23 24 25
    da:
      description: antivirusredskab for Unix - kommandolinjebrugerflade
      long_description: " Clam AntiVirus er et antivirus-værktøjssæt til Unix. Hovedformålet med\n programmet er integration til postserveren (skanning af vedhæftninger).\n Pakken tilbyder en fleksibel og skalérbar, multitrådet dæmon i pakken\n clamav-daemon, en kommandolinjeskanner i pakken clamav, og et værktøj til\n automatisk opdatering via internettet med pakken clamav-freshclam.\n Programmerne er baseret  libclamav6, der kan benyttes af andre\n programmer.\n .\n Denne pakke indeholder kommandolinjebrugerfladen. Funktioner:\n  - indbygget understøttelse af forskellige arkivformater, inklusive\n    Zip, Tar, Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS og andre;\n  - indbygget understøttelse for næsten alle væsentlige filformater;\n  - indbygget understøttelse for ELF-kørbare filer og flytbare kørbare\n    filer komprimeret med UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack\n    og gjort svært at læse for mennesker med SUE, Yoda Cryptor og andre;\n  - indbygget understøttelse for populære dokumentformater inklusive\n    Microsoft Office- og Mac Office-filer, HTML, RTF og PDF.\n .\n For at skanning kan virke er en virusdatabase nødvendig. Der er to\n muligheder for dette:\n  - clamav-freshclam: Opdaterer databasen fra internettet. Dette\n    anbefales med internetadgang.\n  - clamav-data: For brugere uden internetadgang. Pakken bliver ikke\n    opdateret når installreet. Pakken Clamav-getfiles tillader oprettelse\n    af tilpassede pakker fra en internetforbundet computer.\n"
Emmanuel Raviart's avatar
Emmanuel Raviart committed
26 27
    de:
      description: Anti-Virus-Programm für Unix - Kommandozeilenschnittstelle
Etalab's avatar
Etalab committed
28
      long_description: " Clam AntiVirus ist ein Anti-Viren-Werkzeugsatz für Unix. Der Hauptzweck\n dieser Software ist die Zusammenarbeit mit einem E-Mail-Server (zur\n Prüfung von E-Mail-Anhängen). Das Software-Paket umfasst einen flexiblen\n und skalierbaren Multi-Thread-Daemon im Paket clamav-daemon, einen\n Kommandozeilen-Scanner in dem Paket clamav und ein Werkzeug zur automatischen\n Aktualisierung via Internet im Paket clamav-freshclam. Die Programme basieren\n auf der Bibliothek libclamav6, welche auch von anderen Programmen verwendet\n werden kann.\n .\n Dieses Paket enthält die Kommandozeilenschnittstelle. Eigenschaften:\n   - Integrierte Unterstützung für verschiedene Archivformate,\n     einschließlich Zip, Tar, Gzip, Bzip2, OLE2, Cabinet, CHM,\n     BinHex, SIS und andere;\n   - Integrierte Unterstützung für fast alle E-Mail-Dateiformate;\n   - Integrierte Unterstützung für ausführbare ELF- und\n     Portable-Executable-Dateien, die mit UPX, FSG, Petite, NsPack,\n     wwpack32, MEW, Upack komprimiert und mit SUE, Y0da Cryptor und\n     anderen verschleiert wurden;\n   - Integrierte Unterstützung für gängige Dokumentformate,\n     einschließlich Microsoft Office und Mac Office, HTML, RTF und PDF.\n .\n Für das Scannen ist eine Virusdatenbank erforderlich. Es gibt zwei\n Möglichkeiten, an diese zu gelangen:\n  - clamav-freshclam: Aktualisiert die Datenbank aus dem Internet.\n    Wird empfohlen, wenn Sie Internetzugang haben.\n  - clamav-data: Für Benutzer ohne Internet-Zugang. Das Paket wird\n    nach der Installation nicht mehr aktualisiert. Das Paket\n    clamav-getfiles ermöglicht das Erstellen benutzereigener Pakete\n    an einem mit dem Internet verbundenen Computer.\n"
Emmanuel Raviart's avatar
Emmanuel Raviart committed
29 30
    en:
      description: anti-virus utility for Unix - command-line interface
Etalab's avatar
Etalab committed
31
      long_description: " Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of\n this software is the integration with mail servers (attachment\n scanning). The package provides a flexible and scalable\n multi-threaded daemon in the clamav-daemon package, a command-line\n scanner in the clamav package, and a tool for automatic updating via\n the Internet in the clamav-freshclam package. The programs are based\n on libclamav6, which can be used by other software.\n .\n This package contains the command line interface. Features:\n  - built-in support for various archive formats, including Zip, Tar,\n    Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS and others;\n  - built-in support for almost all mail file formats;\n  - built-in support for ELF executables and Portable Executable files\n    compressed with UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack and\n    obfuscated with SUE, Y0da Cryptor and others;\n  - built-in support for popular document formats including Microsoft\n    Office and Mac Office files, HTML, RTF and PDF.\n .\n For scanning to work, a virus database is needed. There are two options\n for getting it:\n  - clamav-freshclam: updates the database from Internet. This is\n    recommended with Internet access.\n  - clamav-data: for users without Internet access. The package is\n    not updated once installed. The clamav-getfiles package allows\n    creating custom packages from an Internet-connected computer.\n"
Emmanuel Raviart's avatar
Emmanuel Raviart committed
32 33
    fr:
      description: Utilitaire anti-virus pour Unix - interface en ligne de commande
Etalab's avatar
Etalab committed
34
      long_description: " Clam AntiVirus est une boîte à outils anti-virus pour Unix. Le principal\n but de ce logiciel est l'intégration avec des serveurs de courriels pour\n analyser les pièces jointes. Le paquet «\_clamav-daemon\_» fournit un démon\n flexible, qui passe à l'échelle et multi-thread, «\_clamav\_» fournit\n l'analyseur en ligne de commande et «\_clamav-freshclam\_» fournit un outil\n pour les mises à jour automatiques par internet. Les programmes sont basés\n sur libclamav6, qui peut être utilisé par d'autres logiciels.\n .\n Ce paquet contient l'interface en ligne de commande. Fonctionnalités\_:\n  -  support natif pour certains formats d'archive, notamment Zip, Tar,\n     Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS\_;\n  - support natif pour pratiquement tout les formats de fichiers de\n     courriels\_;\n  - support natif pour les exécutables ELF et les fichiers exécutables\n     portables compressés avec UPX, FSG, Petite, NsPack, wwpack32, MEW,\n     Upack et obscurcis par SUE, Y0da Cryptor et d'autres\_;\n  -  support natif pour les formats populaires de documents, notamment pour\n      les fichiers Microsoft Office et Mac Office, HTML, RTF et PDF.\n .\n Pour que l'analyse fonctionne, une base de données de virus est nécessaire.\n Il y a deux options pour cela\_:\n  -  clamav-freshclam\_: met à jour la base de données depuis Internet.\n     C'est la solution recommandée si un accès internet est disponible\_;\n  -  clamav-data\_: pour les utilisateurs sans accès internet. Ce paquet\n     n'est pas mis à jour une fois installé. Le paquet clamav-getfiles\n     permet de créer un paquet personnalisé depuis un ordinateur relié à\n     Internet.\n"
Emmanuel Raviart's avatar
Emmanuel Raviart committed
35 36
    it:
      description: utilità anti-virus per Unix - interfaccia a riga di comando
Etalab's avatar
Etalab committed
37
      long_description: " Clam AntiVirus è un toolkit anti-virus per Unix. Lo scopo principale di\n questo software è l'integrazione con i mail server (scansione degli\n allegati). Il software fornisce un demone flessibile e con thread multipli\n nel pacchetto clamav-daemon, uno scanner a riga di comando nel pacchetto\n clamav e uno strumento per l'aggiornamento automatico via Internet nel\n pacchetto clamav-freshclam. I programmi sono basati sulla libreria\n libclamav6 che può essere usata da altro software.\n .\n Questo pacchetto contiene l'interfaccia a riga di comando.\n Caratteristiche:\n  - supporto integrato per vari formati archivio, inclusi Zip, Tar,\n    Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS e altri;\n  - supporto integrato per quasi tutti i formati di file di posta;\n  - supporto integrato per eseguibili ELF e file Portable Executable\n    compressi con UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack e\n    offuscati con SUE, Y0da Cryptor e altri;\n  - supporto integrato per formati popolari per documenti inclusi file\n    Microsoft Office e Mac Office, HTML, RTF e PDF.\n .\n Affinché la scansione funzioni, è necessario un database di virus. Ci\n sono due opzioni:\n  - clamav-freshclam: aggiorna il database da Internet; è la scelta\n    raccomandata se si ha accesso ad Internet;\n  - clamav-data: per utenti senza accesso ad Internet. Il pacchetto non\n    viene aggiornato una volta installato. Il pacchetto clamav-getfiles\n    permette di creare pacchetti personalizzati da un computer connesso\n    ad Internet.\n"
Etalab's avatar
Etalab committed
38 39 40
    pl:
      description: Narzędzie antywirusowe do Uniksa - interfejs wiersza poleceń
      long_description: " Clam AntiVirus to narzędzie antywirusowe do Uniksa. Głównym celem tego\n programu jest integracja z serwerami poczty (skanowanie załączników).\n Pakiet dostarcza elastycznego i skalowalnego, wielowątkowego demona w\n pakiecie clamav-deamon, skaner działający z wiersza poleceń w pakiecie\n clamav, oraz narzędzie do automatycznej aktualizacji przez Internet w\n pakiecie clamav-freshclam. Programy oparte  na bibliotece libclamav6,\n która może być użyta przez inne oprogramowanie.\n .\n Pakiet zawiera interfejs wiersza poleceń. Do jego funkcji należą:\n  - wbudowana obsługa różnych formatów archiwów, włączając Zip, Tar, Gzip,\n    Bzip2, OLE2, Cabinet, CHM, BinHex, SIS i innych;\n  - wbudowana obsługa większości formatów wiadomości email;\n  - wbudowana obsługa plików ELF i przenośnych plików wykonywalnych\n    skompresowanych w UPX, FSG, Petite, NsPack, wwpack332, MEW, Upack\n    i ukrytych w SUE, Y0da Cryptor i innych;\n  - wbudowana obsługa popularnych formatów dokumentów wliczając w to\n    Microsoft Office, Mac Office, HTML, RTF i PDF.\n .\n Aby skanowanie działało, potrzebna jest baza wirusów. Można  pozyskać\n na dwa sposoby:\n  - clamav-freshclam: aktualizacje bazy z Internetu. Rekomendowane, wymaga\n    dostępu do Internetu.\n  - clamav-data: dla użytkowników bez dostępu do Internetu. Pakiet raz\n    zainstalowany nie jest aktualizowany. Pakiet clamav-getfiles pozwala\n    tworzyć własne pakiety z bazą przy pomocy komputera połączonego\n    z Internetem.\n"
Emmanuel Raviart's avatar
Emmanuel Raviart committed
41 42
    pt:
      description: Utilitário anti-vírus para Unix - interface de linha de comandos
Etalab's avatar
Etalab committed
43
      long_description: " Clam AntiVirus é um conjunto de ferramentas anti-vírus para Unix. O\n objectivo principal deste software é a integração com servidores de mail\n (sondagem de ficheiros anexados). O pacote disponibiliza um daemon de\n multi-processos flexível e escalável no pacote clamav-daemon, um scanner\n de linha de comandos no pacote clamav, e uma ferramenta para actualização\n automática via Internet no pacote clamav-freshclam. Os programas são\n baseados na libclamav6, a qual pode ser usada por outro software.\n .\n Este pacote contém a interface de linha de comandos. Funções:\n  - suporte embebido para vários formatos de arquivos, incluindo Zip, Tar,\n    Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS e outros;\n  - suporte embebido para quase todos os formatos de ficheiros de mail;\n  - suporte embebido para executáveis ELF e ficheiros executáveis portáveis\n comprimidos com UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack e ofuscados\n com SUE, Y0da Cryptor e outros;\n  - suporte embebido para formatos de documentos populares incluindo\n ficheiros do Microsoft Office e do Mac Office, HTML, RTF e PDF.\n .\n Para que a busca de vírus funcione, é necessária uma base de dados.\n Existem duas opções para as conseguir:\n  - clamav-freshclam: actualiza a base de dados a partir da Internet. Isto\n é recomendado com acesso à Internet.\n  - clamav-data: para utilizadores sem Internet. O pacote não é actualizado\n após instalação. O pacote clamav-getfiles permite a criação de pacotes\n personalizados a partir dum computador ligado à Internet.\n"
Emmanuel Raviart's avatar
Emmanuel Raviart committed
44 45
    pt_BR:
      description: utilitário antivírus para Unix - interface em linha de comando
Etalab's avatar
Etalab committed
46
      long_description: " Clam AntiVirus é um kit de ferramentas de antivírus para Unix. O principal\n objetivo deste software é a integração com servidores de e-mail (varredura\n de anexos). O pacote fornece um daemon multi-thread flexível e escalável\n no pacote clamav-daemon, um scanner em linha de comando no pacote clamav e\n uma ferramenta para atualizações automáticas via Internet no pacote\n clamav-freshclam. Os programas são baseados na libclamav6, que pode ser\n usada por outros softwares.\n .\n Este pacote contém a interface em linha de comando. Recursos:\n  - suporte embutido a vários formatos de arquivo, incluindo Zip, Tar, Gzip,\n    Bzip2, OLE2, Cabinet, CHM, BinHex, SIS e outros;\n  - suporte embutido para quase todos os formatos de arquivo de e-mail;\n  - suporte embutido para executáveis ELF e arquivos executáveis portáveis\n    (Portable Executable) comprimidos com UPX, FSG, Petite, NsPack,\n    wwpack32, MEW, Upack e ofuscados com SUE, Y0da Cryptor e outros;\n  - suporte embutido para formatos de documentos populares incluindo\n    arquivos Microsoft Office e Mac Office, HTML, RTF e PDF.\n .\n Para que a varredura funcione, um banco de dados de vírus é necessário. \n duas opções para obtê-lo:\n  - clamav-freshclam: atualiza o banco de dados pela Internet. Este é o\n    recomendado para usuários com acesso à Internet.\n  - clamav-data: para usuários sem acesso à Internet. O pacote não é\n    atualizado após instalado. O pacote clamav-getfiles permite a criação\n    de pacotes personalizados a partir de um computador conectado à\n    Internet.\n"
Emmanuel Raviart's avatar
Emmanuel Raviart committed
47 48
    ru:
      description: антивирусная утилита для Unix (интерфейс командной строки)
Etalab's avatar
Etalab committed
49
      long_description: " Clam AntiVirus -- это антивирусный комплекс для Unix-подобных операционных\n систем. Основным предназначением этой программы является интеграция с\n почтовыми серверами (проверка вложений).\n Пакет clamav-daemon содержит гибкую и расширяемую фоновую службу,\n пакет clamav -- утилиту командной строки, пакет clamav-freshclam --\n инструмент для обновления информации о вирусах через Интернет. Эти\n программы основаны на библиотеке libclamav6, которая может использоваться и\n другими приложениями.\n .\n Этот пакет содержит интерфейс командной строки. Возможности:\n  - встроенная поддержка множества форматов архивов, включая Zip, Tar,\n    Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS и другие;\n  - встроенная поддержка большинства почтовых форматов представления файлов;\n  - встроенная поддержка исполняемых файлов ELF и Portable Executable\n    сжатых при помощи UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack или\n    замаскированных посредством SUE, Y0da Cryptor и прочих;\n  - встроенная поддержка распространённых форматов документов, включая файлы\n    Microsoft Office, Mac Office, HTML, RTF и PDF.\n .\n Для работы антивируса требуется база данных вирусов. Существует два\n способа для её получения:\n  * clamav-freshclam -- обновление баз данных через интернет. Рекомендуется\n    при наличии доступа к интернет.\n  * clamav-data -- пакет для пользователей без доступа в интернет.\n    База данных обновляется при обновлении пакета из репозиториев.\n    Пакет clamav-getfiles позволяет формировать собственные базы вирусов\n    с помощью компьютера, имеющего доступ в интернет.\n"
Emmanuel Raviart's avatar
Emmanuel Raviart committed
50 51
    sk:
      description: antivírus pre unixové systémy - rozhranie príkazového riadka
Etalab's avatar
Etalab committed
52
      long_description: " Clam AntiVirus je sada antivírusových nástrojov pre unixové systémy.\n Hlavným účelom tohto softvéru je integrácia s poštovými servermi\n (skenovanie príloh). Tento balík poskytuje flexibilného a škálovateľného\n viacvláknového démona, skener pre príkazový riadok v balíku clamav a\n nástroj na automatickú aktualizáciu prostredníctvom internetu v balíku\n clamav-freshclam. Programy  založené na knižnici libclamav6, ktorú môže\n využívať aj iný softvér.\n .\n Tento balík obsahuje rozhranie príkazového riadka. Vlastnosti:\n  * zabudovaná podpora rôznych formátov archívov vrátane zip, tar, gzip,\n    bzip2, OLE2, Cabinet, CHM, BinHex, SIS a ďalších\n  * zabudovaná podpora takmer všetkých formátov emailov\n  * zabudovaná podpora spustiteľných súborov ELF a PE, skomprimovaných\n    pomocou PX, FSG, Petite, NsPack, wwpack32, MEW, Upack a znečitateľnených\n    pomocou SUE, Y0da Cryptor a ďalších\n  * zabudovaná podpora populárnych formátov dokumentov vrátane súborov\n    Microsoft Office a Mac Office, HTML, RTF a PDF.\n .\n Aby skenovanie fungovalo, je potrebná databáza vírusov. Existujú dve\n možnosti ako ju získať:\n  * clamav-freshclam: aktualizuje databázu z internetu. Ak máte prístup\n    k internetu, toto je odporúčaný spôsob.\n  * clamav-data: pre používateľov bez prístupu k internetu. Balík sa po\n    inštalácii neaktualizuje. Balík clamav-getfiles umožňuje tvorbu\n    vlastných balíkov na počítači s pripojením k internetu.\n"
Emmanuel Raviart's avatar
Emmanuel Raviart committed
53 54
    sv:
      description: antivirusverktyg för Unix – kommandoradsgränssnitt
Etalab's avatar
Etalab committed
55
      long_description: " Clam AntiVirus är ett antivirusverktyg för Unix. Huvudsyftet med detta\n program är integrationen med e-postservrar (skanning av bilagor). Paketet\n tillhandahåller en flexibel och skalbar flertrådad demon i paketet\n clamav-daemon, en kommandoradsskanner i paketet clamav och ett verktyg för\n automatiska uppdateringar via internet i paketet clamav-freshclam.\n Programmen baseras  libclamav6, som också kan användas av andra program.\n .\n Detta paket innehåller gränssnittet för kommandoraden. Funktioner:\n - inbyggt stöd för olika arkivformat, inklusive Zip, Tar,\n   Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS och andra\n - inbyggt stöd för nästan alla e-postformat\n - inbyggt stöd för ELF-programfiler och Portable-programfiler\n   komprimerade med UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack och\n   förvrängda med SUE, Y0da Cryptor och andra\n - inbyggt stöd för populära dokumentformat inklusive Microsoft\n   Office och Mac Office filer, HTML, RTF och PDF\n .\n För att skanning skall fungera behövs en virusdatabas. Det finns två\n alternativ för att erhålla den:\n - clamav-freshclam: uppdaterar databasen från internet. Detta\n   rekommenderas vid åtkomst till internet.\n - clamav-data: för användare utan internetåtkomst. Detta paket\n   uppdateras inte efter installation. Paketet clamav-getfiles kan\n   skapa anpassade paket från en internetansluten dator.\n"
Emmanuel Raviart's avatar
Emmanuel Raviart committed
56 57
    uk:
      description: Антивірусна утиліта для Unix — інтерфейс командного рядка
Etalab's avatar
Etalab committed
58
      long_description: " Clam AntiVirus  це антивірусний комплекс для Unix. Основною метою проекту\n є інтеграція з поштовими серверами (для перевірки вкладень). Цей пакунок\n надає гнучку і розширювану фонову службу  пакунок clamav-daemon, сканер з\n інтерфейсом командного рядка у пакунку clamav, а також інструмент для\n автоматичного оновлення антивірусних баз через мережу Інтернет, у пакунку\n clamav-freshclam. Програма базується на бібліотеці libclamav6, яка може\n використовуватись й іншим програмним забезпеченням.\n .\n Цей пакунок містить інтерфейс командного рядка. Можливості:\n  * вбудована підтримка різних типів архівів (Zip, RAR, Tar, Gzip, Bzip2,\n    Ole2, Cabinetm, CHM, BinHex, SIS та інших)\n  * вбудована підтримка майже всіх форматів пошти\n  * вбудована підтримка виконавчих файлів ELF і Portable Executable,\n    стиснених за допомогою UPX, FSG, Petite, Nspack, wwpack32, MEW, Upack\n    та зашифрованих SUE, Y0da Cryptor та інших;\n  * вбудована підтримка популярних форматів документів, включаючи файли\n    Microsoft Office і Mac Office, HTML, RTF і PDF.\n .\n Для роботи антивірусу потрібна база даних вірусів. Існує два способи для її\n здобуття:\n  * clamav-freshclam  оновлення баз даних через інтернет. Рекомендується\n    за наявності доступу до інтернет.\n  * clamav-data  пакунок для користувачів без доступу в Інтернет.\n    Пакунок не оновлюється після установки. Пакунок clamav-getfiles\n    дозволяє створювати власні бази даних за допомогою комп'ютера, що має\n    доступ в Інтернет.\n"
Emmanuel Raviart's avatar
Emmanuel Raviart committed
59
  screenshot:
Etalab's avatar
Etalab committed
60 61 62
    large_image_url: 'http://screenshots.debian.net/screenshots/c/clamav/5815_large.png'
    screenshot_url: 'http://screenshots.debian.net/package/clamav'
    small_image_url: 'http://screenshots.debian.net/screenshots/c/clamav/5815_small.png'
63
  security_issues:
64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87
    CVE-2003-0946:
      description: 'Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address argument of a "MAIL FROM" command.'
      releases:
        jessie:
          fixed_version: '0.65'
          status: resolved
          urgency: 'high**'
        sid:
          fixed_version: '0.65'
          status: resolved
          urgency: 'high**'
        squeeze:
          fixed_version: '0.65'
          status: resolved
          urgency: 'high**'
        stretch:
          fixed_version: '0.65'
          status: resolved
          urgency: 'high**'
        wheezy:
          fixed_version: '0.65'
          status: resolved
          urgency: 'high**'
      scope: remote
Etalab's avatar
Etalab committed
88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111
    CVE-2004-0270:
      description: 'libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.'
      releases:
        jessie:
          fixed_version: '0.80'
          status: resolved
          urgency: 'medium**'
        sid:
          fixed_version: '0.80'
          status: resolved
          urgency: 'medium**'
        squeeze:
          fixed_version: '0.80'
          status: resolved
          urgency: 'medium**'
        stretch:
          fixed_version: '0.80'
          status: resolved
          urgency: 'medium**'
        wheezy:
          fixed_version: '0.80'
          status: resolved
          urgency: 'medium**'
      scope: remote
112
    CVE-2004-1876:
Etalab's avatar
Etalab committed
113
      description: 'The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name.'
114 115 116 117
      releases:
        jessie:
          fixed_version: 0.70-1
          status: resolved
Etalab's avatar
Etalab committed
118
          urgency: 'medium**'
119 120 121
        sid:
          fixed_version: 0.70-1
          status: resolved
Etalab's avatar
Etalab committed
122
          urgency: 'medium**'
123 124 125
        squeeze:
          fixed_version: 0.70-1
          status: resolved
Etalab's avatar
Etalab committed
126
          urgency: 'medium**'
127 128 129
        stretch:
          fixed_version: 0.70-1
          status: resolved
Etalab's avatar
Etalab committed
130
          urgency: 'medium**'
131 132 133
        wheezy:
          fixed_version: 0.70-1
          status: resolved
Etalab's avatar
Etalab committed
134
          urgency: 'medium**'
135 136
      scope: local
    CVE-2004-1909:
Etalab's avatar
Etalab committed
137
      description: 'Claim Anti-Virus (ClamAV) 0.68 and earlier allows remote attackers to cause a denial of service (crash) via certain RAR archives, such as those generated by the Beagle/Bagle worm.'
138 139 140 141
      releases:
        jessie:
          fixed_version: 0.68.1
          status: resolved
Etalab's avatar
Etalab committed
142
          urgency: 'low**'
143 144 145
        sid:
          fixed_version: 0.68.1
          status: resolved
Etalab's avatar
Etalab committed
146
          urgency: 'low**'
147 148 149
        squeeze:
          fixed_version: 0.68.1
          status: resolved
Etalab's avatar
Etalab committed
150
          urgency: 'low**'
151 152 153
        stretch:
          fixed_version: 0.68.1
          status: resolved
Etalab's avatar
Etalab committed
154
          urgency: 'low**'
155 156 157
        wheezy:
          fixed_version: 0.68.1
          status: resolved
Etalab's avatar
Etalab committed
158
          urgency: 'low**'
159 160
      scope: remote
    CVE-2005-0133:
Etalab's avatar
Etalab committed
161
      description: ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.
162 163 164 165
      releases:
        jessie:
          fixed_version: 0.80-0.81rc1-1
          status: resolved
Etalab's avatar
Etalab committed
166
          urgency: 'medium**'
167 168 169
        sid:
          fixed_version: 0.80-0.81rc1-1
          status: resolved
Etalab's avatar
Etalab committed
170
          urgency: 'medium**'
171 172 173
        squeeze:
          fixed_version: 0.80-0.81rc1-1
          status: resolved
Etalab's avatar
Etalab committed
174
          urgency: 'medium**'
175 176 177
        stretch:
          fixed_version: 0.80-0.81rc1-1
          status: resolved
Etalab's avatar
Etalab committed
178
          urgency: 'medium**'
179 180 181
        wheezy:
          fixed_version: 0.80-0.81rc1-1
          status: resolved
Etalab's avatar
Etalab committed
182
          urgency: 'medium**'
183 184
      scope: remote
    CVE-2005-0218:
Etalab's avatar
Etalab committed
185
      description: 'ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: (RFC 2397) URL.'
186 187 188 189
      releases:
        jessie:
          fixed_version: '0.81'
          status: resolved
Etalab's avatar
Etalab committed
190
          urgency: 'medium**'
191 192 193
        sid:
          fixed_version: '0.81'
          status: resolved
Etalab's avatar
Etalab committed
194
          urgency: 'medium**'
195 196 197
        squeeze:
          fixed_version: '0.81'
          status: resolved
Etalab's avatar
Etalab committed
198
          urgency: 'medium**'
199 200 201
        stretch:
          fixed_version: '0.81'
          status: resolved
Etalab's avatar
Etalab committed
202
          urgency: 'medium**'
203 204 205
        wheezy:
          fixed_version: '0.81'
          status: resolved
Etalab's avatar
Etalab committed
206
          urgency: 'medium**'
207 208
      scope: remote
    CVE-2005-1922:
Etalab's avatar
Etalab committed
209
      description: The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.
210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233
      releases:
        jessie:
          fixed_version: 0.86.1-1
          status: resolved
          urgency: low
        sid:
          fixed_version: 0.86.1-1
          status: resolved
          urgency: low
        squeeze:
          fixed_version: 0.86.1-1
          status: resolved
          urgency: low
        stretch:
          fixed_version: 0.86.1-1
          status: resolved
          urgency: low
        wheezy:
          fixed_version: 0.86.1-1
          status: resolved
          urgency: low
      scope: remote
    CVE-2005-1923:
      bug: 316401
Etalab's avatar
Etalab committed
234
      description: 'The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read.'
235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258
      releases:
        jessie:
          fixed_version: 0.86.1
          status: resolved
          urgency: medium
        sid:
          fixed_version: 0.86.1
          status: resolved
          urgency: medium
        squeeze:
          fixed_version: 0.86.1
          status: resolved
          urgency: medium
        stretch:
          fixed_version: 0.86.1
          status: resolved
          urgency: medium
        wheezy:
          fixed_version: 0.86.1
          status: resolved
          urgency: medium
      scope: remote
    CVE-2005-2056:
      bug: 318756
Etalab's avatar
Etalab committed
259
      description: The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a crafted Quantum archive.
260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283
      releases:
        jessie:
          fixed_version: 0.86.1-1
          status: resolved
          urgency: medium
        sid:
          fixed_version: 0.86.1-1
          status: resolved
          urgency: medium
        squeeze:
          fixed_version: 0.86.1-1
          status: resolved
          urgency: medium
        stretch:
          fixed_version: 0.86.1-1
          status: resolved
          urgency: medium
        wheezy:
          fixed_version: 0.86.1-1
          status: resolved
          urgency: medium
      scope: remote
    CVE-2005-2070:
      bug: 318755
Etalab's avatar
Etalab committed
284
      description: 'The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading.'
285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307
      releases:
        jessie:
          fixed_version: 0.86.1
          status: resolved
          urgency: medium
        sid:
          fixed_version: 0.86.1
          status: resolved
          urgency: medium
        squeeze:
          fixed_version: 0.86.1
          status: resolved
          urgency: medium
        stretch:
          fixed_version: 0.86.1
          status: resolved
          urgency: medium
        wheezy:
          fixed_version: 0.86.1
          status: resolved
          urgency: medium
      scope: remote
    CVE-2005-2450:
Etalab's avatar
Etalab committed
308
      description: 'Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.'
309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332
      releases:
        jessie:
          fixed_version: 0.86.2-1
          status: resolved
          urgency: medium
        sid:
          fixed_version: 0.86.2-1
          status: resolved
          urgency: medium
        squeeze:
          fixed_version: 0.86.2-1
          status: resolved
          urgency: medium
        stretch:
          fixed_version: 0.86.2-1
          status: resolved
          urgency: medium
        wheezy:
          fixed_version: 0.86.2-1
          status: resolved
          urgency: medium
      scope: remote
    CVE-2005-2919:
      bug: 328660
Etalab's avatar
Etalab committed
333
      description: libclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to cause a denial of service (infinite loop) via a crafted FSG packed executable.
334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357
      releases:
        jessie:
          fixed_version: 0.87-1
          status: resolved
          urgency: medium
        sid:
          fixed_version: 0.87-1
          status: resolved
          urgency: medium
        squeeze:
          fixed_version: 0.87-1
          status: resolved
          urgency: medium
        stretch:
          fixed_version: 0.87-1
          status: resolved
          urgency: medium
        wheezy:
          fixed_version: 0.87-1
          status: resolved
          urgency: medium
      scope: remote
    CVE-2005-2920:
      bug: 328660
Etalab's avatar
Etalab committed
358
      description: Buffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable.
359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381
      releases:
        jessie:
          fixed_version: 0.87-1
          status: resolved
          urgency: medium
        sid:
          fixed_version: 0.87-1
          status: resolved
          urgency: medium
        squeeze:
          fixed_version: 0.87-1
          status: resolved
          urgency: medium
        stretch:
          fixed_version: 0.87-1
          status: resolved
          urgency: medium
        wheezy:
          fixed_version: 0.87-1
          status: resolved
          urgency: medium
      scope: remote
    CVE-2005-3229:
Etalab's avatar
Etalab committed
382
      description: 'Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.'
383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406
      releases:
        jessie:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
        sid:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
        squeeze:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
        stretch:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
        wheezy:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
      scope: remote
    CVE-2005-3239:
      bug: 333566
Etalab's avatar
Etalab committed
407
      description: 'The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.'
408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430
      releases:
        jessie:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        sid:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        squeeze:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        stretch:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        wheezy:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
      scope: remote
    CVE-2005-3303:
Etalab's avatar
Etalab committed
431
      description: 'The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.'
432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454
      releases:
        jessie:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: high
        sid:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: high
        squeeze:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: high
        stretch:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: high
        wheezy:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: high
      scope: remote
    CVE-2005-3500:
Etalab's avatar
Etalab committed
455
      description: The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.
456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478
      releases:
        jessie:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        sid:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        squeeze:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        stretch:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        wheezy:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
      scope: remote
    CVE-2005-3501:
Etalab's avatar
Etalab committed
479
      description: The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted CAB file that causes cabd_find to be called with a zero length.
480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502
      releases:
        jessie:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        sid:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        squeeze:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        stretch:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        wheezy:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
      scope: remote
    CVE-2005-3587:
Etalab's avatar
Etalab committed
503
      description: Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attacks via unknown vectors.
504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526
      releases:
        jessie:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        sid:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        squeeze:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        stretch:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
        wheezy:
          fixed_version: 0.87.1-1
          status: resolved
          urgency: medium
      scope: remote
    CVE-2006-0162:
Etalab's avatar
Etalab committed
527
      description: Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.
528 529 530 531
      releases:
        jessie:
          fixed_version: 0.88-1
          status: resolved
Etalab's avatar
Etalab committed
532
          urgency: 'high**'
533 534 535
        sid:
          fixed_version: 0.88-1
          status: resolved
Etalab's avatar
Etalab committed
536
          urgency: 'high**'
537 538 539
        squeeze:
          fixed_version: 0.88-1
          status: resolved
Etalab's avatar
Etalab committed
540
          urgency: 'high**'
541 542 543
        stretch:
          fixed_version: 0.88-1
          status: resolved
Etalab's avatar
Etalab committed
544
          urgency: 'high**'
545 546 547
        wheezy:
          fixed_version: 0.88-1
          status: resolved
Etalab's avatar
Etalab committed
548
          urgency: 'high**'
549 550
      scope: remote
    CVE-2006-1614:
Etalab's avatar
Etalab committed
551
      description: 'Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code.'
552 553 554 555
      releases:
        jessie:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
556
          urgency: 'medium**'
557 558 559
        sid:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
560
          urgency: 'medium**'
561 562 563
        squeeze:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
564
          urgency: 'medium**'
565 566 567
        stretch:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
568
          urgency: 'medium**'
569 570 571
        wheezy:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
572
          urgency: 'medium**'
573 574
      scope: remote
    CVE-2006-1615:
Etalab's avatar
Etalab committed
575
      description: 'Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute arbitrary code.  NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized properly.'
576 577 578 579
      releases:
        jessie:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
580
          urgency: 'high**'
581 582 583
        sid:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
584
          urgency: 'high**'
585 586 587
        squeeze:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
588
          urgency: 'high**'
589 590 591
        stretch:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
592
          urgency: 'high**'
593 594 595
        wheezy:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
596
          urgency: 'high**'
597 598
      scope: remote
    CVE-2006-1630:
Etalab's avatar
Etalab committed
599
      description: 'The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."'
600 601 602 603
      releases:
        jessie:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
604
          urgency: 'medium**'
605 606 607
        sid:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
608
          urgency: 'medium**'
609 610 611
        squeeze:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
612
          urgency: 'medium**'
613 614 615
        stretch:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
616
          urgency: 'medium**'
617 618 619
        wheezy:
          fixed_version: 0.88.1-1
          status: resolved
Etalab's avatar
Etalab committed
620
          urgency: 'medium**'
621 622
      scope: remote
    CVE-2006-1989:
Etalab's avatar
Etalab committed
623
      description: Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.
624 625 626 627
      releases:
        jessie:
          fixed_version: 0.88.2
          status: resolved
Etalab's avatar
Etalab committed
628
          urgency: 'medium**'
629 630 631
        sid:
          fixed_version: 0.88.2
          status: resolved
Etalab's avatar
Etalab committed
632
          urgency: 'medium**'
633 634 635
        squeeze:
          fixed_version: 0.88.2
          status: resolved
Etalab's avatar
Etalab committed
636
          urgency: 'medium**'
637 638 639
        stretch:
          fixed_version: 0.88.2
          status: resolved
Etalab's avatar
Etalab committed
640
          urgency: 'medium**'
641 642 643
        wheezy:
          fixed_version: 0.88.2
          status: resolved
Etalab's avatar
Etalab committed
644
          urgency: 'medium**'
645 646
      scope: remote
    CVE-2006-2427:
Etalab's avatar
Etalab committed
647
      description: 'freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file.'
648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671
      releases:
        jessie:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
        sid:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
        squeeze:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
        stretch:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
        wheezy:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
      scope: local
    CVE-2006-4018:
      bug: 382004
Etalab's avatar
Etalab committed
672
      description: Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values.
673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696
      releases:
        jessie:
          fixed_version: 0.88.4-1
          status: resolved
          urgency: high
        sid:
          fixed_version: 0.88.4-1
          status: resolved
          urgency: high
        squeeze:
          fixed_version: 0.88.4-1
          status: resolved
          urgency: high
        stretch:
          fixed_version: 0.88.4-1
          status: resolved
          urgency: high
        wheezy:
          fixed_version: 0.88.4-1
          status: resolved
          urgency: high
      scope: remote
    CVE-2006-4182:
      bug: 393445
Etalab's avatar
Etalab committed
697
      description: 'Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.'
698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721
      releases:
        jessie:
          fixed_version: 0.88.5-1
          status: resolved
          urgency: high
        sid:
          fixed_version: 0.88.5-1
          status: resolved
          urgency: high
        squeeze:
          fixed_version: 0.88.5-1
          status: resolved
          urgency: high
        stretch:
          fixed_version: 0.88.5-1
          status: resolved
          urgency: high
        wheezy:
          fixed_version: 0.88.5-1
          status: resolved
          urgency: high
      scope: remote
    CVE-2006-5295:
      bug: 393445
Etalab's avatar
Etalab committed
722
      description: 'Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location."'
723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745
      releases:
        jessie:
          fixed_version: 0.88.5-1
          status: resolved
          urgency: high
        sid:
          fixed_version: 0.88.5-1
          status: resolved
          urgency: high
        squeeze:
          fixed_version: 0.88.5-1
          status: resolved
          urgency: high
        stretch:
          fixed_version: 0.88.5-1
          status: resolved
          urgency: high
        wheezy:
          fixed_version: 0.88.5-1
          status: resolved
          urgency: high
      scope: remote
    CVE-2006-5874:
Etalab's avatar
Etalab committed
746
      description: Clam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service (crash) via a malformed base64-encoded MIME attachment that triggers a null pointer dereference.
747 748 749 750
      releases:
        jessie:
          fixed_version: 0.86-1
          status: resolved
Etalab's avatar
Etalab committed
751
          urgency: 'medium**'
752 753 754
        sid:
          fixed_version: 0.86-1
          status: resolved
Etalab's avatar
Etalab committed
755
          urgency: 'medium**'
756 757 758
        squeeze:
          fixed_version: 0.86-1
          status: resolved
Etalab's avatar
Etalab committed
759
          urgency: 'medium**'
760 761 762
        stretch:
          fixed_version: 0.86-1
          status: resolved
Etalab's avatar
Etalab committed
763
          urgency: 'medium**'
764 765 766
        wheezy:
          fixed_version: 0.86-1
          status: resolved
Etalab's avatar
Etalab committed
767
          urgency: 'medium**'
768 769 770
      scope: remote
    CVE-2006-6406:
      bug: 401873
Etalab's avatar
Etalab committed
771
      description: 'Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.'
772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795
      releases:
        jessie:
          fixed_version: 0.88.7-1
          status: resolved
          urgency: medium
        sid:
          fixed_version: 0.88.7-1
          status: resolved
          urgency: medium
        squeeze:
          fixed_version: 0.88.7-1
          status: resolved
          urgency: medium
        stretch:
          fixed_version: 0.88.7-1
          status: resolved
          urgency: medium
        wheezy:
          fixed_version: 0.88.7-1
          status: resolved
          urgency: medium
      scope: remote
    CVE-2006-6481:
      bug: 401874
Etalab's avatar
Etalab committed
796
      description: 'Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to cause a denial of service (stack overflow and application crash) by wrapping many layers of multipart/mixed content around a document, a different vulnerability than CVE-2006-5874 and CVE-2006-6406.'
797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820
      releases:
        jessie:
          fixed_version: 0.88.7-1
          status: resolved
          urgency: low
        sid:
          fixed_version: 0.88.7-1
          status: resolved
          urgency: low
        squeeze:
          fixed_version: 0.88.7-1
          status: resolved
          urgency: low
        stretch:
          fixed_version: 0.88.7-1
          status: resolved
          urgency: low
        wheezy:
          fixed_version: 0.88.7-1
          status: resolved
          urgency: low
      scope: remote
    CVE-2007-0897:
      bug: 411118
Etalab's avatar
Etalab committed
821
      description: 'Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor.'
822 823 824 825
      releases:
        jessie:
          fixed_version: 0.90-1
          status: resolved
Etalab's avatar
Etalab committed
826
          urgency: 'medium**'
827 828 829
        sid:
          fixed_version: 0.90-1
          status: resolved
Etalab's avatar
Etalab committed
830
          urgency: 'medium**'
831 832 833
        squeeze:
          fixed_version: 0.90-1
          status: resolved
Etalab's avatar
Etalab committed
834
          urgency: 'medium**'
835 836 837
        stretch:
          fixed_version: 0.90-1
          status: resolved
Etalab's avatar
Etalab committed
838
          urgency: 'medium**'
839 840 841
        wheezy:
          fixed_version: 0.90-1
          status: resolved
Etalab's avatar
Etalab committed
842
          urgency: 'medium**'
843 844 845
      scope: remote
    CVE-2007-0898:
      bug: 411117
Etalab's avatar
Etalab committed
846
      description: Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.
847 848 849 850
      releases:
        jessie:
          fixed_version: 0.90-1
          status: resolved
Etalab's avatar
Etalab committed
851
          urgency: 'medium**'
852 853 854
        sid:
          fixed_version: 0.90-1
          status: resolved
Etalab's avatar
Etalab committed
855
          urgency: 'medium**'
856 857 858
        squeeze:
          fixed_version: 0.90-1
          status: resolved
Etalab's avatar
Etalab committed
859
          urgency: 'medium**'
860 861 862
        stretch:
          fixed_version: 0.90-1
          status: resolved
Etalab's avatar
Etalab committed
863
          urgency: 'medium**'
864 865 866
        wheezy:
          fixed_version: 0.90-1
          status: resolved
Etalab's avatar
Etalab committed
867
          urgency: 'medium**'
868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891
      scope: remote
    CVE-2007-0899:
      releases:
        jessie:
          fixed_version: 0.90-1
          status: resolved
          urgency: not yet assigned
        sid:
          fixed_version: 0.90-1
          status: resolved
          urgency: not yet assigned
        squeeze:
          fixed_version: 0.90-1
          status: resolved
          urgency: not yet assigned
        stretch:
          fixed_version: 0.90-1
          status: resolved
          urgency: not yet assigned
        wheezy:
          fixed_version: 0.90-1
          status: resolved
          urgency: not yet assigned
    CVE-2007-1745:
Etalab's avatar
Etalab committed
892
      description: 'The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897.  NOTE: some of these details are obtained from third party information.'
893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915
      releases:
        jessie:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: high
        sid:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: high
        squeeze:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: high
        stretch:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: high
        wheezy:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: high
      scope: remote
    CVE-2007-1997:
Etalab's avatar
Etalab committed
916
      description: 'Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab.c in Clam AntiVirus (ClamAV) before 0.90.2 allow remote attackers to execute arbitrary code via a crafted CHM file that contains a negative integer, which passes a signed comparison and leads to a stack-based buffer overflow.'
917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940
      releases:
        jessie:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: high
        sid:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: high
        squeeze:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: high
        stretch:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: high
        wheezy:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: high
      scope: remote
    CVE-2007-2029:
      bug: 418849
Etalab's avatar
Etalab committed
941
      description: File descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service via a crafted PDF file.
942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964
      releases:
        jessie:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: low
        sid:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: low
        squeeze:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: low
        stretch:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: low
        wheezy:
          fixed_version: 0.90.2-1
          status: resolved
          urgency: low
      scope: remote
    CVE-2007-2650:
Etalab's avatar
Etalab committed
965
      description: 'The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.'
966 967 968 969
      releases:
        jessie:
          fixed_version: 0.90.2-1
          status: resolved
Etalab's avatar
Etalab committed
970
          urgency: 'medium**'
971 972 973
        sid:
          fixed_version: 0.90.2-1
          status: resolved
Etalab's avatar
Etalab committed
974
          urgency: 'medium**'
975 976 977
        squeeze:
          fixed_version: 0.90.2-1
          status: resolved
Etalab's avatar
Etalab committed
978
          urgency: 'medium**'
979 980 981
        stretch:
          fixed_version: 0.90.2-1
          status: resolved
Etalab's avatar
Etalab committed
982
          urgency: 'medium**'
983 984 985
        wheezy:
          fixed_version: 0.90.2-1
          status: resolved
Etalab's avatar
Etalab committed
986
          urgency: 'medium**'
987 988
      scope: remote
    CVE-2007-3023:
Etalab's avatar
Etalab committed
989
      description: 'unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with unknown impact and remote attack vectors.'
990 991 992 993
      releases:
        jessie:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
994
          urgency: 'high**'
995 996 997
        sid:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
998
          urgency: 'high**'
999 1000 1001
        squeeze:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1002
          urgency: 'high**'
1003 1004 1005
        stretch:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1006
          urgency: 'high**'
1007 1008 1009
        wheezy:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1010
          urgency: 'high**'
1011 1012
      scope: remote
    CVE-2007-3024:
Etalab's avatar
Etalab committed
1013
      description: 'libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cli_gentempstream function in clamd/clamdscan, which might allow local users to read sensitive files.'
1014 1015 1016 1017
      releases:
        jessie:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1018
          urgency: 'low**'
1019 1020 1021
        sid:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1022
          urgency: 'low**'
1023 1024 1025
        squeeze:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1026
          urgency: 'low**'
1027 1028 1029
        stretch:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1030
          urgency: 'low**'
1031 1032 1033
        wheezy:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1034
          urgency: 'low**'
1035 1036
      scope: local
    CVE-2007-3025:
Etalab's avatar
Etalab committed
1037
      description: 'Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on Solaris, allows remote attackers to cause a denial of service (hang) via unknown vectors related to the isURL function and regular expressions.'
1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060
      releases:
        jessie:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
        sid:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
        squeeze:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
        stretch:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
        wheezy:
          fixed_version: '0'
          status: resolved
          urgency: unimportant
      scope: remote
    CVE-2007-3122:
Etalab's avatar
Etalab committed
1061
      description: 'The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR file with a header flag value of 10, which can be processed by WinRAR.'
1062 1063 1064 1065
      releases:
        jessie:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1066
          urgency: 'medium**'
1067 1068 1069
        sid:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1070
          urgency: 'medium**'
1071 1072 1073
        squeeze:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1074
          urgency: 'medium**'
1075 1076 1077
        stretch:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1078
          urgency: 'medium**'
1079 1080 1081
        wheezy:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1082
          urgency: 'medium**'
1083 1084
      scope: remote
    CVE-2007-3123:
Etalab's avatar
Etalab committed
1085
      description: 'unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service (core dump) via a crafted RAR file with a modified vm_codesize value, which triggers a heap-based buffer overflow.'
1086 1087 1088 1089
      releases:
        jessie:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1090
          urgency: 'medium**'
1091 1092 1093
        sid:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1094
          urgency: 'medium**'
1095 1096 1097
        squeeze:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1098
          urgency: 'medium**'
1099 1100 1101
        stretch:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1102
          urgency: 'medium**'
1103 1104 1105
        wheezy:
          fixed_version: 0.90.3-1
          status: resolved
Etalab's avatar
Etalab committed
1106
          urgency: 'medium**'
1107 1108
      scope: remote
    CVE-2007-3725:
Etalab's avatar
Etalab committed
1109
      description: 'The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.'
1110 1111 1112 1113
      releases:
        jessie:
          fixed_version: 0.91-1
          status: resolved
Etalab's avatar
Etalab committed
1114
          urgency: 'medium**'
1115 1116 1117
        sid:
          fixed_version: 0.91-1
          status: resolved
Etalab's avatar
Etalab committed
1118
          urgency: 'medium**'
1119 1120 1121
        squeeze:
          fixed_version: 0.91-1
          status: resolved
Etalab's avatar
Etalab committed
1122
          urgency: 'medium**'
1123 1124 1125
        stretch:
          fixed_version: 0.91-1
          status: resolved
Etalab's avatar
Etalab committed
1126
          urgency: 'medium**'
1127 1128 1129
        wheezy:
          fixed_version: 0.91-1
          status: resolved
Etalab's avatar
Etalab committed
1130
          urgency: 'medium**'
1131 1132
      scope: remote
    CVE-2007-4510:
Etalab's avatar
Etalab committed
1133
      description: 'ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c.  NOTE: some of these details are obtained from third party information.'
1134 1135 1136 1137
      releases:
        jessie:
          fixed_version: 0.91.2-1~volatile1
          status: resolved
Etalab's avatar
Etalab committed
1138
          urgency: 'medium**'
1139 1140 1141
        sid:
          fixed_version: 0.91.2-1~volatile1
          status: resolved
Etalab's avatar
Etalab committed
1142
          urgency: 'medium**'
1143 1144 1145
        squeeze:
          fixed_version: 0.91.2-1~volatile1
          status: resolved
Etalab's avatar
Etalab committed
1146
          urgency: 'medium**'
1147 1148 1149
        stretch:
          fixed_version: 0.91.2-1~volatile1
          status: resolved
Etalab's avatar
Etalab committed
1150
          urgency: 'medium**'
1151 1152 1153
        wheezy:
          fixed_version: 0.91.2-1~volatile1
          status: resolved
Etalab's avatar
Etalab committed
1154
          urgency: 'medium**'
1155 1156
      scope: remote
    CVE-2007-4560:
Etalab's avatar
Etalab committed
1157
      description: 'clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."'
1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180
      releases:
        jessie:
          fixed_version: 0.91.2-1~volatile1
          status: resolved
          urgency: high
        sid:
          fixed_version: 0.91.2-1~volatile1
          status: resolved
          urgency: high
        squeeze:
          fixed_version: 0.91.2-1~volatile1
          status: resolved
          urgency: high
        stretch:
          fixed_version: 0.91.2-1~volatile1
          status: resolved
          urgency: high
        wheezy:
          fixed_version: 0.91.2-1~volatile1
          status: resolved
          urgency: high
      scope: remote
    CVE-2007-6335:
Etalab's avatar
Etalab committed
1181
      description: 'Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow.'
1182 1183 1184 1185
      releases:
        jessie:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1186
          urgency: 'high**'
1187 1188 1189
        sid:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1190
          urgency: 'high**'
1191 1192 1193
        squeeze:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1194
          urgency: 'high**'
1195 1196 1197
        stretch:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1198
          urgency: 'high**'
1199 1200 1201
        wheezy:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1202
          urgency: 'high**'
1203 1204
      scope: remote
    CVE-2007-6336:
Etalab's avatar
Etalab committed
1205
      description: Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file.
1206 1207 1208 1209
      releases:
        jessie:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1210
          urgency: 'medium**'
1211 1212 1213
        sid:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1214
          urgency: 'medium**'
1215 1216 1217
        squeeze:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1218
          urgency: 'medium**'
1219 1220 1221
        stretch:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1222
          urgency: 'medium**'
1223 1224 1225
        wheezy:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1226
          urgency: 'medium**'
1227 1228
      scope: remote
    CVE-2007-6337:
Etalab's avatar
Etalab committed
1229
      description: Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.92 has unknown impact and remote attack vectors.
1230 1231 1232 1233
      releases:
        jessie:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1234
          urgency: 'high**'
1235 1236 1237
        sid:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1238
          urgency: 'high**'
1239 1240 1241
        squeeze:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1242
          urgency: 'high**'
1243 1244 1245
        stretch:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1246
          urgency: 'high**'
1247 1248 1249
        wheezy:
          fixed_version: 0.92~dfsg-1~volatile2
          status: resolved
Etalab's avatar
Etalab committed
1250
          urgency: 'high**'
1251 1252 1253
      scope: remote
    CVE-2007-6595:
      bug: 458532
Etalab's avatar
Etalab committed
1254
      description: 'ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled.'
1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278
      releases:
        jessie:
          fixed_version: 0.92.1~dfsg-1
          status: resolved
          urgency: low
        sid:
          fixed_version: 0.92.1~dfsg-1
          status: resolved
          urgency: low
        squeeze:
          fixed_version: 0.92.1~dfsg-1
          status: resolved
          urgency: low
        stretch:
          fixed_version: 0.92.1~dfsg-1
          status: resolved
          urgency: low
        wheezy:
          fixed_version: 0.92.1~dfsg-1
          status: resolved