gpp_maybe Security update for clamav

SUSE-SLE-SERVER-12-SP3-2018-541

This update for clamav fixes the following issues: Security issues fixed: - CVE-2012-6706: VMSF_DELTA filter inside the unrar implementation allows an arbitrary memory write (bsc#1045315). - CVE-2017-6419: A heap-based buffer overflow that can lead to a denial of service in libmspack via a crafted CHM file (bsc#1052449). - CVE-2017-11423: A stack-based buffer over-read that can lead to a denial of service in mspack via a crafted CAB file (bsc#1049423). - CVE-2018-1000085: An out-of-bounds heap read vulnerability was found in XAR parser that can lead to a denial of service (bsc#1082858). - CVE-2018-0202: Fixed two vulnerabilities in the PDF parsing code (bsc#1083915).

Release Date

Mar 26 2018
References

Bugzilla: 1045315, 1052449, 1049423, 1082858, 1083915
CVEs: CVE-2017-11423, CVE-2017-6419, CVE-2018-1000085, CVE-2012-6706, CVE-2018-0202
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le

Packages

clamav
Antivirus Toolkit

0.99.4-33.9.1 lock rpm lock src

SUSE Linux Enterprise Server 12.3 s390x

Packages

clamav
Antivirus Toolkit

0.99.4-33.9.1 lock rpm lock src

SUSE Linux Enterprise Server 12.3 x86_64

Packages

clamav
Antivirus Toolkit

0.99.4-33.9.1 lock rpm lock src

SUSE Linux Enterprise Server 12.3 aarch64

Packages

clamav
Antivirus Toolkit

0.99.4-33.9.1 lock rpm lock src