Lucene search

K
suseSuseSUSE-SU-2014:1571-1
HistoryDec 05, 2014 - 7:04 p.m.

Security update for clamav (important)

2014-12-0519:04:48
lists.opensuse.org
11

0.151 Low

EPSS

Percentile

95.3%

clamav was updated to version 0.98.5 to fix five security issues:

   * Crash when scanning maliciously crafted yoda's crypter files
     (CVE-2013-6497).
   * Heap-based buffer overflow when scanning crypted PE files
     (CVE-2014-9050).
   * Fix heap corruption (CVE-2013-2020).
   * Fix overflow due to PDF key length computation (CVE-2013-2021).
   * Crash when using 'clamscan -a'.

Several non-security issues have also been fixed, please refer to the
package’s change log for details.

Security Issues:

   * CVE-2013-6497
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6497">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6497</a>&gt;
   * CVE-2014-9050
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9050">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9050</a>&gt;
   * CVE-2013-2021
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2021">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2021</a>&gt;
   * CVE-2013-2020
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2020">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2020</a>&gt;