pool/clamav
SHA256
3
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

bugzilla refs

Browse Source 
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=170
This commit is contained in:
Andreas Stieger 2018-07-17 21:45:40 +00:00 committed by Git OBS Bridge
parent 6146a1ccb6
commit 7af09fc2e8
1 changed files with 8 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
clamav.changes
View File

@ -7,24 +7,17 @@ Tue Jul 17 14:21:35 UTC 2018 - security@suse.com
Tue Jul 10 08:06:33 UTC 2018 - egdfree@opensuse.org
- Update to version 0.100.1
* CVE-2017-16932: Vulnerability in libxml2 dependency (affects
ClamAV on Windows only).
* CVE-2018-0360: HWP integer overflow, infinite loop
vulnerability. Reported by Secunia Research at Flexera.
* CVE-2018-0361: ClamAV PDF object length check, unreasonably
long time to parse relatively small file. Reported by aCaB.
vulnerability (bsc#1101410)
* CVE-2018-0361: PDF object length check, unreasonably long time
to parse relatively small file (bsc#1101412)
* Buffer over-read in unRAR code due to missing max value checks
in table initialization. Reported by Rui Reis.
* Libmspack heap buffer over-read in CHM parser. Reported by
Hanno Böck.
* Buffer length checks when reading integers from non-NULL
terminated strings.
* Buffer length tracking when reading strings from dictionary
objects.
* HTTPS support for clamsubmit.
in table initialization
* Libmspack heap buffer over-read in CHM parser
* PDF parser bugs
* Add HTTPS support for clamsubmit
* Fix for DNS resolution for users on IPv4-only machines where
IPv6 is not available or is link-local only. Patch provided by
Guilherme Benkenstein.
IPv6 is not available or is link-local only
-------------------------------------------------------------------
Thu Apr 26 15:35:15 UTC 2018 - max@suse.com