shield Security update for clamav

SUSE-SLE-SAP-12-SP2-2019-3066

This update for clamav fixes the following issues: Security issue fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files (bsc#1144504). - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors (bsc#1149458). Non-security issues fixed: - Added the --max-scantime clamscan option and MaxScanTime clamd configuration option (bsc#1144504). - Increased the startup timeout of clamd to 5 minutes to cater for the grown virus database as a workaround until clamd has learned to talk to systemd to extend the timeout as long as needed (bsc#1151839).

• Release Date
  Nov 26 2019
• References
  Bugzilla: 1149458, 1144504, 1151839
  CVEs: CVE-2019-12625, CVE-2019-12900
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  clamav
  Antivirus Toolkit

  0.100.3-33.26.1

  lock rpm

  lock src

SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64

• Packages
  clamav
  Antivirus Toolkit

  0.100.3-33.26.1

  lock rpm

  lock src