shield Security update for clamav

SUSE-SLE-SERVER-12-2015-75

clamav was updated to version 0.98.6 to fix four security issues. These security issues were fixed: - CVE-2015-1462: ClamAV allowed remote attackers to have unspecified impact via a crafted upx packer file, related to a heap out of bounds condition (bnc#916214). - CVE-2015-1463: ClamAV allowed remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an incorrect compiler optimization (bnc#916215). - CVE-2014-9328: ClamAV allowed remote attackers to have unspecified impact via a crafted upack packer file, related to a heap out of bounds condition (bnc#915512). - CVE-2015-1461: ClamAV allowed remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a heap out of bounds condition (bnc#916217).

• Release Date
  Feb 6 2015
• References
  Bugzilla: 915512, 916217, 916215, 916214
  CVEs: CVE-2015-1462, CVE-2015-1463, CVE-2014-9328, CVE-2015-1461
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12 x86_64

• Packages
  clamav
  Antivirus Toolkit

  0.98.6-10.1 lock rpm lock src

SUSE Linux Enterprise Server 12 s390x

• Packages
  clamav
  Antivirus Toolkit

  0.98.6-10.1 lock rpm lock src

SUSE Linux Enterprise Server 12 ppc64le

• Packages
  clamav
  Antivirus Toolkit

  0.98.6-10.1 lock rpm lock src