Lucene search

K
suseSuseOPENSUSE-SU-2014:1560-1
HistoryDec 05, 2014 - 10:04 a.m.

Security update for clamav (important)

2014-12-0510:04:48
lists.opensuse.org
16

0.142 Low

EPSS

Percentile

95.7%

clamav was updated to version 0.98.5 to fix two security issues.

These security issues were fixed:

  • Segmentation fault when processing certain files (CVE-2013-6497).
  • Heap-based buffer overflow when scanning crypted PE files
    (CVE-2014-9050).

The following non-security issues were fixed:

  • Support for the XDP file format and extracting, decoding, and scanning
    PDF files within XDP files.
  • Addition of shared library support for LLVM versions 3.1 - 3.5 for the
    purpose of just-in-time(JIT) compilation of ClamAV bytecode signatures.
  • Enhancements to the clambc command line utility to assist ClamAV
    bytecode signature authors by providing introspection into compiled
    bytecode programs.
  • Resolution of many of the warning messages from ClamAV compilation.
  • Improved detection of malicious PE files.
  • ClamAV 0.98.5 now works with OpenSSL in FIPS compliant mode (bnc#904207).
  • Fix server socket setup code in clamd (bnc#903489).
  • Change updateclamconf to prefer the state of the old config file even
    for commented-out options (bnc#903719).