SUSE-SU-2023:0470-1
Security update for clamav
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for clamav fixes the following issues: - CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser (bsc#1208363). - CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser (bsc#1208365).
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.4 | clamav, clamav-devel, libclamav9 et 1 autres | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.1 | clamav, clamav-devel, libclamav9 et 1 autres | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.2 | clamav, clamav-devel, libclamav9 et 1 autres | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.3 | clamav, clamav-devel, libclamav9 et 1 autres | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.4 | clamav, clamav-devel, libclamav9 et 1 autres | 0.103.8-150000.3.44.1 |
Afficher les 20 entrées de 5 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.4 | clamav | 0.103.8-150000.3.44.1 |
| openSUSE Leap 15.4 | clamav-devel | 0.103.8-150000.3.44.1 |
| openSUSE Leap 15.4 | libclamav9 | 0.103.8-150000.3.44.1 |
| openSUSE Leap 15.4 | libfreshclam2 | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.1 | clamav | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.1 | clamav-devel | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.1 | libclamav9 | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.1 | libfreshclam2 | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.2 | clamav | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.2 | clamav-devel | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.2 | libclamav9 | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.2 | libfreshclam2 | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.3 | clamav | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.3 | clamav-devel | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.3 | libclamav9 | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.3 | libfreshclam2 | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.4 | clamav | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.4 | clamav-devel | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.4 | libclamav9 | 0.103.8-150000.3.44.1 |
| SUSE Linux Enterprise 15.4 | libfreshclam2 | 0.103.8-150000.3.44.1 |
Références
- https://bugzilla.suse.com/1208363
- https://bugzilla.suse.com/1208365
- https://lists.suse.com/pipermail/sle-security-updates/2023-February/013849.html
- https://www.suse.com/security/cve/CVE-2023-20032/
- https://www.suse.com/security/cve/CVE-2023-20052/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2023/suse-su-20230470-1/