CVE-2015-1463

These are all security issues fixed in the clamav-0.99.2-4.1 package on the GA media of openSUSE Tumbleweed.

clamav was updated to version 0.98.6 to fix four security issues.

These security issues were fixed:

• CVE-2015-1462: ClamAV allowed remote attackers to have unspecified impact via a crafted upx packer file, related to a heap out of bounds condition (bnc#916214).
• CVE-2015-1463: ClamAV allowed remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an incorrect compiler optimization (bnc#916215).
• CVE-2014-9328: ClamAV allowed remote attackers to have unspecified impact via a crafted upack packer file, related to a heap out of bounds condition (bnc#915512).
• CVE-2015-1461: ClamAV allowed remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a heap out of bounds condition (bnc#916217).

The antivirus scanner ClamAV has been updated to version 0.98.3, which includes the following fixes and enhancements:

* Support for common raw disk image formats using 512 byte sectors,
  specifically GPT, APM, and MBR partitioning.
* All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
  clamdtop) now support IPV6 addresses and configuration parameters.
* Use OpenSSL file hash functions for improved performance.
* Improved detection of malware scripts within image files.
* Miscellaneous bug fixes and documentation improvements.

The antivirus scanner ClamAV has been updated to version 0.98.3, which includes the following fixes and enhancements:

* Support for common raw disk image formats using 512 byte sectors,
  specifically GPT, APM, and MBR partitioning.
* All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
  clamdtop) now support IPV6 addresses and configuration parameters.
* Use OpenSSL file hash functions for improved performance.
* Improved detection of malware scripts within image files.
* Miscellaneous bug fixes and documentation improvements.

ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an "incorrect compiler optimization."