Errata overview
Errata ID 342
Date 2015-07-16
Source package clamav
Fixed in version 0.98.1+dfsg-2~really0.98.7+dfsg-0.151.201506081022
Description
These vulernabilities have been fixed:
- Buffer overflow when parsing crafted y0da Crypter PE files (CVE-2014-9050)
- Segmentation fault when parsing malformed Javascript files (CVE-2013-6497)
- Memory corruption in processing upack archives (CVE-2014-9328)
- Heap out of bounds condition via a crafted Yoda's crypter or mew packer
  file (CVE-2015-1461)
- Heap out of bounds condition via a crafted upx packer file (CVE-2015-1462)
- Heap out of bounds condition via a crafted petite packer file
  (CVE-2015-1463)
- Crash in upx decoder with crafted file (CVE-2015-2170)
- Infinite loop condition on crafted y0da cryptor file (CVE-2015-2221)
- Crash on crafted petite packed file (CVE-2015-2222)
- Infinite loop condition on a crafted "xz" archive file (CVE-2015-2668)
- Heap overflow vulnerability in regcomp.c (CVE-2015-2305)
Additional notes
CVE ID CVE-2014-9050
CVE-2013-6497
CVE-2014-9328
CVE-2015-1461
CVE-2015-1462
CVE-2015-1463
CVE-2015-2170
CVE-2015-2221
CVE-2015-2222
CVE-2015-2668
CVE-2015-2305
UCS Bug number #36965