gpp_maybe Security update for clamav

slessp4-clamav-13544

This update for clamav fixes the following issues: Security issues fixed: - CVE-2012-6706: VMSF_DELTA filter inside the unrar implementation allows an arbitrary memory write (bsc#1045315). - CVE-2017-6419: A heap-based buffer overflow that can lead to a denial of service in libmspack via a crafted CHM file (bsc#1052449). - CVE-2017-11423: A stack-based buffer over-read that can lead to a denial of service in mspack via a crafted CAB file (bsc#1049423). - CVE-2018-1000085: An out-of-bounds heap read vulnerability was found in XAR parser that can lead to a denial of service (bsc#1082858). - CVE-2018-0202: Fixed two vulnerabilities in the PDF parsing code (bsc#1083915).

• Release Date
  Apr 3 2018
• References
  Bugzilla: 1045315, 1052449, 1049423, 1082858, 1083915
  CVEs: CVE-2017-11423, CVE-2017-6419, CVE-2018-1000085, CVE-2012-6706, CVE-2018-0202
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  clamav
  Antivirus Toolkit

  0.99.4-0.20.7.2 lock rpm lock src

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  clamav
  Antivirus Toolkit

  0.99.4-0.20.7.2 lock rpm lock src

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  clamav
  Antivirus Toolkit

  0.99.4-0.20.7.2 lock rpm lock src

SUSE Linux Enterprise Server 11.4 i586

• Packages
  clamav
  Antivirus Toolkit

  0.99.4-0.20.7.2 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  clamav
  Antivirus Toolkit

  0.99.4-0.20.7.2 lock rpm lock src