FEDORA-2024-0d7eb64d90 — security update for clamav

stable

clamav-1.0.7-1.fc41

FEDORA-2024-0d7eb64d90 created by orion 10 months ago for Fedora 41

Update to 1.0.7

CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems so as to prevent an attacker with existing access to the 'clamd' or 'freshclam' services from using a symlink to corrupt system files.
CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF file parser that could cause a denial-of-service (DoS) condition.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2024-0d7eb64d90

This update has been submitted for testing by orion.

10 months ago

This update's test gating status has been changed to 'ignored'.

10 months ago

orion edited this update.

10 months ago

This update has been pushed to testing.

10 months ago

This update has been submitted for stable by bodhi.

There is an ongoing freeze; this will be pushed to stable after the freeze is over.

10 months ago

This update has been pushed to stable.

10 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

3 days

Dates

submitted

10 months ago

in testing

10 months ago

in stable

10 months ago

modified

10 months ago

approved

10 months ago

Builds

clamav-1.0.7-1.fc41

BZ#2300593 clamav: FTBFS in Fedora rawhide/f41

clamav-1.0.7-1.fc41

Automated Test Results

ignored

Test Cases


0	0	Test Case ClamAV