Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

SUSE: 2020:3918-1 Important: ClamAV Critical Fixes and Issues

suse
Calendar Grey December 22, 2020
Scroller Suse
SUSE has released a crucial security patch that resolves significant vulnerabilities in clamav, introducing improved functionalities alongside essential fixes.
An update that solves 7 vulnerabilities, contains one feature and has one errata is now available

Summary

This update for clamav fixes the following issues: clamav was updated to 0.103.0 to implement jsc#ECO-3010 and bsc#1118459. * clamd can now reload the signature database without blocking scanning. This multi-threaded database reload improvement was made possible thanks to a community effort. - Non-blocking database reloads are now the default behavior. Some systems that are more constrained on RAM may need to disable non-blocking reloads as it will temporarily consume two times as much memory. We added a new clamd config option ConcurrentDatabaseReload, which may be set to no. * Fix clamav-milter.service (requires clamd.service to run) * bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode. * Partial sync with SLE15. Update to version 0.102.4 Accumulated security fixes:

Topics%20covered

Topics Covered

security advisory denial of service update important suse clamav

References

#1118459 #1119353 #1144504 #1149458 #1157763

#1171981 #1174250 #1174255 ECO-3010

Cross- CVE-2019-12900 CVE-2019-15961 CVE-2020-3123

CVE-2020-3327 CVE-2020-3341 CVE-2020-3350

CVE-2020-3481

Affected Products:

SUSE OpenStack Cloud Crowbar 9

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud 8

SUSE OpenStack Cloud 7

SUSE Linux Enterprise Server for SAP 12-SP4

SUSE Linux Enterprise Server for SAP 12-SP3

SUSE Linux Enterprise Server for SAP 12-SP2

SUSE Linux Enterprise Server 12-SP4-LTSS

SUSE Linux Enterprise Server 12-SP3-LTSS

SUSE Linux Enterprise Server 12-SP3-BCL

SUSE Linux Enterprise Server 12-SP2-LTSS

SUSE Linux Enterprise Server 12-SP2-BCL

...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:3918-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service update important suse clamav

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.