Re: Regression in clamav-daemon

Hi Marc, On 30.05.2015 13:24, Marc SCHAEFER wrote: >> Please file a bug report with 'reportbug clamav-daemon'. > > done, including test script (which is not complete) Thanks, I'll follow up in bug #787249. Best regards, Andreas -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org

Re: Regression in clamav-daemon

Hi Marc, On 30.05.2015 08:44, Marc SCHAEFER wrote: >despam@shakotay:~$ clamdscan /usr/share/clamav-testfiles/* > > clamdscan-test-output.NEW >despam@shakotay:~$ diff clamdscan-test-output clamdscan-test-output.NEW >8c8 >< /usr/share/clamav-testfiles/clam_cache_emax.tgz: ClamAV-Tes

Re: CVE-2014-4610: Integer Overflow in FFmpeg LZO implementation

Hi, On 01.07.2014 16:27, Moritz Muehlenhoff wrote: > On Tue, Jul 01, 2014 at 10:01:35AM +1000, Matt Palmer wrote: > > On Fri, Jun 27, 2014 at 07:30:11PM +0200, Andreas Cadhalpun wrote: > > > I'd like to inform you that ffmpeg 0.5.10-1 in squeeze is > > >

CVE-2014-4610: Integer Overflow in FFmpeg LZO implementation

Hi, I'd like to inform you that ffmpeg 0.5.10-1 in squeeze is vulnerable to CVE-2014-4610 [1]. The fix [2] should be easily backportable. Best regards, Andreas 1: http://seclists.org/oss-sec/2014/q2/668 2: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d6af26c55c1ea30f85a7d9edbc373f5