full-disclosure - [ MDVSA-2008:166 ] clamav

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-Id: <E1KT40y-0002MQ-Br@titan.mandriva.com>
Date: Tue, 12 Aug 2008 18:15:00 -0600
From: security@...driva.com
To: full-disclosure@...ts.grok.org.uk
Subject: [ MDVSA-2008:166 ] clamav


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2008:166
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : clamav
 Date    : August 12, 2008
 Affected: 2007.1, 2008.0, 2008.1, Corporate 3.0, Corporate 4.0
 _______________________________________________________________________

 Problem Description:

 An incomplete fix for CVE-2008-2713 resulted in remote attackers being
 able to cause a denial of service via a malformed Petite file that
 triggered an out-of-bounds memory access (CVE-2008-3215).  This issue
 is corrected with the 0.93.3 release which is being provided.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3215
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2007.1:
 e2a49439597e540af2bfe7e68b8f356a  2007.1/i586/clamav-0.93.3-1.1mdv2007.1.i586.rpm
 48d60a361725b8368a77652636da3634  2007.1/i586/clamav-db-0.93.3-1.1mdv2007.1.i586.rpm
 b866c41c9cc415a5f201ba5afa70189d  2007.1/i586/clamav-milter-0.93.3-1.1mdv2007.1.i586.rpm
 5c37359d024a972ae14b10deed99f537  2007.1/i586/clamd-0.93.3-1.1mdv2007.1.i586.rpm
 c9030498b2174b51aaaf0376a7bd22b9  2007.1/i586/libclamav4-0.93.3-1.1mdv2007.1.i586.rpm
 02e0d809765a24645597e42cad8adf99  2007.1/i586/libclamav-devel-0.93.3-1.1mdv2007.1.i586.rpm 
 02c6a82f6e1d50e73472dd9d867fc71a  2007.1/SRPMS/clamav-0.93.3-1.1mdv2007.1.src.rpm

 Mandriva Linux 2007.1/X86_64:
 b5f0af1cc16c24d0db5749740663a3cd  2007.1/x86_64/clamav-0.93.3-1.1mdv2007.1.x86_64.rpm
 ccf1112935188baba67af4c8f12602c5  2007.1/x86_64/clamav-db-0.93.3-1.1mdv2007.1.x86_64.rpm
 355f139c3e2febb9a2462f73ad80b99d  2007.1/x86_64/clamav-milter-0.93.3-1.1mdv2007.1.x86_64.rpm
 0ac9c0e9482e5bebb817a2da7ca34c55  2007.1/x86_64/clamd-0.93.3-1.1mdv2007.1.x86_64.rpm
 1b76efb82212f6b4ca597f159c5037c1  2007.1/x86_64/lib64clamav4-0.93.3-1.1mdv2007.1.x86_64.rpm
 ba7dcecdce14f9af3b190093bf3b567e  2007.1/x86_64/lib64clamav-devel-0.93.3-1.1mdv2007.1.x86_64.rpm 
 02c6a82f6e1d50e73472dd9d867fc71a  2007.1/SRPMS/clamav-0.93.3-1.1mdv2007.1.src.rpm

 Mandriva Linux 2008.0:
 50b0f29055f1c0b658ecd13a451b45fd  2008.0/i586/clamav-0.93.3-1.1mdv2008.0.i586.rpm
 ed3a1784523b919e1854d09be1fb7364  2008.0/i586/clamav-db-0.93.3-1.1mdv2008.0.i586.rpm
 64d40cebaeefd3b11d33414a02d7c511  2008.0/i586/clamav-milter-0.93.3-1.1mdv2008.0.i586.rpm
 6b81f46e08b86d074fa82e1c32af5d36  2008.0/i586/clamd-0.93.3-1.1mdv2008.0.i586.rpm
 f49f930b21f049f21965916e7ff145d4  2008.0/i586/libclamav4-0.93.3-1.1mdv2008.0.i586.rpm
 a0ebdbc4866514f23e69b8b5bdfc1055  2008.0/i586/libclamav-devel-0.93.3-1.1mdv2008.0.i586.rpm 
 0c713a68e6b09b5b05e15967c21bf58b  2008.0/SRPMS/clamav-0.93.3-1.1mdv2008.0.src.rpm

 Mandriva Linux 2008.0/X86_64:
 a3baced56d79ceeae508641adfd95007  2008.0/x86_64/clamav-0.93.3-1.1mdv2008.0.x86_64.rpm
 77329bfde06b188eb1099068f6d60b04  2008.0/x86_64/clamav-db-0.93.3-1.1mdv2008.0.x86_64.rpm
 cbe665f82daaa0bcb26154ef3d7e6444  2008.0/x86_64/clamav-milter-0.93.3-1.1mdv2008.0.x86_64.rpm
 a13133ac1fab47018bcf4eda981117b9  2008.0/x86_64/clamd-0.93.3-1.1mdv2008.0.x86_64.rpm
 3e7c88c13b2c0fe19ba2477b13e355f2  2008.0/x86_64/lib64clamav4-0.93.3-1.1mdv2008.0.x86_64.rpm
 95606f61143ba5e04a794686c2713d5c  2008.0/x86_64/lib64clamav-devel-0.93.3-1.1mdv2008.0.x86_64.rpm 
 0c713a68e6b09b5b05e15967c21bf58b  2008.0/SRPMS/clamav-0.93.3-1.1mdv2008.0.src.rpm

 Mandriva Linux 2008.1:
 4b316c757e3415a12c870fe2d91c9f83  2008.1/i586/clamav-0.93.3-1.1mdv2008.1.i586.rpm
 5670109abc64e6379ffa6cbebe497bf1  2008.1/i586/clamav-db-0.93.3-1.1mdv2008.1.i586.rpm
 a65075f859b5b0e5529bd15041df9952  2008.1/i586/clamav-milter-0.93.3-1.1mdv2008.1.i586.rpm
 88ea3198e6f0751ed7c70e64b523dec9  2008.1/i586/clamd-0.93.3-1.1mdv2008.1.i586.rpm
 fcddfcb66aca5e5d9a1546c7f7fb525f  2008.1/i586/libclamav4-0.93.3-1.1mdv2008.1.i586.rpm
 cc6914938ca14a1e7cccc0772e505c45  2008.1/i586/libclamav-devel-0.93.3-1.1mdv2008.1.i586.rpm 
 e20f699bec8683f1e12d5a097ca1b6d1  2008.1/SRPMS/clamav-0.93.3-1.1mdv2008.1.src.rpm

 Mandriva Linux 2008.1/X86_64:
 ea8e2a2acde4075de64c4fada90db33d  2008.1/x86_64/clamav-0.93.3-1.1mdv2008.1.x86_64.rpm
 6f7a297f22187a68314a82c9e8e06942  2008.1/x86_64/clamav-db-0.93.3-1.1mdv2008.1.x86_64.rpm
 58515d456c035862c80310d723b029f7  2008.1/x86_64/clamav-milter-0.93.3-1.1mdv2008.1.x86_64.rpm
 bdb0d4db5e4082ff52c2c84d775a0aff  2008.1/x86_64/clamd-0.93.3-1.1mdv2008.1.x86_64.rpm
 db051d135d8facbfca9a0b567db4aca0  2008.1/x86_64/lib64clamav4-0.93.3-1.1mdv2008.1.x86_64.rpm
 75632de425c08ededfdc3fe1e8860d2d  2008.1/x86_64/lib64clamav-devel-0.93.3-1.1mdv2008.1.x86_64.rpm 
 e20f699bec8683f1e12d5a097ca1b6d1  2008.1/SRPMS/clamav-0.93.3-1.1mdv2008.1.src.rpm

 Corporate 3.0:
 8293cdf10a02152f747da40f440f5ee0  corporate/3.0/i586/clamav-0.93.3-0.1.C30mdk.i586.rpm
 3c5678d035188b97c37dd22fc52f7d23  corporate/3.0/i586/clamav-db-0.93.3-0.1.C30mdk.i586.rpm
 adbaf9888e9f210a81fbb9f7ab9ffa0b  corporate/3.0/i586/clamav-milter-0.93.3-0.1.C30mdk.i586.rpm
 3d8430e67062828fe45c4b378754bc18  corporate/3.0/i586/clamd-0.93.3-0.1.C30mdk.i586.rpm
 3d6708ce5464613b2b459aca4b4beac9  corporate/3.0/i586/libclamav4-0.93.3-0.1.C30mdk.i586.rpm
 9891f420752c30caef96701efb708e92  corporate/3.0/i586/libclamav-devel-0.93.3-0.1.C30mdk.i586.rpm 
 6ce9aa49056cd7e52cd8270030729e5e  corporate/3.0/SRPMS/clamav-0.93.3-0.1.C30mdk.src.rpm

 Corporate 3.0/X86_64:
 57421f4ecb122aef21cf89ace7f7b0fb  corporate/3.0/x86_64/clamav-0.93.3-0.1.C30mdk.x86_64.rpm
 a0a69afe13e1149cb16d48167fed89fa  corporate/3.0/x86_64/clamav-db-0.93.3-0.1.C30mdk.x86_64.rpm
 b6847f7917ae1b78a895083564e9717d  corporate/3.0/x86_64/clamav-milter-0.93.3-0.1.C30mdk.x86_64.rpm
 1f971e3e2b749f9c0bc066a90238a787  corporate/3.0/x86_64/clamd-0.93.3-0.1.C30mdk.x86_64.rpm
 370fa0bea1e2c69092331476318bf3d6  corporate/3.0/x86_64/lib64clamav4-0.93.3-0.1.C30mdk.x86_64.rpm
 f12dc8fb45fede77b4523a25473e8eb4  corporate/3.0/x86_64/lib64clamav-devel-0.93.3-0.1.C30mdk.x86_64.rpm 
 6ce9aa49056cd7e52cd8270030729e5e  corporate/3.0/SRPMS/clamav-0.93.3-0.1.C30mdk.src.rpm

 Corporate 4.0:
 4ae1f7dcde4066bfff80d6a4d06c4868  corporate/4.0/i586/clamav-0.93.3-0.1.20060mlcs4.i586.rpm
 b20ab30a139f6137485927c0b766addc  corporate/4.0/i586/clamav-db-0.93.3-0.1.20060mlcs4.i586.rpm
 deafc5d0dbdf6cdfb43fd5261d9b2860  corporate/4.0/i586/clamav-milter-0.93.3-0.1.20060mlcs4.i586.rpm
 7c9e8cbe36fb7c9f00763be25b2b7b6e  corporate/4.0/i586/clamd-0.93.3-0.1.20060mlcs4.i586.rpm
 c37e59fa834d2cc50223aa4eced7dab8  corporate/4.0/i586/libclamav4-0.93.3-0.1.20060mlcs4.i586.rpm
 97397d585b1a0e8b28f3963e3f2b0bb4  corporate/4.0/i586/libclamav-devel-0.93.3-0.1.20060mlcs4.i586.rpm 
 166a6c91b1094142374919721d8e53b4  corporate/4.0/SRPMS/clamav-0.93.3-0.1.20060mlcs4.src.rpm

 Corporate 4.0/X86_64:
 f9d90442a66f213e634dfeeb58b39499  corporate/4.0/x86_64/clamav-0.93.3-0.1.20060mlcs4.x86_64.rpm
 cf4cbdd6a9b3477b5794fa24cc185e90  corporate/4.0/x86_64/clamav-db-0.93.3-0.1.20060mlcs4.x86_64.rpm
 96cf9d582f68937a86378e44c9d9c7cf  corporate/4.0/x86_64/clamav-milter-0.93.3-0.1.20060mlcs4.x86_64.rpm
 6c4f6a5f04ffd562b3e22aface428413  corporate/4.0/x86_64/clamd-0.93.3-0.1.20060mlcs4.x86_64.rpm
 027f5c2cae43725f098730c9c6085346  corporate/4.0/x86_64/lib64clamav4-0.93.3-0.1.20060mlcs4.x86_64.rpm
 aa541907de0244f3db23069467c6ebe1  corporate/4.0/x86_64/lib64clamav-devel-0.93.3-0.1.20060mlcs4.x86_64.rpm 
 166a6c91b1094142374919721d8e53b4  corporate/4.0/SRPMS/clamav-0.93.3-0.1.20060mlcs4.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFIofhymqjQ0CJFipgRAr2hAKCaHgvtOj5PWHnkJK+BlSWb4Z8xsQCeOqAR
n6hnOvnmkBsbvQd8bgP6Pkg=
=a/bF
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/