| Description: | Description:
The remote host is missing an update to clamav
announced via advisory FEDORA-2008-9644.
Update Information:
Security fixes from upstream 0.94 and 0.94.1:
CVE-2008-1389 (#461461): Invalid memory access in the CHM unpacker
CVE-2008-3912 (#461461): Multiple out-of-memory NULL pointer dereferences
CVE-2008-3913 (#461461): Fix memory leak in the error code path in freshclam
CVE-2008-3914 (#461461): Multiple file descriptor leaks on the error code path
CVE-2008-5050 (#470783): get_unicode_name() off-by-one buffer overflow
ChangeLog:
* Thu Nov 13 2008 Tomas Hoger - 0.93.3-2
- Security update - backport security fixes from 0.94:
CVE-2008-1389 (#461461): Invalid memory access in the CHM unpacker
CVE-2008-3912 (#461461): Multiple out-of-memory NULL pointer dereferences
CVE-2008-3913 (#461461): Fix memory leak in the error code path in freshclam
CVE-2008-3914 (#461461): Multiple file descriptor leaks on the error code path
- Security update - backport security fixes from 0.94.1:
CVE-2008-5050 (#470783): get_unicode_name() off-by-one buffer overflow
References:
[ 1 ] Bug #461461 - clamav: multiple security fixes in 0.94 (CVE-2008-1389, CVE-2008-3912, CVE-2008-3913, CVE-2008-3914)
https://bugzilla.redhat.com/show_bug.cgi?id=461461
[ 2 ] Bug #470783 - CVE-2008-5050 clamav: get_unicode_name() off-by-one buffer overflow (< 0.94.1)
https://bugzilla.redhat.com/show_bug.cgi?id=470783
Solution: Apply the appropriate updates.
This update can be installed with the yum update program. Use
su -c 'yum update clamav' at the command line.
For more information, refer to Managing Software with yum,
available at http://docs.fedoraproject.org/yum/.
http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2008-9644
Risk factor : Critical
CVSS Score:
10.0
|
