K 10 svn:author V 5 garga K 8 svn:date V 27 2006-04-06T15:20:18.000000Z K 7 svn:log V 724 - Update to 0.88.1 -- Fix multiple vulnerabilities * CVE-2006-1614 Damian Put discovered an integer overflow in the PE header parser. This is only exploitable if the ArchiveMaxFileSize option is disabled. * CVE-2006-1615 Format string vulnerabilities in the logging code have been discovered, which might lead to the execution of arbitrary code. * CVE-2006-1630 David Luyer discovered, that ClamAV can be tricked into an invalid memory access in the cli_bitset_set() function, which may lead to a denial of service. - Use USE_RC_SUBR=script PR: ports/95403 Submitted by: garga Approved by: maintainer timeout (mnag on behalf of secteam) Security: VuXML 6a5174bd-c580-11da-9110-00123ffe8333 END