clamav was updated to version 0.98.6 to fix four security issues.
These security issues have been fixed:
* CVE-2015-1462: ClamAV allowed remote attackers to have unspecified
impact via a crafted upx packer file, related to a heap out of
bounds condition (bnc#916214).
* CVE-2015-1463: ClamAV allowed remote attackers to cause a denial of
service (crash) via a crafted petite packer file, related to an
incorrect compiler optimization (bnc#916215).
* CVE-2014-9328: ClamAV allowed remote attackers to have unspecified
impact via a crafted upack packer file, related to a heap out of
bounds condition (bnc#915512).
* CVE-2015-1461: ClamAV allowed remote attackers to have unspecified
impact via a crafted (1) Yoda's crypter or (2) mew packer file,
related to a heap out of bounds condition (bnc#916217).
Security Issues:
* CVE-2015-1462
<<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1462">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1462</a>>
* CVE-2014-9328
<<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9328">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9328</a>>
* CVE-2015-1463
<<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1463">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1463</a>>
* CVE-2015-1461
<<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1461">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1461</a>>
download.suse.com/patch/finder/?keywords=2f44be276ad7a4e53a81812520e256c5
download.suse.com/patch/finder/?keywords=b856018fc4dcd95c039167b1ea1c6e5d
download.suse.com/patch/finder/?keywords=b857e6f07106efda6eeb4c842640e58f
download.suse.com/patch/finder/?keywords=cabd1033f09ef394f7aad5c3fbd890a1
bugzilla.suse.com/915512
bugzilla.suse.com/916214
bugzilla.suse.com/916215
bugzilla.suse.com/916217