svn commit: r497936 - head/security/vuxml
Matthias Fechner
mfechner at FreeBSD.org
Fri Apr 5 06:22:11 UTC 2019
Author: mfechner
Date: Fri Apr 5 06:22:09 2019
New Revision: 497936
URL: https://svnweb.freebsd.org/changeset/ports/497936
Log:
Documented vulnerabilities for clamav.
Modified:
head/security/vuxml/vuln.xml
Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml Fri Apr 5 06:14:04 2019 (r497935)
+++ head/security/vuxml/vuln.xml Fri Apr 5 06:22:09 2019 (r497936)
@@ -58,6 +58,42 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="84ce26c3-5769-11e9-abd6-001b217b3468">
+ <topic>clamav -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>clamav</name>
+ <range><lt>0.101.2,1</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Clamav reports:</p>
+ <blockquote cite="https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html">
+ <p>An out-of-bounds heap read condition may occur when scanning PDF documents</p>
+ <p>An out-of-bounds heap read condition may occur when scanning PE files</p>
+ <p>An out-of-bounds heap write condition may occur when scanning OLE2 files</p>
+ <p>An out-of-bounds heap read condition may occur when scanning malformed PDF documents</p>
+ <p>A path-traversal write condition may occur as a result of improper input validation when scanning RAR archives</p>
+ <p>A use-after-free condition may occur as a result of improper error handling when scanning nested RAR archives</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html</url>
+ <cvename>CVE-2019-1787</cvename>
+ <cvename>CVE-2019-1789</cvename>
+ <cvename>CVE-2019-1788</cvename>
+ <cvename>CVE-2019-1786</cvename>
+ <cvename>CVE-2019-1785</cvename>
+ <cvename>CVE-2019-1798</cvename>
+ </references>
+ <dates>
+ <discovery>2019-03-29</discovery>
+ <entry>2019-04-05</entry>
+ </dates>
+ </vuln>
+
<vuln vid="da459dbc-5586-11e9-abd6-001b217b3468">
<topic>Gitlab -- Multiple vulnerabilities</topic>
<affects>
More information about the svn-ports-head
mailing list