Lucene search

K
suseSuseOPENSUSE-SU-2014:1679-1
HistoryDec 21, 2014 - 7:04 p.m.

Security update for clamav (important)

2014-12-2119:04:40
lists.opensuse.org
9

0.151 Low

EPSS

Percentile

95.3%

clamav was updated to version 0.98.5 to fix two security issues.

These security issues were fixed:

  • Segmentation fault when processing certain files (CVE-2013-6497).
  • Heap-based buffer overflow when scanning crypted PE files
    (CVE-2014-9050).

The following non-security issues were fixed:

  • Support for the XDP file format and extracting, decoding, and scanning
    PDF files within XDP files.
  • Addition of shared library support for LLVM versions 3.1 - 3.5 for the
    purpose of just-in-time(JIT) compilation of ClamAV bytecode signatures.
  • Enhancements to the clambc command line utility to assist ClamAV
    bytecode signature authors by providing introspection into compiled
    bytecode programs.
  • Resolution of many of the warning messages from ClamAV compilation.
  • Improved detection of malicious PE files.
  • ClamAV 0.98.5 now works with OpenSSL in FIPS compliant mode (bnc#904207).
  • Fix server socket setup code in clamd (bnc#903489).