Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia: 2020-0452 Important Vulnerability Patch in ClamAV Security Update

mageia
Calendar Grey December 6, 2019
Dist Mageia Esm H88
Recent updates for clamav in Mageia address a serious denial-of-service vulnerability along with packaging problems that impact email scanning functionalities.
The updated packages fix two packaging problems and a security vulnerability: A Denial-of-Service (DoS) vulnerability may occur when scanning a specially crafted email file as a r...

Summary

The updated packages fix two packaging problems and a security vulnerability:
A Denial-of-Service (DoS) vulnerability may occur when scanning a specially crafted email file as a result of excessively long scan times. (CVE-2019-15961)
The first packaging issue, in the configuration of clamav-daemon.socket, leads to freshclam and amavis complaining about not being able to access clamd socket.
The second packaging issue, in the names of systemd services, leads to warnigs at the installation/update of clamav and clamd.

References

- https://bugs.mageia.org/show_bug.cgi?id=25754

- https://bugs.mageia.org/show_bug.cgi?id=25096

- https://blog.clamav.net/2019/11/clamav-01021-and-01015-patches-have.html

- https://www.cve.org/CVERecord?id=CVE-2019-15961

Topics%20covered

Topics Covered

security advisory security issue update DoS clamav Mageia

Resolution

SRPMS

- 7/core/clamav-0.101.5-1.1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 06 Dec 2019
URL: https://advisories.mageia.org/MGASA-2019-0361.html
Type: security
CVE: CVE-2019-15961

Topics%20covered

Topics Covered

security advisory security issue update DoS clamav Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here