Attachment 223904 Details for Bug 254861 – Patch file

[patch] Patch file

security_vuxml_clamav.patch (text/plain), 1.91 KB, created by Yasuhiro Kimura on 2021-04-07 18:58:52 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Yasuhiro Kimura

Created: 2021-04-07 18:58:52 UTC

Size: 1.91 KB

patch

obsolete

>From 784031bed71d6f1eeb9418af9f1a44ff57045ba5 Mon Sep 17 00:00:00 2001
>From: Yasuhiro Kimura <yasu@utahime.org>
>Date: Thu, 8 Apr 2021 03:53:34 +0900
>Subject: [PATCH] security/vuxml: Document multiple vulnerabilities in ClamAV
>
>Document multiple vulnerabilities in ClamAV.
>---
> security/vuxml/vuln.xml | 35 +++++++++++++++++++++++++++++++++++
> 1 file changed, 35 insertions(+)
>
>diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
>index 4258c7cae6a7..3bfcc904bbcb 100644
>--- a/security/vuxml/vuln.xml
>+++ b/security/vuxml/vuln.xml
>@@ -76,6 +76,41 @@ Notes:
>   * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
>+  <vuln vid="9ae2c00f-97d0-11eb-8cd6-080027f515ea">
>+    <topic>clamav -- Multiple vulnerabilites</topic>
>+    <affects>
>+      <package>
>+	<name>clamav</name>
>+	<range><lt>0.103.2,1</lt></range>
>+      </package>
>+    </affects>
>+    <description>
>+      <body xmlns="http://www.w3.org/1999/xhtml">
>+	<p>Micah Snyder reports:</p>
>+	<blockquote cite="https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html">
>+	  <dl>
>+	    <dt>CVE-2021-1252</dt>
>+	    <dd>Excel XLM parser infinite loop</dd>
>+	    <dt>CVE-2021-1404</dt>
>+	    <dd>PDF parser buffer over-read; possible crash. </dd>
>+	    <dt>CVE-2021-1405</dt>
>+	    <dd>Mail parser NULL-dereference crash. </dd>
>+	  </dl>
>+	</blockquote>
>+      </body>
>+    </description>
>+    <references>
>+      <cvename>CVE-2021-1252</cvename>
>+      <cvename>CVE-2021-1404</cvename>
>+      <cvename>CVE-2021-1405</cvename>
>+      <url>https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html</url>
>+    </references>
>+    <dates>
>+      <discovery>2021-04-07</discovery>
>+      <entry>2021-04-07</entry>
>+    </dates>
>+  </vuln>
>+
>   <vuln vid="a7b97d26-9792-11eb-b87a-901b0ef719ab">
>     <topic>FreeBSD -- jail escape possible by mounting over jail root</topic>
>     <affects>
>-- 
>2.31.1
>

Actions: View | Diff

Attachments on bug 254861: 223904