MGASA-2014-0487
- Source
- https://advisories.mageia.org/MGASA-2014-0487.html
- Import Source
- https://advisories.mageia.org/MGASA-2014-0487.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2014-0487
- Related
- Published
- 2014-11-26T10:14:01Z
- Modified
- 2014-11-26T10:00:38Z
- Summary
- Updated clamav packages fix security vulnerabilities
- Details
-
Certain javascript files causes ClamAV to segfault when scanned with the -a (list archived files) (CVE-2013-6497).
A heap buffer overflow was reported in ClamAV when scanning a specially crafted y0da Crypter obfuscated PE file (CVE-2014-9050).
ClamAV has been updated to version 0.98.5 to address these and other issues.
- References
-
- https://advisories.mageia.org/MGASA-2014-0487.html
- https://bugs.mageia.org/show_bug.cgi?id=14608
- https://bugzilla.clamav.net/show_bug.cgi?id=11088
- http://blog.clamav.net/2014/11/clamav-0985-has-been-released.html
- http://www.mandriva.com/en/support/security/advisories/mbs1/MDVSA-2014%3A217/
- http://openwall.com/lists/oss-security/2014/11/22/1
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:4 / clamav
Package
- Name
- clamav
- Purl
- pkg:rpm/mageia/clamav?distro=mageia-4
Mageia:3 / clamav
Package
- Name
- clamav
- Purl
- pkg:rpm/mageia/clamav?distro=mageia-3