shield Security update for clamsap

SUSE-SLE-SAP-12-2016-472

This update fixes the following security issues: CVE-2015-2278: The LZH decompression implementation allows context-dependent attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to look-ups of non-simple codes. CVE-2015-2282: Stack-based buffer overflow in the LZC decompression implementation allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors

• Release Date
  Mar 17 2016
• References
  Bugzilla: 935939
  CVEs: CVE-2015-2282, CVE-2015-2278
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12 x86_64

• Packages
  clamsap
  Virus Scan Adapter (VSA) for ClamAV

  0.98.9-4.1 lock rpm lock src