shield Security update for clamsap

slesappsp4-clamsap-12462

This update fixes the following security issues: CVE-2015-2278: The LZH decompression implementation allows context-dependent attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to look-ups of non-simple codes. CVE-2015-2282: Stack-based buffer overflow in the LZC decompression implementation allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors

• Release Date
  Mar 17 2016
• References
  Bugzilla: 935939
  CVEs: CVE-2015-2282, CVE-2015-2278
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  clamsap
  Virus Scan Adapter (VSA) for ClamAV

  0.98.9-0.7.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  clamsap
  Virus Scan Adapter (VSA) for ClamAV

  0.98.9-0.7.1 lock rpm lock src