-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
Debian Security Advisory DSA-1771-1                  security@debian.org
http://www.debian.org/security/                           Florian Weimer
April 15, 2009                        http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package        : clamav
Vulnerability  : several
Problem type   : local (remote)
Debian-specific: no
CVE Id(s)      : CVE-2008-6680 CVE-2009-1270

Several vulnerabilities have been discovered in the ClamAV anti-virus
toolkit:

CVE-2008-6680

    Attackers can cayse a denial of service (crash) via a crafted EXE
    file that triggers a divide-by-zero error.

CVE-2009-1270 

    Attackers can cause a denial of service (infinite loop) via a
    crafted tar file that causes (1) clamd and (2) clamscan to hang.

(no CVE Id yet)

    Attackers can cause a denial of service (crash) via a crafted EXE
    file that crashes the UPack unpacker.

For the old stable distribution (etch), these problems have been fixed
in version 0.90.1dfsg-4etch19.

For the stable distribution (lenny), these problems have been fixed in
version 0.94.dfsg.2-1lenny2.

For the unstable distribution (sid), these problems have been fixed in
version 0.95.1+dfsg-1.

We recommend that you upgrade your clamav packages.

Upgrade instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 4.0 alias etch
- -------------------------------

Source archives:

      Size/MD5 checksum:      908 920abe65061e5eb169b87e32aa5d3b9b
      Size/MD5 checksum:   213157 382864e028d21fbbfe21d0f5a6fd6401
      Size/MD5 checksum: 11610428 6dc18602b0aa653924d47316f9411e49

Architecture independent packages:

      Size/MD5 checksum:   201602 fd2011fb87ae44533d2eed4879fd2a73
      Size/MD5 checksum:  1006730 bfe5a36e91f2838ad11a80840423b8a3
      Size/MD5 checksum:   158850 b77255272475527f38c39f14b0bbb738

alpha architecture (DEC Alpha)

      Size/MD5 checksum:   862582 b1debf06af645e91da9d2a97ca0fb11e
      Size/MD5 checksum:   599142 4dfe7a77de3a280ed28c1d57ae3b39f9
      Size/MD5 checksum:  9305536 41ec86d8e2fb7874e15d2bdcde940d28
      Size/MD5 checksum:   181130 ae9c2d21b6eefbf08e653d2f44c7cd26
      Size/MD5 checksum:   374142 22a8392cffb3dea2077141fd76aa3f65
      Size/MD5 checksum:   466488 b9897cf698365105e82c929fa1bee6c0
      Size/MD5 checksum:   183018 a27520bc6236ce496439525c3e895283

amd64 architecture (AMD x86_64 (AMD64))

      Size/MD5 checksum:   342926 bb28d32ec499f8eb543a26daef2de33c
      Size/MD5 checksum:   595648 f6e906a7c3944ccb52832e70e5b9f0c6
      Size/MD5 checksum:   858800 ead6acb32a274b5041a49180bfb57a32
      Size/MD5 checksum:  9302006 8ea0743357d1e5db279b2c6c0b2bb2a2
      Size/MD5 checksum:   178258 8ec907c832c53d8524e01ba0b32db1ed
      Size/MD5 checksum:   178796 d785a45f29566abbcd5f8a36601daa7f
      Size/MD5 checksum:   357148 9084eeb829c490008e470e50ea78c364

arm architecture (ARM)

      Size/MD5 checksum:   172122 1b567437e42944a494757fd9b0e63063
      Size/MD5 checksum:   336846 1d16c80c7e72e6b81605b51d128edee8
      Size/MD5 checksum:   176222 26a06f2cb08628829564c625ac7c8e31
      Size/MD5 checksum:   337568 f4271d3ab0d90bd986a929b0aac01cd2
      Size/MD5 checksum:   854158 4cde073f7ef6ccd17b5fd75ffd0be643
      Size/MD5 checksum:   555522 963ad80e0800ab28ca90a8119b127a25
      Size/MD5 checksum:  9299822 bb9b69e0b189203a60ba14e1cc0976a8

hppa architecture (HP PA RISC)

      Size/MD5 checksum:  9303780 f5b25a97769f516ba84a1099a4b2671b
      Size/MD5 checksum:   397742 dbf36d0a55a79609dd3d56c9eff34bfb
      Size/MD5 checksum:   373726 be0facfaa9db5bba2effdf92cd54992f
      Size/MD5 checksum:   178450 8fdc5f50177dc488a9c6e25b0f3414b6
      Size/MD5 checksum:   857096 e80c88f94212786fb029b1cc33b266c6
      Size/MD5 checksum:   573414 a13c69bdd0a04b58d0ac2d9ea4d20769
      Size/MD5 checksum:   178184 4b860c5250d8fa06e7e6b9c505689cf3

i386 architecture (Intel ia32)

      Size/MD5 checksum:   176642 5fd54eb0919ed108b6478420c8cd24b1
      Size/MD5 checksum:   561862 334c0e105c7696e29f5dfd0b8abf70cc
      Size/MD5 checksum:   339446 64297b8fa5be08cb6dcc8f4135eed8d8
      Size/MD5 checksum:   341732 762d721c882cb6835e67eedc2c023055
      Size/MD5 checksum:   173948 b4e1fe0b69025f121162927b76d58e65
      Size/MD5 checksum:  9300428 320bcc713f7a86b254b5246f511acc40
      Size/MD5 checksum:   854722 b20c636fe68490140fbe36953b3936db

ia64 architecture (Intel ia64)

      Size/MD5 checksum:  9316260 17a7bab6c387db39588f3fa814889d6e
      Size/MD5 checksum:   429808 aa2db252027aa9fff4b3075c4d14b980
      Size/MD5 checksum:   612430 ecd72e7079bbe8d467649f37c492049e
      Size/MD5 checksum:   202642 b003cdcd29ceaa6754b9702b9b8caf79
      Size/MD5 checksum:   467608 7523c2f093925d0176300d44c8a15f95
      Size/MD5 checksum:   192862 fb368d5c7b7b19d6486dbd1bb31461fd
      Size/MD5 checksum:   879370 1251357249d13340d08ae2877f6129fb

mips architecture (MIPS (Big Endian))

      Size/MD5 checksum:   600592 c3d6bf8a046126cad9c63b2f058c57ba
      Size/MD5 checksum:   180756 557923fc1d869c9217f5d14af90f6f38
      Size/MD5 checksum:   176646 732857bd9bcb6d4bffde9948668421c7
      Size/MD5 checksum:   399314 d47291c6c23b7584a2bdb97b2d6a41b1
      Size/MD5 checksum:   344542 1128aa648c30e1eab41d57d4d32b3800
      Size/MD5 checksum:   855640 2ba40226c37d7a5c3889b9c0f7a0eff9
      Size/MD5 checksum:  9302154 efba2e96c101d1b1f905550803d9ac55

powerpc architecture (PowerPC)

      Size/MD5 checksum:   593048 82340c5af4faad441202e62a6ab956be
      Size/MD5 checksum:   351958 fed2a9ad34ed5c4902b1912be11602d9
      Size/MD5 checksum:   182688 9911c73215ff0db3893bae0c0b5f833c
      Size/MD5 checksum:   374074 f51ae968bd0730e0c56ef85c207931c8
      Size/MD5 checksum:  9303320 eb1f3ae8f70bc11cac42b4fe236600d8
      Size/MD5 checksum:   177334 1f2d181c20666deb1b4dfb96902d80a0
      Size/MD5 checksum:   858156 42dee07712b7c3195488557d1e0ffdfa

s390 architecture (IBM S/390)

      Size/MD5 checksum:   583064 83123bb5fa111320f4d405d75ead29c0
      Size/MD5 checksum:   177240 74465de68d2495bf01ab3e10de319e3e
      Size/MD5 checksum:  9301976 ca765cab9f6742c9c9dd3820d4c478f4
      Size/MD5 checksum:   178104 1f557d15acae317317c054d96898130b
      Size/MD5 checksum:   371368 c36d4163563d56f49d6c328d137575df
      Size/MD5 checksum:   362752 8a1f867ff2b3b0f3d7a1035e761b42eb
      Size/MD5 checksum:   856148 e0e5a5f48b611f0dce0bef7e7b1d7ef0

sparc architecture (Sun SPARC/UltraSPARC)

      Size/MD5 checksum:   173066 b71140eef25a3728a76682567700814f
      Size/MD5 checksum:   175024 9968ce356ccff15c97378dc924537b66
      Size/MD5 checksum:   852302 fb94aa1fa27eedb5348a31ff61184821
      Size/MD5 checksum:  9299596 ce332c7adffbfd9e2f7a66cdd1f79193
      Size/MD5 checksum:   351070 ddedf6b2ca04a24acbf9087ca778d7b5
      Size/MD5 checksum:   359508 a06ab52b66fe48a1e0aa29a9d38e7e59
      Size/MD5 checksum:   542492 7bfc22c7750c17a1c4a84d5e53960648

Debian GNU/Linux 5.0 alias lenny
- --------------------------------

Source archives:

      Size/MD5 checksum:   159237 d31334a956f54c30cb95c99273c6de7e
      Size/MD5 checksum:     1411 5217b56ac23f06ca65ef3ea5aeb24841
      Size/MD5 checksum: 22073819 7b45b0c54b887b23cb49e4bff807cf58

Architecture independent packages:

      Size/MD5 checksum:  1079046 649f899e8d50b7c00a5d463038a158b7
      Size/MD5 checksum:   207358 4cfa028b1b7f9408e300a22ec807c6e7
      Size/MD5 checksum: 19495586 0fffde16847013d6adce47a0457f455f

alpha architecture (DEC Alpha)

      Size/MD5 checksum:   576360 c7df97ff8f9065bc9e79a0c9c38e661a
      Size/MD5 checksum:   853782 7cf20ab488ba6b71c949fa4ee35a4ca6
      Size/MD5 checksum:   712856 7ddd7fc2c020f5345cedc1e6dd1ae803
      Size/MD5 checksum:   259866 1fc16d2c3c0567b1d4c91fde0f18e397
      Size/MD5 checksum:   242928 52e3262844d22ed56b68b152a74f1b2e
      Size/MD5 checksum:   242982 ea1faf9d5400447b90ca4451282d03d0
      Size/MD5 checksum:   234274 7b7cd6007282d487609ebce7fe70e58e

amd64 architecture (AMD x86_64 (AMD64))

      Size/MD5 checksum:   237738 8d44aa0a9a253c0be06b404853e777cd
      Size/MD5 checksum:   231494 b975f22836d8de10d74f304ae6c614a4
      Size/MD5 checksum:   252658 51e70fea9d6da3ef8ff426ea74597604
      Size/MD5 checksum:   537718 e2d98d5abaa6dc69c7f04a2fba6b85aa
      Size/MD5 checksum:   571656 9c2734c96a92f5aad81d1ed74c0b41a9
      Size/MD5 checksum:   234846 c4e05de999689f8ee619bf64e6e8802b
      Size/MD5 checksum:   865116 4b8762dca5e0ef54edc4edf1b09c6c5e

arm architecture (ARM)

      Size/MD5 checksum:   227536 780ea7206319e339dc742bcd31128d99
      Size/MD5 checksum:   527480 c7d0a3512270994f69203ebed5c41fbe
      Size/MD5 checksum:   228308 7d70a74cfed01823df5ee6c8d0f29812
      Size/MD5 checksum:   230528 7de5458274466d4396255b885ef19131
      Size/MD5 checksum:   545518 9077e50075716ff1cbfb2e434803a9ee
      Size/MD5 checksum:   249672 85213892ec62e5252d64397bf3ffdaf4
      Size/MD5 checksum:   808454 63f2f5e8ed963ae247fd311ca3614844

armel architecture (ARM EABI)

      Size/MD5 checksum:   231764 67459130cb3230b9fdc55fdd17fd9008
      Size/MD5 checksum:   250792 d29716f364f9d06844adc05061399d8c
      Size/MD5 checksum:   229362 10ce1dc7d2cceae498425ab5454fa08d
      Size/MD5 checksum:   227780 b65f57d07f234866f99b7a35d9fa14bf
      Size/MD5 checksum:   523638 f6c803d4a720b2578cb9ae45f57a72c3
      Size/MD5 checksum:   809470 4f835b35ca0d31774096a507caf3d74c
      Size/MD5 checksum:   541598 9c9cb55a751c2fe1633e662c77c76416

hppa architecture (HP PA RISC)

      Size/MD5 checksum:   234288 f670f21552a05510a4082fbbdcb4554e
      Size/MD5 checksum:   837130 02ca28e7f21fd42f3fe3e19b3cde94e4
      Size/MD5 checksum:   230430 0dfb1c84d95cf67f6c09eb51fe9f4706
      Size/MD5 checksum:   235124 bf58016f9deee035ff316e9ab9cfc729
      Size/MD5 checksum:   630720 71a80090c2e76456287208b7922a5724
      Size/MD5 checksum:   253496 5341978d7648df2125ea55fe2bf94654
      Size/MD5 checksum:   577602 884f5d86e91905c2a554c45697aa59eb

i386 architecture (Intel ia32)

      Size/MD5 checksum:   229082 9a04361a3f1316e93a3a04d0cbbda4bb
      Size/MD5 checksum:   538154 43d1d7d2e1cd3bb69fabc47c41fe2df8
      Size/MD5 checksum:   803276 f42e71e26b941a351f1fdf2d68958260
      Size/MD5 checksum:   249544 7652814b0a7854b02a4d0d3addfc2a93
      Size/MD5 checksum:   231182 7ab835884a9fcfabe0f01aee2e14e379
      Size/MD5 checksum:   228108 d55948ee6a8a2f6b6bb19d13d8e843d6
      Size/MD5 checksum:   522512 61c33e831c645841ef2d52f734d0ae11

ia64 architecture (Intel ia64)

      Size/MD5 checksum:   247926 515c666261a0ee52a442e6eac64408d2
      Size/MD5 checksum:   765058 a78e331f50a2b7b4299713aba2ae0e27
      Size/MD5 checksum:   260548 acec1b980c22ac5a972726f021e8c4c2
      Size/MD5 checksum:   271924 133cfbfc7f0974272f02404abc83b1bf
      Size/MD5 checksum:   255464 b021c0fdedd146139ffc8a58476b0f21
      Size/MD5 checksum:   847148 d8435d8027b798ef890fb2eae24e791b
      Size/MD5 checksum:   691940 5a8b0d6c90a4320f00d20ec3ff1866d0

mips architecture (MIPS (Big Endian))

      Size/MD5 checksum:   255122 592d776e50ef9e4adb0ce88b8440ac63
      Size/MD5 checksum:   228552 63a8c69c5cc866bec1d54558ad8c19cf
      Size/MD5 checksum:   531374 5a5536fe367ac886188d0ccf6d935882
      Size/MD5 checksum:   617292 6e14dd38ff9c96fe83aabdd614cf82cf
      Size/MD5 checksum:   234428 b23ad97e72a78e94e819605a2da5ef72
      Size/MD5 checksum:   234970 675a6632d06803bf2e473f4c35b8d168
      Size/MD5 checksum:   877764 27fcc6c8e8e089be742c58d98d5e01a0

powerpc architecture (PowerPC)

      Size/MD5 checksum:   241562 5708c837ae624ab633b512644aca93d4
      Size/MD5 checksum:   610460 2c76943c0313520d7de8cb348a8bea1f
      Size/MD5 checksum:   554774 4ceced8c364138a3d79923779e688810
      Size/MD5 checksum:   233794 6033d27dab5066b9100aecb4720844e5
      Size/MD5 checksum:   257624 1131f14d2b9500f0542009af7fc2a4de
      Size/MD5 checksum:   243238 8fff2b538f2e47ace919dae22b42cc67
      Size/MD5 checksum:   858408 bbd3373cdd0928648d65850270f4b665

s390 architecture (IBM S/390)

      Size/MD5 checksum:   236928 d2d808898e8cc9d74ba79f63a8da15b5
      Size/MD5 checksum:   897072 8c7292c49fe784937a19d9422ed29b67
      Size/MD5 checksum:   254970 8625ad9784bab0957def32cd496166dc
      Size/MD5 checksum:   561902 c7c106813a88a978ec35a1d1279470c8
      Size/MD5 checksum:   598382 37619597972870f648339b38689a8cd8
      Size/MD5 checksum:   237070 4d5ad2e1183a15ee75fd3e2768d733ed
      Size/MD5 checksum:   231904 6d61013d6ede1e52358808fa62fefeee

sparc architecture (Sun SPARC/UltraSPARC)

      Size/MD5 checksum:   538726 ca3ceb86fd6cbea676ac6f5f1acfe0c9
      Size/MD5 checksum:   782446 a18f3577112ce034457fc1bc4d6e04b8
      Size/MD5 checksum:   228526 f910eedba8a813482c0747a9c3671990
      Size/MD5 checksum:   231456 146071b4d44a0f8bc6a5fe2e455b69ea
      Size/MD5 checksum:   231388 e1bda3243860a93333dac1c82c6a7648
      Size/MD5 checksum:   250456 908d74485b6d01dd6ea8b3526fe9776a
      Size/MD5 checksum:   571188 2f0a3cc4e80bcb86f8e6959035de119a


  These files will probably be moved into the stable distribution on
  its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp:  dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show ' and http://packages.debian.org/