LWN.net Logo

Fedora alert FEDORA-2008-0115 (clamav)

From:  updates@fedoraproject.org
To:  fedora-package-announce@redhat.com
Subject:  [SECURITY] Fedora 8 Update: clamav-0.92-6.fc8
Date:  Tue, 22 Jan 2008 08:54:56 -0700
Message-ID:  <200801221554.m0MFsgPf032115@bastion.fedora.phx.redhat.com>

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-0115 2008-01-22 05:37:09 -------------------------------------------------------------------------------- Name : clamav Product : Fedora 8 Version : 0.92 Release : 6.fc8 URL : http://www.clamav.net Summary : End-user tools for the Clam Antivirus scanner Description : Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. The virus database is based on the virus database from OpenAntiVirus, but contains additional signatures (including signatures for popular polymorphic viruses, too) and is KEPT UP TO DATE. -------------------------------------------------------------------------------- Update Information: Upstream clamav 0.92 fixes multiple security issues: - CVE-2007-6335 (#426210) - CVE-2007-6336 (#426343) - CVE-2007-6337 (#426344) Sendmail-specific parts moved to separate milter subpackage. -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 1 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.92-6 - redisabled unrar stuff completely by using clean sources * Tue Jan 1 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.92-5 - use a better way to disable RPATH-generation (needed for '--with unrar' builds) * Mon Dec 31 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.92-4 - added a README.fedora to the milter package (#240610) - ship original sources again; unrar is now licensed correctly (no more stolen code put under GPL). Nevertheless, this license is not GPL compatible, and to allow libclamav to be used by GPL applications, unrar is disabled by a ./configure switch. - use pkg-config in clamav-config to emulate --cflags and --libs operations (fixes partly multilib issues) - registered some more auto-updated files and marked them as %ghost * Fri Dec 21 2007 Tom "spot" Callaway <tcallawa@redhat.com> - 0.92-3 - updated to 0.92 (SECURITY): - CVE-2007-6335 MEW PE File Integer Overflow Vulnerability -------------------------------------------------------------------------------- References: [ 1 ] Bug #240610 - clamav-milter socket doesn't agree with sendmail.cf https://bugzilla.redhat.com/show_bug.cgi?id=240610 [ 2 ] Bug #426212 - CVE-2007-6335 CVE-2007-6336 CVE-2007-6337 clamav: multiple vulnerabilities [f8] https://bugzilla.redhat.com/show_bug.cgi?id=426212 -------------------------------------------------------------------------------- Updated packages: a6fa73ce3ca462339a1a2dae9092367870c3d8cb clamav-debuginfo-0.92-6.fc8.ppc64.rpm 192d6d67499f0aa97d2045a0e1e904d1cbe1e5d5 clamav-milter-sysv-0.92-6.fc8.ppc64.rpm 47765cfdb6b6611cfcace5773efecc3d24d119ad clamav-milter-0.92-6.fc8.ppc64.rpm f52c5f11dcf4434ca9aaeb261f52036b6ecc9f6a clamav-server-sysv-0.92-6.fc8.ppc64.rpm db791ae98887f3705d4d3423ef1f0b4f81f86a62 clamav-server-0.92-6.fc8.ppc64.rpm f3019a8e4ed4ec4aeb8cef753413db377e308c3e clamav-update-0.92-6.fc8.ppc64.rpm 0ec228023ccecde0062038efe49e1db1f40b39c4 clamav-data-empty-0.92-6.fc8.ppc64.rpm 6d486fcc285e1d4c7c6ed1fe395317b3e249b5e6 clamav-data-0.92-6.fc8.ppc64.rpm 9ce77c2d7a607ad5043b82f8a0fdc5d999560f17 clamav-devel-0.92-6.fc8.ppc64.rpm 08a28e91b5bdbbada297b34f73534836d5878379 clamav-lib-0.92-6.fc8.ppc64.rpm 27e371c1a775be1ce6c5a5dfd6ba23d307668fda clamav-filesystem-0.92-6.fc8.ppc64.rpm 52c78eb79de3a34fe3f92aa25b0811e66e9a66ca clamav-0.92-6.fc8.ppc64.rpm 4fb42cdbe48ba6cd71439fae8020401349b61e35 clamav-debuginfo-0.92-6.fc8.i386.rpm 049a5596d97afcb54bd9211f750f1eaf7624938a clamav-milter-sysv-0.92-6.fc8.i386.rpm 5970d683acd756c84d0a89dbab4eaf96b32206ac clamav-milter-0.92-6.fc8.i386.rpm 27e59d963ffa31383147925f515f51bc2caed6ba clamav-server-sysv-0.92-6.fc8.i386.rpm fa704f5f46c53203bd7cb3f2e63eeb5280b2e83e clamav-server-0.92-6.fc8.i386.rpm df7db693db11de68b816094f632af378c1c95a00 clamav-update-0.92-6.fc8.i386.rpm c525ffb7cc66eb5bb921fe814660fb83d3fe351b clamav-data-empty-0.92-6.fc8.i386.rpm e422087c599ef5967fcc84efa501b9a399853dc3 clamav-data-0.92-6.fc8.i386.rpm faf45266cdfcc2a7d80c8840092eb23ffcc9ad08 clamav-devel-0.92-6.fc8.i386.rpm c7fb499ce8359c9bf8bf5faea7c85a253e0ca501 clamav-lib-0.92-6.fc8.i386.rpm f48281aea151d012604f6185ffc5701d311640bd clamav-filesystem-0.92-6.fc8.i386.rpm ec7c3a9e139f9d5f6630071c9d8ea7813665fe0b clamav-0.92-6.fc8.i386.rpm 42ab1df8748f6f93f580396a57a4de0c932a5d38 clamav-debuginfo-0.92-6.fc8.x86_64.rpm 1eee867c3afacd0a9c3b49a0f293ede1d72fd681 clamav-milter-sysv-0.92-6.fc8.x86_64.rpm 2852869f8bdefcdf6e800e098ccc95b7faaed2dc clamav-milter-0.92-6.fc8.x86_64.rpm a5a6752368fcafb2b6b27520afb7550cb725198e clamav-server-sysv-0.92-6.fc8.x86_64.rpm 96732beab5f9d49ab08be96427981039dad99ef5 clamav-server-0.92-6.fc8.x86_64.rpm 8031e5c892c1268d918bdfa338777958ca1cc655 clamav-update-0.92-6.fc8.x86_64.rpm 8f203e4221e8d6fadae56500ab762db22c5c316e clamav-data-empty-0.92-6.fc8.x86_64.rpm f1a2f6d77accf740b4ed28b85e21bfd6ce7f9ed2 clamav-data-0.92-6.fc8.x86_64.rpm 1992f8bbe9df014dc54ee721aea632cf22b4ff63 clamav-devel-0.92-6.fc8.x86_64.rpm 11d1490a3e7183e255a5ca31d18ac6087b69200c clamav-lib-0.92-6.fc8.x86_64.rpm c231155eeb0e76e3d6f6e25c0c34ec99543e0947 clamav-filesystem-0.92-6.fc8.x86_64.rpm 3546f588aaed58038e84f665a58163cbe98eda31 clamav-0.92-6.fc8.x86_64.rpm 3ff0e4d08cd938718490a69d741db94e5850da65 clamav-debuginfo-0.92-6.fc8.ppc.rpm bc64f232e64d49006ced96a8a6a07a6044a30cb0 clamav-milter-sysv-0.92-6.fc8.ppc.rpm 7fe65f7c5353d35db499305d4bc406bdef6e8152 clamav-milter-0.92-6.fc8.ppc.rpm 8f6213a3782bbc564883f8bd396f3bece81d7262 clamav-server-sysv-0.92-6.fc8.ppc.rpm f5a20721d987dc6a55f10316667c52cf4d6d6d90 clamav-server-0.92-6.fc8.ppc.rpm fe9afa398364a89c2ebcbf4484c108b463dceb2a clamav-update-0.92-6.fc8.ppc.rpm 1fdfbb16f301bad3a2d3984bd48039e63f6766da clamav-data-empty-0.92-6.fc8.ppc.rpm 48e554f7ba6ba3b92367ed91ab0fdd9817011316 clamav-data-0.92-6.fc8.ppc.rpm b560b0169e12ac4597e5a6bb0f6387add41845ea clamav-devel-0.92-6.fc8.ppc.rpm aa0bfeb97c44f88615cf56bf607d8d7aed8f955e clamav-lib-0.92-6.fc8.ppc.rpm 95a9b584228cb92039650e5b02b54c21ab51d6df clamav-filesystem-0.92-6.fc8.ppc.rpm 6debaf9fcb095a2180298af984483c4d19d08586 clamav-0.92-6.fc8.ppc.rpm e8d4648a719a0fac66684283dace8d1dcad1a7b6 clamav-0.92-6.fc8.src.rpm This update can be installed with the "yum" update program. Use su -c 'yum update clamav' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...


(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds