[Technik] [SECURITY] [DSA 1232-1] New clamav packages fix denial of service

[Dirk F. Raetzel]

Hallo,

Noèl Köthe wrote:
> clamav auf h01, h02, h03 und h04 aktualisiert.

seit diesem Update scannt clamav Mails nicht mehr korrekt. Ist die zu
scannende direkt der Virus, wird er erkannt. Ist der Virus in einer
Mail, wird er nicht erkannt. Vor dem Update wurden Virenmails korrekt
erkannt.

Beispiel:

dfr00 at h01:~$ wget --quiet dfr00.hostsharing.net/eicar.com
dfr00 at h01:~$ clamscan eicar.com
LibClamAV Warning: ********************************************************
LibClamAV Warning: ***  This version of the ClamAV engine is outdated.  ***
LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/faq.html ***
LibClamAV Warning: ********************************************************
LibClamAV Warning: ********************************************************
LibClamAV Warning: ***  This version of the ClamAV engine is outdated.  ***
LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/faq.html ***
LibClamAV Warning: ********************************************************
eicar.com: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Known viruses: 83197
Engine version: 0.84
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.00 MB
Time: 2.915 sec (0 m 2 s)

dfr00 at h01:~$ wget --quiet dfr00.hostsharing.net/eicar.mail
dfr00 at h01:~$ clamscan eicar.mail
LibClamAV Warning: ********************************************************
LibClamAV Warning: ***  This version of the ClamAV engine is outdated.  ***
LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/faq.html ***
LibClamAV Warning: ********************************************************
LibClamAV Warning: ********************************************************
LibClamAV Warning: ***  This version of the ClamAV engine is outdated.  ***
LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/faq.html ***
LibClamAV Warning: ********************************************************
eicar.mail: OK

----------- SCAN SUMMARY -----------
Known viruses: 83197
Engine version: 0.84
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.00 MB
Time: 2.087 sec (0 m 2 s)


Gruss

Dirk