{"id":"SUSE-SU-2022:3249-1","aliases":[],"status":"published","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\nclamav was updated to 0.103.7 (bsc#1202986)\n\n* Upgrade the vendored UnRAR library to version 6.1.7.\n* Fix logical signature 'Intermediates' feature.\n* Relax constraints on slightly malformed zip archives that\n  contain overlapping file entries.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-09-12T07:05:39Z","modified":"2022-09-12T07:05:39Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"clamav","fixed_in":["0.103.7-150000.3.41.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.7-150000.3.41.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223249-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1202986","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2022:3249-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\nclamav was updated to 0.103.7 (bsc#1202986)\n\n* Upgrade the vendored UnRAR library to version 6.1.7.\n* Fix logical signature 'Intermediates' feature.\n* Relax constraints on slightly malformed zip archives that\n  contain overlapping file entries.\n","status":"published","published":"2022-09-12T07:05:39Z","modified":"2022-09-12T07:05:39Z","updated_at":"2026-11-02T15:53:50.965375Z"}]}}