[Security Announce] [ MDVSA-2008:166 ] clamav

[news 28]

This is a multi-part message in MIME format...

 

------------=_1218586541-11275-8110

 

 

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

 

_______________________________________________________________________

 

Mandriva Linux Security Advisory MDVSA-2008:166

http://www.mandriva.com/security/

_______________________________________________________________________

 

Package : clamav

Date : August 12, 2008

Affected: 2007.1, 2008.0, 2008.1, Corporate 3.0, Corporate 4.0

_______________________________________________________________________

 

Problem Description:

 

An incomplete fix for CVE-2008-2713 resulted in remote attackers being

able to cause a denial of service via a malformed Petite file that

triggered an out-of-bounds memory access (CVE-2008-3215). This issue

is corrected with the 0.93.3 release which is being provided.

_______________________________________________________________________

 

References:

 

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3215

_______________________________________________________________________

 

Updated Packages:

 

Mandriva Linux 2007.1:

e2a49439597e540af2bfe7e68b8f356a 2007.1/i586/clamav-0.93.3-1.1mdv2007.1.i586.rpm

48d60a361725b8368a77652636da3634 2007.1/i586/clamav-db-0.93.3-1.1mdv2007.1.i586.rpm

b866c41c9cc415a5f201ba5afa70189d 2007.1/i586/clamav-milter-0.93.3-1.1mdv2007.1.i586.rpm

5c37359d024a972ae14b10deed99f537 2007.1/i586/clamd-0.93.3-1.1mdv2007.1.i586.rpm

c9030498b2174b51aaaf0376a7bd22b9 2007.1/i586/libclamav4-0.93.3-1.1mdv2007.1.i586.rpm

02e0d809765a24645597e42cad8adf99 2007.1/i586/libclamav-devel-0.93.3-1.1mdv2007.1.i586.rpm

02c6a82f6e1d50e73472dd9d867fc71a 2007.1/SRPMS/clamav-0.93.3-1.1mdv2007.1.src.rpm

 

Mandriva Linux 2007.1/X86_64:

b5f0af1cc16c24d0db5749740663a3cd 2007.1/x86_64/clamav-0.93.3-1.1mdv2007.1.x86_64.rpm

ccf1112935188baba67af4c8f12602c5 2007.1/x86_64/clamav-db-0.93.3-1.1mdv2007.1.x86_64.rpm

355f139c3e2febb9a2462f73ad80b99d 2007.1/x86_64/clamav-milter-0.93.3-1.1mdv2007.1.x86_64.rpm

0ac9c0e9482e5bebb817a2da7ca34c55 2007.1/x86_64/clamd-0.93.3-1.1mdv2007.1.x86_64.rpm

1b76efb82212f6b4ca597f159c5037c1 2007.1/x86_64/lib64clamav4-0.93.3-1.1mdv2007.1.x86_64.rpm

ba7dcecdce14f9af3b190093bf3b567e 2007.1/x86_64/lib64clamav-devel-0.93.3-1.1mdv2007.1.x86_64.rpm

02c6a82f6e1d50e73472dd9d867fc71a 2007.1/SRPMS/clamav-0.93.3-1.1mdv2007.1.src.rpm

 

Mandriva Linux 2008.0:

50b0f29055f1c0b658ecd13a451b45fd 2008.0/i586/clamav-0.93.3-1.1mdv2008.0.i586.rpm

ed3a1784523b919e1854d09be1fb7364 2008.0/i586/clamav-db-0.93.3-1.1mdv2008.0.i586.rpm

64d40cebaeefd3b11d33414a02d7c511 2008.0/i586/clamav-milter-0.93.3-1.1mdv2008.0.i586.rpm

6b81f46e08b86d074fa82e1c32af5d36 2008.0/i586/clamd-0.93.3-1.1mdv2008.0.i586.rpm

f49f930b21f049f21965916e7ff145d4 2008.0/i586/libclamav4-0.93.3-1.1mdv2008.0.i586.rpm

a0ebdbc4866514f23e69b8b5bdfc1055 2008.0/i586/libclamav-devel-0.93.3-1.1mdv2008.0.i586.rpm

0c713a68e6b09b5b05e15967c21bf58b 2008.0/SRPMS/clamav-0.93.3-1.1mdv2008.0.src.rpm

 

Mandriva Linux 2008.0/X86_64:

a3baced56d79ceeae508641adfd95007 2008.0/x86_64/clamav-0.93.3-1.1mdv2008.0.x86_64.rpm

77329bfde06b188eb1099068f6d60b04 2008.0/x86_64/clamav-db-0.93.3-1.1mdv2008.0.x86_64.rpm

cbe665f82daaa0bcb26154ef3d7e6444 2008.0/x86_64/clamav-milter-0.93.3-1.1mdv2008.0.x86_64.rpm

a13133ac1fab47018bcf4eda981117b9 2008.0/x86_64/clamd-0.93.3-1.1mdv2008.0.x86_64.rpm

3e7c88c13b2c0fe19ba2477b13e355f2 2008.0/x86_64/lib64clamav4-0.93.3-1.1mdv2008.0.x86_64.rpm

95606f61143ba5e04a794686c2713d5c 2008.0/x86_64/lib64clamav-devel-0.93.3-1.1mdv2008.0.x86_64.rpm

0c713a68e6b09b5b05e15967c21bf58b 2008.0/SRPMS/clamav-0.93.3-1.1mdv2008.0.src.rpm

 

Mandriva Linux 2008.1:

4b316c757e3415a12c870fe2d91c9f83 2008.1/i586/clamav-0.93.3-1.1mdv2008.1.i586.rpm

5670109abc64e6379ffa6cbebe497bf1 2008.1/i586/clamav-db-0.93.3-1.1mdv2008.1.i586.rpm

a65075f859b5b0e5529bd15041df9952 2008.1/i586/clamav-milter-0.93.3-1.1mdv2008.1.i586.rpm

88ea3198e6f0751ed7c70e64b523dec9 2008.1/i586/clamd-0.93.3-1.1mdv2008.1.i586.rpm

fcddfcb66aca5e5d9a1546c7f7fb525f 2008.1/i586/libclamav4-0.93.3-1.1mdv2008.1.i586.rpm

cc6914938ca14a1e7cccc0772e505c45 2008.1/i586/libclamav-devel-0.93.3-1.1mdv2008.1.i586.rpm

e20f699bec8683f1e12d5a097ca1b6d1 2008.1/SRPMS/clamav-0.93.3-1.1mdv2008.1.src.rpm

 

Mandriva Linux 2008.1/X86_64:

ea8e2a2acde4075de64c4fada90db33d 2008.1/x86_64/clamav-0.93.3-1.1mdv2008.1.x86_64.rpm

6f7a297f22187a68314a82c9e8e06942 2008.1/x86_64/clamav-db-0.93.3-1.1mdv2008.1.x86_64.rpm

58515d456c035862c80310d723b029f7 2008.1/x86_64/clamav-milter-0.93.3-1.1mdv2008.1.x86_64.rpm

bdb0d4db5e4082ff52c2c84d775a0aff 2008.1/x86_64/clamd-0.93.3-1.1mdv2008.1.x86_64.rpm

db051d135d8facbfca9a0b567db4aca0 2008.1/x86_64/lib64clamav4-0.93.3-1.1mdv2008.1.x86_64.rpm

75632de425c08ededfdc3fe1e8860d2d 2008.1/x86_64/lib64clamav-devel-0.93.3-1.1mdv2008.1.x86_64.rpm

e20f699bec8683f1e12d5a097ca1b6d1 2008.1/SRPMS/clamav-0.93.3-1.1mdv2008.1.src.rpm

 

Corporate 3.0:

8293cdf10a02152f747da40f440f5ee0 corporate/3.0/i586/clamav-0.93.3-0.1.C30mdk.i586.rpm

3c5678d035188b97c37dd22fc52f7d23 corporate/3.0/i586/clamav-db-0.93.3-0.1.C30mdk.i586.rpm

adbaf9888e9f210a81fbb9f7ab9ffa0b corporate/3.0/i586/clamav-milter-0.93.3-0.1.C30mdk.i586.rpm

3d8430e67062828fe45c4b378754bc18 corporate/3.0/i586/clamd-0.93.3-0.1.C30mdk.i586.rpm

3d6708ce5464613b2b459aca4b4beac9 corporate/3.0/i586/libclamav4-0.93.3-0.1.C30mdk.i586.rpm

9891f420752c30caef96701efb708e92 corporate/3.0/i586/libclamav-devel-0.93.3-0.1.C30mdk.i586.rpm

6ce9aa49056cd7e52cd8270030729e5e corporate/3.0/SRPMS/clamav-0.93.3-0.1.C30mdk.src.rpm

 

Corporate 3.0/X86_64:

57421f4ecb122aef21cf89ace7f7b0fb corporate/3.0/x86_64/clamav-0.93.3-0.1.C30mdk.x86_64.rpm

a0a69afe13e1149cb16d48167fed89fa corporate/3.0/x86_64/clamav-db-0.93.3-0.1.C30mdk.x86_64.rpm

b6847f7917ae1b78a895083564e9717d corporate/3.0/x86_64/clamav-milter-0.93.3-0.1.C30mdk.x86_64.rpm

1f971e3e2b749f9c0bc066a90238a787 corporate/3.0/x86_64/clamd-0.93.3-0.1.C30mdk.x86_64.rpm

370fa0bea1e2c69092331476318bf3d6 corporate/3.0/x86_64/lib64clamav4-0.93.3-0.1.C30mdk.x86_64.rpm

f12dc8fb45fede77b4523a25473e8eb4 corporate/3.0/x86_64/lib64clamav-devel-0.93.3-0.1.C30mdk.x86_64.rpm

6ce9aa49056cd7e52cd8270030729e5e corporate/3.0/SRPMS/clamav-0.93.3-0.1.C30mdk.src.rpm

 

Corporate 4.0:

4ae1f7dcde4066bfff80d6a4d06c4868 corporate/4.0/i586/clamav-0.93.3-0.1.20060mlcs4.i586.rpm

b20ab30a139f6137485927c0b766addc corporate/4.0/i586/clamav-db-0.93.3-0.1.20060mlcs4.i586.rpm

deafc5d0dbdf6cdfb43fd5261d9b2860 corporate/4.0/i586/clamav-milter-0.93.3-0.1.20060mlcs4.i586.rpm

7c9e8cbe36fb7c9f00763be25b2b7b6e corporate/4.0/i586/clamd-0.93.3-0.1.20060mlcs4.i586.rpm

c37e59fa834d2cc50223aa4eced7dab8 corporate/4.0/i586/libclamav4-0.93.3-0.1.20060mlcs4.i586.rpm

97397d585b1a0e8b28f3963e3f2b0bb4 corporate/4.0/i586/libclamav-devel-0.93.3-0.1.20060mlcs4.i586.rpm

166a6c91b1094142374919721d8e53b4 corporate/4.0/SRPMS/clamav-0.93.3-0.1.20060mlcs4.src.rpm

 

Corporate 4.0/X86_64:

f9d90442a66f213e634dfeeb58b39499 corporate/4.0/x86_64/clamav-0.93.3-0.1.20060mlcs4.x86_64.rpm

cf4cbdd6a9b3477b5794fa24cc185e90 corporate/4.0/x86_64/clamav-db-0.93.3-0.1.20060mlcs4.x86_64.rpm

96cf9d582f68937a86378e44c9d9c7cf corporate/4.0/x86_64/clamav-milter-0.93.3-0.1.20060mlcs4.x86_64.rpm

6c4f6a5f04ffd562b3e22aface428413 corporate/4.0/x86_64/clamd-0.93.3-0.1.20060mlcs4.x86_64.rpm

027f5c2cae43725f098730c9c6085346 corporate/4.0/x86_64/lib64clamav4-0.93.3-0.1.20060mlcs4.x86_64.rpm

aa541907de0244f3db23069467c6ebe1 corporate/4.0/x86_64/lib64clamav-devel-0.93.3-0.1.20060mlcs4.x86_64.rpm

166a6c91b1094142374919721d8e53b4 corporate/4.0/SRPMS/clamav-0.93.3-0.1.20060mlcs4.src.rpm

_______________________________________________________________________

 

To upgrade automatically use MandrivaUpdate or urpmi. The verification

of md5 checksums and GPG signatures is performed automatically for you.

 

All packages are signed by Mandriva for security. You can obtain the

GPG public key of the Mandriva Security Team by executing:

 

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 

You can view other update advisories for Mandriva Linux at:

 

http://www.mandriva.com/security/advisories

 

If you want to report vulnerabilities, please contact

 

security_(at)_mandriva.com

_______________________________________________________________________

 

Type Bits/KeyID Date User ID

pub 1024D/22458A98 2000-07-10 Mandriva Security Team

 

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.9 (GNU/Linux)

 

iD8DBQFIofhymqjQ0CJFipgRAr2hAKCaHgvtOj5PWHnkJK+BlSWb4Z8xsQCeOqAR

n6hnOvnmkBsbvQd8bgP6Pkg=

=a/bF

-----END PGP SIGNATURE-----

 

 

------------=_1218586541-11275-8110

Content-Type: text/plain; name="message-footer.txt"

Content-Disposition: inline; filename="message-footer.txt"

Content-Transfer-Encoding: 8bit

 

To unsubscribe, send a email to sympa ( -at -) mandrivalinux.org

with this subject : unsubscribe security-announce

_______________________________________________________

Want to buy your Pack or Services from Mandriva?

Go to http://www.mandrivastore.com

Join the Club : http://www.mandrivaclub.com

_______________________________________________________

 

------------=_1218586541-11275-8110--