Stay Secure with the Latest Linux Advisories

security advisorycriticalubuntu

Ubuntu 12.04 LTS: USN-1482-2 Critical Trojan Detection Flaw

ClamAV could improperly detect malware if it opened a specially crafted file.. =========================================================================Ubuntu Security Notice USN-1482-2 June 20, 2012 clamav regression ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS - Ubuntu 11.10 - Ubuntu 11.04 Summary: ClamAV could improperly detect malware if it opened a specially crafted file. Software Description: - clamav: Anti-virus utility for Unix Details: USN-1482-1 fixed vulnerabilities in ClamAV. The updated packages could fail to install in certain situations. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that ClamAV incorrectly handled certain malformed TAR archives. A remote attacker could create a specially-crafted TAR file containing malware that could escape being detected. (CVE-2012-1457, CVE-2012-1459) It was discovered that ClamAV incorrectly handled certain malformed CHM files. A remote attacker could create a specially-crafted CHM file containing malware that could escape being detected. (CVE-2012-1458) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: clamav 0.97.5+dfsg-1ubuntu0.12.04.2 clamav-daemon 0.97.5+dfsg-1ubuntu0.12.04.2 libclamav6 0.97.5+dfsg-1ubuntu0.12.04.2 Ubuntu 11.10: clamav 0.97.5+dfsg-1ubuntu0.11.10.2 clamav-daemon 0.97.5+dfsg-1ubuntu0.11.10.2 libclamav6 0.97.5+dfsg-1ubuntu0.11.10.2 Ubuntu 11.04: clamav 0.97.5+dfsg-1ubuntu0.11.04.2 clamav-daemon 0.97.5+dfsg-1ubuntu0.11.04.2 libclamav6 0.97.5+dfsg-1ubuntu0.11.04.2 In general, a standard system updatewill make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1482-2 https://ubuntu.com/security/notices/USN-1482-1 https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1015337 Package Information: https://launchpad.net/ubuntu/+source/clamav/0.97.5+dfsg-1ubuntu0.12.04.2 https://launchpad.net/ubuntu/+source/clamav/0.97.5+dfsg-1ubuntu0.11.10.2 https://launchpad.net/ubuntu/+source/clamav/0.97.5+dfsg-1ubuntu0.11.04.2 . ClamAV falsely identified malicious content in specifically designed documents. Ensure your Ubuntu OS is updated to fix the problem.. ClamAV Update, Ubuntu Malware, Security Advisory, Antivirus Update. . Severity: Critical. LinuxSecurity.com Team

Jun 20, 2012 •Critical Ubuntu