Package name
clamav
Date
2010-05-20
Advisory ID
MDVSA-2010:082-1
Affected versions
2009.0 x86_64 , 2009.0 i586

Problem description

Multiple vulnerabilities has been found and corrected in clamav:

ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file
formats, which allows remote attackers to bypass virus detection via
a crafted archive that is compatible with standard archive utilities
(CVE-2010-0098).

The qtm_decompress function in libclamav/mspack.c in ClamAV before
0.96 allows remote attackers to cause a denial of service (memory
corruption and application crash) via a crafted CAB archive that uses
the Quantum (aka .Q) compression format. NOTE: some of these details
are obtained from third party information (CVE-2010-1311).

This update provides clamav 0.96, which is not vulnerable to these
issues.

Update:

Packages for 2009.0 are provided due to the Extended Maintenance
Program.

Updated packages

2009.0 x86_64

 e2f407f26502f7ccd21968aa9b4f6a36  2009.0/x86_64/clamav-0.96-0.1mdv2009.0.x86_64.rpm
 37a81ac854348cb326a9d079654130ec  2009.0/x86_64/clamav-db-0.96-0.1mdv2009.0.x86_64.rpm
 9c6ed0a8019ea9c8b48dc2b73566a4e4  2009.0/x86_64/clamav-milter-0.96-0.1mdv2009.0.x86_64.rpm
 94e53fc62e5636965fb42a5964966b6c  2009.0/x86_64/clamd-0.96-0.1mdv2009.0.x86_64.rpm
 f3c9d760c623e2713ffb07b29d2d1474  2009.0/x86_64/lib64clamav6-0.96-0.1mdv2009.0.x86_64.rpm
 a30754b6315274b7ee8536312950ba2a  2009.0/x86_64/lib64clamav-devel-0.96-0.1mdv2009.0.x86_64.rpm 
 72dccb903ebd1b09db844f8e5a75a8a2  2009.0/SRPMS/clamav-0.96-0.1mdv2009.0.src.rpm

2009.0 i586

 a548c8f4cf47f691f9b5b997ad76487a  2009.0/i586/clamav-0.96-0.1mdv2009.0.i586.rpm
 8044c43d2496d16e13a80da34d604ea1  2009.0/i586/clamav-db-0.96-0.1mdv2009.0.i586.rpm
 36891e225982d0f5642bec992799a0ad  2009.0/i586/clamav-milter-0.96-0.1mdv2009.0.i586.rpm
 dfedaf40bc94b20628d61226eefd6854  2009.0/i586/clamd-0.96-0.1mdv2009.0.i586.rpm
 731d2fbfc45ff8caa4d439ca1940fa09  2009.0/i586/libclamav6-0.96-0.1mdv2009.0.i586.rpm
 0ed16a2464b523f584ff58894f364c09  2009.0/i586/libclamav-devel-0.96-0.1mdv2009.0.i586.rpm 
 72dccb903ebd1b09db844f8e5a75a8a2  2009.0/SRPMS/clamav-0.96-0.1mdv2009.0.src.rpm

References