Lucene search

K
suseSuseSUSE-SU-2015:0298-1
HistoryFeb 17, 2015 - 3:04 a.m.

Security update for clamav (important)

2015-02-1703:04:56
lists.opensuse.org
15

0.023 Low

EPSS

Percentile

88.6%

clamav was updated to version 0.98.6 to fix four security issues.

These security issues have been fixed:

   * CVE-2015-1462: ClamAV allowed remote attackers to have unspecified
     impact via a crafted upx packer file, related to a heap out of
     bounds condition (bnc#916214).
   * CVE-2015-1463: ClamAV allowed remote attackers to cause a denial of
     service (crash) via a crafted petite packer file, related to an
     incorrect compiler optimization (bnc#916215).
   * CVE-2014-9328: ClamAV allowed remote attackers to have unspecified
     impact via a crafted upack packer file, related to a heap out of
     bounds condition (bnc#915512).
   * CVE-2015-1461: ClamAV allowed remote attackers to have unspecified
     impact via a crafted (1) Yoda's crypter or (2) mew packer file,
     related to a heap out of bounds condition (bnc#916217).

Security Issues:

   * CVE-2015-1462
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1462">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1462</a>&gt;
   * CVE-2014-9328
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9328">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9328</a>&gt;
   * CVE-2015-1463
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1463">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1463</a>&gt;
   * CVE-2015-1461
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1461">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1461</a>&gt;