FEDORA-2023-c0657c3ed0 — security update for clamav

obsolete

clamav-0.103.8-1.fc36

FEDORA-2023-c0657c3ed0 created by orion 3 years ago for Fedora 36

ClamAV 0.103.8 is a critical patch release with the following fixes:

CVE-2023-20032https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser. The issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. Thank you to Simon Scannell for reporting this issue.
CVE-2023-20052https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser. The issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. Thank you to Simon Scannell for reporting this issue.

This update has been submitted for testing by orion.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

2 years ago

neil commented & provided feedback 2 years ago

karma

Database provided in this update fails signature verification.

LibClamAV debug: MD5(.tar.gz) = 9a3223dfc90446e2384856212b2a446f
LibClamAV debug: cli_cvdverify: MD5 verification error
LibClamAV Error: Can't load /var/lib/clamav/daily.cvd: Can't verify database integrity
LibClamAV Error: cli_loaddbdir(): error loading database /var/lib/clamav/daily.cvd

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

2 years ago

This update has been obsoleted by clamav-0.103.8-3.fc36.

2 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

-1

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Thresholds

Minimum Karma

Minimum Testing

7 days

Dates

submitted

3 years ago

in testing

2 years ago

Builds

clamav-0.103.8-1.fc36

BZ#2170570 Please build ClamAV 0.103.8 for EL7

clamav-0.103.8-1.fc36

Automated Test Results

ignored

Test Cases


0	0	Test Case ClamAV