Login
Newsletter
Werbung

Sicherheit: Zwei Probleme in ClamAV
Aktuelle Meldungen Distributionen
Name: Zwei Probleme in ClamAV
ID: USN-945-1
Distribution: Ubuntu
Plattformen: Ubuntu 9.04, Ubuntu 9.10, Ubuntu 10.04 LTS
Datum: Fr, 28. Mai 2010, 08:09
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1639
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2077
Applikationen: Clam Antivirus

Originalnachricht


--===============3059805855950828317==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
boundary="fUYQa+Pmc3FrFX/N"
Content-Disposition: inline


--fUYQa+Pmc3FrFX/N
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

===========================================================
Ubuntu Security Notice USN-945-1 May 27, 2010
clamav vulnerabilities
CVE-2010-1639, CVE-2010-2077
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 9.04
Ubuntu 9.10
Ubuntu 10.04 LTS

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 9.04:
libclamav6 0.95.3+dfsg-1ubuntu0.09.04.2

Ubuntu 9.10:
libclamav6 0.95.3+dfsg-1ubuntu0.09.10.2

Ubuntu 10.04 LTS:
libclamav6 0.96.1+dfsg-0ubuntu0.10.04.1

In general, a standard system update will make all the necessary
changes. For Ubuntu 10.04 LTS, this update uses a new upstream release,
which includes additional bug fixes.

Details follow:

It was discovered that ClamAV did not properly reallocate memory when
processing certain PDF files. A remote attacker could send a specially
crafted PDF and crash ClamAV. (CVE-2010-1639)

An out of bounds memory access flaw was discovered in ClamAV. A remote
attacker could send a specially crafted Portable Executable (PE) file
and crash ClamAV. This issue only affected Ubuntu 10.04 LTS.
(CVE-2010-2077)


Updated packages for Ubuntu 9.04:

Source archives:

clamav_0.95.3+dfsg-1ubuntu0.09.04.2.diff.gz
Size/MD5: 265661 7787b2b42609df529788c879e36d9fe8
clamav_0.95.3+dfsg-1ubuntu0.09.04.2.dsc
Size/MD5: 1560 377a7d9c49cb15e1713f54b0a25778a2
clamav_0.95.3+dfsg.orig.tar.gz
Size/MD5: 26892533 dfe1348c52223ab48f049123021aea4a

Architecture independent packages:

clamav-base_0.95.3+dfsg-1ubuntu0.09.04.2_all.deb
Size/MD5: 24053336 60f643f76df7bf4db43f644bfc3ed5b4
clamav-docs_0.95.3+dfsg-1ubuntu0.09.04.2_all.deb
Size/MD5: 1123516 f71ab8f9fba78f294ced9c926d0e7b04
clamav-testfiles_0.95.3+dfsg-1ubuntu0.09.04.2_all.deb
Size/MD5: 232182 9800f0104337931ae214444666820cde

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

clamav-daemon_0.95.3+dfsg-1ubuntu0.09.04.2_amd64.deb
Size/MD5: 382010 a9505fb7d8d8f5f0356ca6e78cc7e04a
clamav-dbg_0.95.3+dfsg-1ubuntu0.09.04.2_amd64.deb
Size/MD5: 1167968 1fa1d2e81f9087949fc3b9a03aa8d6ee
clamav-freshclam_0.95.3+dfsg-1ubuntu0.09.04.2_amd64.deb
Size/MD5: 287956 9ffd2f325bc3502f78b35a9b8f193e3a
clamav_0.95.3+dfsg-1ubuntu0.09.04.2_amd64.deb
Size/MD5: 280340 caf37e1970961ec2da36f58172d88049
libclamav-dev_0.95.3+dfsg-1ubuntu0.09.04.2_amd64.deb
Size/MD5: 614446 4ddcb4980913c6e46d5a9eb0b5bcc290
libclamav6_0.95.3+dfsg-1ubuntu0.09.04.2_amd64.deb
Size/MD5: 579218 e7431e82192047d8c826a5b5181f58c4
clamav-milter_0.95.3+dfsg-1ubuntu0.09.04.2_amd64.deb
Size/MD5: 308570 69d6fba8d6eb6b0565df12334c5b1e4d

i386 architecture (x86 compatible Intel/AMD):

clamav-daemon_0.95.3+dfsg-1ubuntu0.09.04.2_i386.deb
Size/MD5: 369822 0bc1791b8fe80b663624303440caee1e
clamav-dbg_0.95.3+dfsg-1ubuntu0.09.04.2_i386.deb
Size/MD5: 1082008 dddcf1b0edea5259597406d989699290
clamav-freshclam_0.95.3+dfsg-1ubuntu0.09.04.2_i386.deb
Size/MD5: 285352 a40c187d2495a44fcebf2d6d777d4967
clamav_0.95.3+dfsg-1ubuntu0.09.04.2_i386.deb
Size/MD5: 275122 c11a165ab966c63b8d3fe643b65ad607
libclamav-dev_0.95.3+dfsg-1ubuntu0.09.04.2_i386.deb
Size/MD5: 582384 586b5b1ad20b2b6373addfe17785b5ba
libclamav6_0.95.3+dfsg-1ubuntu0.09.04.2_i386.deb
Size/MD5: 566848 455db6e033a4ecf8f98febcee221aa55
clamav-milter_0.95.3+dfsg-1ubuntu0.09.04.2_i386.deb
Size/MD5: 304884 1cffeedb1dd62e82bef4939c9d6d84ab

lpia architecture (Low Power Intel Architecture):

clamav-daemon_0.95.3+dfsg-1ubuntu0.09.04.2_lpia.deb
Size/MD5: 370248 69e4400444ef290f05882d896d8b2c0f
clamav-dbg_0.95.3+dfsg-1ubuntu0.09.04.2_lpia.deb
Size/MD5: 1101216 fc71d4d2b3e6b6a444c6209ad2a9e192
clamav-freshclam_0.95.3+dfsg-1ubuntu0.09.04.2_lpia.deb
Size/MD5: 284962 bb33d21d1631b37baad819cd674ed16f
clamav_0.95.3+dfsg-1ubuntu0.09.04.2_lpia.deb
Size/MD5: 275056 cda4fcc9b41abfc65e258b329f54c0d2
libclamav-dev_0.95.3+dfsg-1ubuntu0.09.04.2_lpia.deb
Size/MD5: 583994 644830ad2f8dd3575e02b05efca0313e
libclamav6_0.95.3+dfsg-1ubuntu0.09.04.2_lpia.deb
Size/MD5: 568196 2900775447b8738c99dd2a298361414d
clamav-milter_0.95.3+dfsg-1ubuntu0.09.04.2_lpia.deb
Size/MD5: 304804 e2a5d6096cd1b704c443d9f921097661

powerpc architecture (Apple Macintosh G3/G4/G5):

clamav-daemon_0.95.3+dfsg-1ubuntu0.09.04.2_powerpc.deb
Size/MD5: 389276 2909ba7281ad8d32c2724fa2e830f86c
clamav-dbg_0.95.3+dfsg-1ubuntu0.09.04.2_powerpc.deb
Size/MD5: 1144966 e00fac23306f0b743977d41ceaa197be
clamav-freshclam_0.95.3+dfsg-1ubuntu0.09.04.2_powerpc.deb
Size/MD5: 290474 72023c1298cb24166976edb9c324d27e
clamav_0.95.3+dfsg-1ubuntu0.09.04.2_powerpc.deb
Size/MD5: 283604 26fe94fcc9918e7ac8766f17bc9aa363
libclamav-dev_0.95.3+dfsg-1ubuntu0.09.04.2_powerpc.deb
Size/MD5: 655482 62aae91e6e53f15a3e8e7800f33a5cfb
libclamav6_0.95.3+dfsg-1ubuntu0.09.04.2_powerpc.deb
Size/MD5: 596180 6c049e2e282620d2176c8b6a1798ed04
clamav-milter_0.95.3+dfsg-1ubuntu0.09.04.2_powerpc.deb
Size/MD5: 311820 9c00c488c94a93218e98110a42175c2c

sparc architecture (Sun SPARC/UltraSPARC):

clamav-daemon_0.95.3+dfsg-1ubuntu0.09.04.2_sparc.deb
Size/MD5: 372096 2e03360b9c245ce4e1644245a5400e0c
clamav-dbg_0.95.3+dfsg-1ubuntu0.09.04.2_sparc.deb
Size/MD5: 1056338 30145ce4d3f3915a31262428d0d5838d
clamav-freshclam_0.95.3+dfsg-1ubuntu0.09.04.2_sparc.deb
Size/MD5: 284124 c2ccba1579f72bdb84b1b88f7771b238
clamav_0.95.3+dfsg-1ubuntu0.09.04.2_sparc.deb
Size/MD5: 275304 1b699da9584b68a3eea691adcd84714b
libclamav-dev_0.95.3+dfsg-1ubuntu0.09.04.2_sparc.deb
Size/MD5: 617114 7bdbfd9e77cf400b5beff939dd41abc0
libclamav6_0.95.3+dfsg-1ubuntu0.09.04.2_sparc.deb
Size/MD5: 583832 9ddb027b48fe04065b151c4146c1d466
clamav-milter_0.95.3+dfsg-1ubuntu0.09.04.2_sparc.deb
Size/MD5: 305420 c552e9a341d54cab37c19344a7819262

Updated packages for Ubuntu 9.10:

Source archives:

clamav_0.95.3+dfsg-1ubuntu0.09.10.2.diff.gz
Size/MD5: 265651 60714206765f8510068fd0f570c68981
clamav_0.95.3+dfsg-1ubuntu0.09.10.2.dsc
Size/MD5: 1560 6b9f2bd3430b4def78e8b058e40226ec
clamav_0.95.3+dfsg.orig.tar.gz
Size/MD5: 26892533 dfe1348c52223ab48f049123021aea4a

Architecture independent packages:

clamav-base_0.95.3+dfsg-1ubuntu0.09.10.2_all.deb
Size/MD5: 24053338 474fe324644a8d50d3b26048df6db8f1
clamav-docs_0.95.3+dfsg-1ubuntu0.09.10.2_all.deb
Size/MD5: 1123504 85e92736e75ee3283dd944df5b662331
clamav-testfiles_0.95.3+dfsg-1ubuntu0.09.10.2_all.deb
Size/MD5: 232178 49b90ce11d863e6e8e47fde6ccc66c02

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

clamav-daemon_0.95.3+dfsg-1ubuntu0.09.10.2_amd64.deb
Size/MD5: 383058 5a498f7fa95f37832e5824d3c2d0a909
clamav-dbg_0.95.3+dfsg-1ubuntu0.09.10.2_amd64.deb
Size/MD5: 1101036 4167804e4cbebbcdebd97b3005f473d5
clamav-freshclam_0.95.3+dfsg-1ubuntu0.09.10.2_amd64.deb
Size/MD5: 288566 c3dd87ab6d64cb58c95015f90912d8d3
clamav_0.95.3+dfsg-1ubuntu0.09.10.2_amd64.deb
Size/MD5: 281094 b80a2791482f4335950c2a16c4c5a4ca
libclamav-dev_0.95.3+dfsg-1ubuntu0.09.10.2_amd64.deb
Size/MD5: 622948 25ed97e96624e9c0fbc435a8b2668349
libclamav6_0.95.3+dfsg-1ubuntu0.09.10.2_amd64.deb
Size/MD5: 584098 cafc49de814b1dc12979e968f70fdafd
clamav-milter_0.95.3+dfsg-1ubuntu0.09.10.2_amd64.deb
Size/MD5: 309070 6bc154e2ec72f0b376f32fd6de9dfcfd

i386 architecture (x86 compatible Intel/AMD):

clamav-daemon_0.95.3+dfsg-1ubuntu0.09.10.2_i386.deb
Size/MD5: 370224 8303023e0688bcb8e0760930f1abd40e
clamav-dbg_0.95.3+dfsg-1ubuntu0.09.10.2_i386.deb
Size/MD5: 1058320 7c8b475e7b94c207204058a1a15fca04
clamav-freshclam_0.95.3+dfsg-1ubuntu0.09.10.2_i386.deb
Size/MD5: 285618 192168fbfe130add616ea727175fd65d
clamav_0.95.3+dfsg-1ubuntu0.09.10.2_i386.deb
Size/MD5: 275348 82c34c1695cde4931ac5c44c24fe53ef
libclamav-dev_0.95.3+dfsg-1ubuntu0.09.10.2_i386.deb
Size/MD5: 584066 d23bffd137ef64d44b14480433b1a0d9
libclamav6_0.95.3+dfsg-1ubuntu0.09.10.2_i386.deb
Size/MD5: 567798 1d3ed276709789cc0108405c21851354
clamav-milter_0.95.3+dfsg-1ubuntu0.09.10.2_i386.deb
Size/MD5: 304954 12b0d2ffe7059584df23ea908e7022a0

lpia architecture (Low Power Intel Architecture):

clamav-daemon_0.95.3+dfsg-1ubuntu0.09.10.2_lpia.deb
Size/MD5: 370414 e77bae2369a845704b9cb809dbad6ede
clamav-dbg_0.95.3+dfsg-1ubuntu0.09.10.2_lpia.deb
Size/MD5: 1073050 13c7d924f28fc0f72458fd4210d5717a
clamav-freshclam_0.95.3+dfsg-1ubuntu0.09.10.2_lpia.deb
Size/MD5: 285866 d3e4ea0aa80bc9790e627acc01a63d97
clamav_0.95.3+dfsg-1ubuntu0.09.10.2_lpia.deb
Size/MD5: 275844 90966809856fe1e3d96c342bfa01fe7f
libclamav-dev_0.95.3+dfsg-1ubuntu0.09.10.2_lpia.deb
Size/MD5: 585156 821ad78cf4465f8bc2ddf55902672280
libclamav6_0.95.3+dfsg-1ubuntu0.09.10.2_lpia.deb
Size/MD5: 568602 41a0ed13a8b8a6ee13dca9ccc7eddee4
clamav-milter_0.95.3+dfsg-1ubuntu0.09.10.2_lpia.deb
Size/MD5: 304808 226cdd9abba23f71d12d5cc7a6b12157

powerpc architecture (Apple Macintosh G3/G4/G5):

clamav-daemon_0.95.3+dfsg-1ubuntu0.09.10.2_powerpc.deb
Size/MD5: 382978 d0e55fbda64062fd2d3603b2fea20936
clamav-dbg_0.95.3+dfsg-1ubuntu0.09.10.2_powerpc.deb
Size/MD5: 1135162 3586db544cab3275dac91ecf017f632d
clamav-freshclam_0.95.3+dfsg-1ubuntu0.09.10.2_powerpc.deb
Size/MD5: 287924 e27c3a815aed7eea052d71849f32186c
clamav_0.95.3+dfsg-1ubuntu0.09.10.2_powerpc.deb
Size/MD5: 279548 d5c26786eeb52755db6c3c1eee881824
libclamav-dev_0.95.3+dfsg-1ubuntu0.09.10.2_powerpc.deb
Size/MD5: 661538 3782c1dd076ea79b77ff43b0db665e04
libclamav6_0.95.3+dfsg-1ubuntu0.09.10.2_powerpc.deb
Size/MD5: 601562 95de5d84f91b5909844a2d21f16e6bcd
clamav-milter_0.95.3+dfsg-1ubuntu0.09.10.2_powerpc.deb
Size/MD5: 310042 a663f61663494fdc8b196a116d5f6992

sparc architecture (Sun SPARC/UltraSPARC):

clamav-daemon_0.95.3+dfsg-1ubuntu0.09.10.2_sparc.deb
Size/MD5: 373514 155c740bc502f9f4a0cd5ffc7fc756a2
clamav-dbg_0.95.3+dfsg-1ubuntu0.09.10.2_sparc.deb
Size/MD5: 1055560 1a6192d288627abac52edd067d52c83c
clamav-freshclam_0.95.3+dfsg-1ubuntu0.09.10.2_sparc.deb
Size/MD5: 284218 50fa0efa986a8ece65bdee3480195d71
clamav_0.95.3+dfsg-1ubuntu0.09.10.2_sparc.deb
Size/MD5: 275238 1163a41d75f60e8800e11a69778ab69a
libclamav-dev_0.95.3+dfsg-1ubuntu0.09.10.2_sparc.deb
Size/MD5: 628474 9468e8277ed55c872430422c3aa0f75d
libclamav6_0.95.3+dfsg-1ubuntu0.09.10.2_sparc.deb
Size/MD5: 595246 e9f32d41af9731e02cc59f4636f70cfa
clamav-milter_0.95.3+dfsg-1ubuntu0.09.10.2_sparc.deb
Size/MD5: 305948 35ea51a6a95fca7982aa8cbcb59db33b

Updated packages for Ubuntu 10.04:

Source archives:

clamav_0.96.1+dfsg-0ubuntu0.10.04.1.diff.gz
Size/MD5: 274826 01edfd39dbc0303d2938ca3203991162
clamav_0.96.1+dfsg-0ubuntu0.10.04.1.dsc
Size/MD5: 1553 7651d594e42f1a7974b8bb3ded7f4394
clamav_0.96.1+dfsg.orig.tar.gz
Size/MD5: 39209011 143a92cd065620f922fb00da6ea8f101

Architecture independent packages:

clamav-base_0.96.1+dfsg-0ubuntu0.10.04.1_all.deb
Size/MD5: 291446 6d11f1166b237caef6f75a159e0b78a0
clamav-docs_0.96.1+dfsg-0ubuntu0.10.04.1_all.deb
Size/MD5: 1290450 04d2d6d7646489695f5e207d7457f874
clamav-testfiles_0.96.1+dfsg-0ubuntu0.10.04.1_all.deb
Size/MD5: 5251626 89287b5d53a98429406faf4520f8a96b

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

clamav-daemon_0.96.1+dfsg-0ubuntu0.10.04.1_amd64.deb
Size/MD5: 415348 55629eb9df2a8c33bf5cc67dcbda2cd1
clamav-dbg_0.96.1+dfsg-0ubuntu0.10.04.1_amd64.deb
Size/MD5: 22280620 f72bfcaaabdf45e77e14005f7bde00e9
clamav-freshclam_0.96.1+dfsg-0ubuntu0.10.04.1_amd64.deb
Size/MD5: 304522 94ea2c2d582a4f417134e574f99c670c
clamav_0.96.1+dfsg-0ubuntu0.10.04.1_amd64.deb
Size/MD5: 327918 80a7d3091018d603cfa3407bf36f015e
libclamav-dev_0.96.1+dfsg-0ubuntu0.10.04.1_amd64.deb
Size/MD5: 211612 124455929926a712d0d26c2efd51ae44
libclamav6_0.96.1+dfsg-0ubuntu0.10.04.1_amd64.deb
Size/MD5: 3874258 4e1869d75d837c95cda47595b35ba46a
clamav-milter_0.96.1+dfsg-0ubuntu0.10.04.1_amd64.deb
Size/MD5: 328484 1dac4006e300fc615e94bf81e7e54c20

i386 architecture (x86 compatible Intel/AMD):

clamav-daemon_0.96.1+dfsg-0ubuntu0.10.04.1_i386.deb
Size/MD5: 402538 bc526e7ce95f94f155ed3300f6890acc
clamav-dbg_0.96.1+dfsg-0ubuntu0.10.04.1_i386.deb
Size/MD5: 21891438 b4ca96a6a88d2ae4af50626c97135202
clamav-freshclam_0.96.1+dfsg-0ubuntu0.10.04.1_i386.deb
Size/MD5: 301562 b2e2a2e0e76af3367d25c9d571c6a633
clamav_0.96.1+dfsg-0ubuntu0.10.04.1_i386.deb
Size/MD5: 320818 d3e4cc1c753311e5922b9399ff22b489
libclamav-dev_0.96.1+dfsg-0ubuntu0.10.04.1_i386.deb
Size/MD5: 211622 c7cc8d3a005589fcadff2af604e08b09
libclamav6_0.96.1+dfsg-0ubuntu0.10.04.1_i386.deb
Size/MD5: 3704552 5bc21787d02e38ac9e8612a9c444d2a0
clamav-milter_0.96.1+dfsg-0ubuntu0.10.04.1_i386.deb
Size/MD5: 324318 ada454f0b9ae4398b0c2c5dcc7650398

powerpc architecture (Apple Macintosh G3/G4/G5):

clamav-daemon_0.96.1+dfsg-0ubuntu0.10.04.1_powerpc.deb
Size/MD5: 416022 3fed686049a41d7a1254a67a62a389f4
clamav-dbg_0.96.1+dfsg-0ubuntu0.10.04.1_powerpc.deb
Size/MD5: 21878180 12252a1b2b1bbfcd262dae9438995475
clamav-freshclam_0.96.1+dfsg-0ubuntu0.10.04.1_powerpc.deb
Size/MD5: 303722 77ace14854e3198b8f4ec212c4ccba20
clamav_0.96.1+dfsg-0ubuntu0.10.04.1_powerpc.deb
Size/MD5: 326014 3355d310c8ab2f94d93b621cabff3151
libclamav-dev_0.96.1+dfsg-0ubuntu0.10.04.1_powerpc.deb
Size/MD5: 211630 d7888309ea2b76e0885d899ac6030bc2
libclamav6_0.96.1+dfsg-0ubuntu0.10.04.1_powerpc.deb
Size/MD5: 3670028 b4a66323e1fbbedd000b8d28e1fc75d4
clamav-milter_0.96.1+dfsg-0ubuntu0.10.04.1_powerpc.deb
Size/MD5: 329438 f9426f60a0d1133e562464d7960e9087

sparc architecture (Sun SPARC/UltraSPARC):

clamav-daemon_0.96.1+dfsg-0ubuntu0.10.04.1_sparc.deb
Size/MD5: 408360 af6ecdd32b3e0a7ec1198f5c2a4ade2e
clamav-dbg_0.96.1+dfsg-0ubuntu0.10.04.1_sparc.deb
Size/MD5: 1460898 573ae2df6f6832a3b6f6a4a8127ae353
clamav-freshclam_0.96.1+dfsg-0ubuntu0.10.04.1_sparc.deb
Size/MD5: 301034 8bd8472c4ad3ba68543b9a56a65cdfe4
clamav_0.96.1+dfsg-0ubuntu0.10.04.1_sparc.deb
Size/MD5: 323328 051856bb0ca58bf652b0e1b243a4046b
libclamav-dev_0.96.1+dfsg-0ubuntu0.10.04.1_sparc.deb
Size/MD5: 211610 bcf566110f0171156830dae2bf22b736
libclamav6_0.96.1+dfsg-0ubuntu0.10.04.1_sparc.deb
Size/MD5: 748780 b64b21b52302e424ed220adfdd46a4f4
clamav-milter_0.96.1+dfsg-0ubuntu0.10.04.1_sparc.deb
Size/MD5: 326532 e904f64ef148223874a940955d34093d




--fUYQa+Pmc3FrFX/N
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkv+5QcACgkQW0JvuRdL8BrbtQCfT/FD8NH1+IqGSHbx35p1PRNg
jzQAn0p1eslMQr7Pr3+jfzRAU1XNxTnw
=jof5
-----END PGP SIGNATURE-----

--fUYQa+Pmc3FrFX/N--


--===============3059805855950828317==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============3059805855950828317==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung