Ubuntu: USN-4146-1 Moderate: ClamAV Denial Of Service Threat

ubuntu

October 2, 2019

Several security issues were fixed in ClamAV.

Summary

Several security issues were fixed in ClamAV.

Software Description:

- clamav: Anti-virus utility for Unix

Details:

It was discovered that ClamAV incorrectly handled unpacking ZIP files. A

remote attacker could possibly use this issue to cause ClamAV to crash,

resulting in a denial of service. (CVE-2019-12625)

It was discovered that ClamAV incorrectly handled unpacking bzip2 files. A

remote attacker could use this issue to cause ClamAV to crash, resulting in

a denial of service, or possibly execute arbitrary code. (CVE-2019-12900)

Topics Covered

security advisory denial of service remote code execution Ubuntu update instructions security issues clamav

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  clamav                          0.101.4+dfsg-0ubuntu0.19.04.1

Ubuntu 18.04 LTS:
  clamav                          0.101.4+dfsg-0ubuntu0.18.04.1

Ubuntu 16.04 LTS:
  clamav                          0.101.4+dfsg-0ubuntu0.16.04.1

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.