| Errata ID | 342 | 
|---|---|
| Date | 2015-07-16 | 
| Source package | clamav | 
| Fixed in version | 0.98.1+dfsg-2~really0.98.7+dfsg-0.151.201506081022 | 
| Description | These vulernabilities have been fixed: - Buffer overflow when parsing crafted y0da Crypter PE files (CVE-2014-9050) - Segmentation fault when parsing malformed Javascript files (CVE-2013-6497) - Memory corruption in processing upack archives (CVE-2014-9328) - Heap out of bounds condition via a crafted Yoda's crypter or mew packer file (CVE-2015-1461) - Heap out of bounds condition via a crafted upx packer file (CVE-2015-1462) - Heap out of bounds condition via a crafted petite packer file (CVE-2015-1463) - Crash in upx decoder with crafted file (CVE-2015-2170) - Infinite loop condition on crafted y0da cryptor file (CVE-2015-2221) - Crash on crafted petite packed file (CVE-2015-2222) - Infinite loop condition on a crafted "xz" archive file (CVE-2015-2668) - Heap overflow vulnerability in regcomp.c (CVE-2015-2305)  | 
				
| Additional notes | |
| CVE ID | CVE-2014-9050 CVE-2013-6497 CVE-2014-9328 CVE-2015-1461 CVE-2015-1462 CVE-2015-1463 CVE-2015-2170 CVE-2015-2221 CVE-2015-2222 CVE-2015-2668 CVE-2015-2305  | 
  
| UCS Bug number | #36965 | 
