First Last Prev Next    This bug is not in your last search results.
Bug 25625 - clamav: DoS durch unzureichende Begrenzung der Rekursionstiefe (3.0)
clamav: DoS durch unzureichende Begrenzung der Rekursionstiefe (3.0)
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Security updates
UCS 2.4
Other Linux
: P1 normal (vote)
: UCS 3.0-0-errata
Assigned To: Moritz Muehlenhoff
Arvid Requate
:
Depends on:
Blocks:
  Show dependency tree / graph
 
Reported: 2011-12-23 16:08 CET by Moritz Muehlenhoff
Modified: 2012-08-15 13:35 CEST (History)
0 users

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Moritz Muehlenhoff univentionstaff 2011-12-23 16:08:46 CET 
+++ This bug was initially created as a clone of Bug #24126 +++

CVE-2011-3627

Fix:
http://git.clamav.net/gitweb?p=clamav-devel.git;a=patch;h=5504582f173b1477c174fd2997a3725452d4416d
Comment 1 Moritz Muehlenhoff univentionstaff 2012-01-03 15:56:24 CET 
Der Patch wurde integriert. Die YAML-Datei wurde in das SVN eingecheckt.
Comment 2 Arvid Requate univentionstaff 2012-01-05 17:34:48 CET 
Verified:
* CVE-2011-3627.patch ist OK und wurde beim Paketbau im Scope errata3.0-0 angewendet. OK
* Errata-Update eines UCS 3.0 Systems mit univention-cyrus-mail/cyrus-imapd-2.4 unter i386 und amd64 OK
* Funktionstest mit ucs-test-mail unter i386 und amd64 OK
* Advisory 2012-01-03-clamav.yaml  OK
First Last Prev Next    This bug is not in your last search results.