Fedora 38: clamav 2024-c42cf0e576
Summary
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this
software is the integration with mail servers (attachment scanning). The
package provides a flexible and scalable multi-threaded daemon, a command
line scanner, and a tool for automatic updating via Internet. The programs
are based on a shared library distributed with the Clam AntiVirus package,
which you can use with your own software. The virus database is based on
the virus database from OpenAntiVirus, but contains additional signatures
(including signatures for popular polymorphic viruses, too) and is KEPT UP
TO DATE.
Update Information:
Update to 1.0.5
Change Log
* Thu Feb 8 2024 Orion Poplawski
References
[ 1 ] Bug #2263266 - TRIAGE CVE-2024-20328 clamav: command injection vulnerability in the "VirusEvent" feature of ClamD service [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2263266 [ 2 ] Bug #2263268 - TRIAGE CVE-2024-20290 clamav: heap overflow read bug in the OLE2 file parser may lead to DoS [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2263268
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-c42cf0e576' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html