<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="6af26b3536ecca5c9f5abcbd0f7bdccc"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="clamav-5187"
    timestamp="1208342526"
    engine="1.0">
  <yum:name>clamav</yum:name>
  <summary lang="en">clamav: fix for various security vulnerabilities</summary>
  <summary lang="de">clamav: Fix f?r mehrere Sicherheitsverwundbarkeiten</summary>
  <description lang="en">This update of calmav fixes a possible heap-overflow in
function cli_scanpe(). This overflow can be triggered by a
specially crafted Upack executable and could be used to
execute arbitrary code remotely. (CVE-2008-1100) Another
bug that can lead to a denial-of-service situation is
referenced by CVE-2008-1387 and fixed too. Two older bugs
are addressed with this release too, the have CVE-2007-6595
and CVE-2007-6596 assigned.
</description>
  <description lang="de">Mit diesem Update von ClamAV behebt folg. Fehler:
- CVE-2008-1100: heap overflow with Upack executables in
  cli_scanpe()
- CVE-2008-1387: denial-of-service
- CVE-2007-6595: local symlink attack
- CVE-2007-6596: Base64 UUEncoded archives can bypass filter
</description>
  <yum:version ver="5187" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="clamav" epoch="0" ver="0.93" rel="0.1" flags="EQ"/>
    <rpm:entry kind="atom" name="clamav-db" epoch="0" ver="0.93" rel="0.1" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.93" rel="0.1"/>
      <checksum type="sha" pkgid="YES">4bd661ffe64bb36b6d758947a025e29052863808</checksum>
      <time file="1208357092" build="1208342526"/>
      <size package="1296422" installed="2617017" archive="2636668"/>
      <location href="rpm/i586/clamav-0.93-0.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav" epoch="0" ver="0.93" rel="0.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/clamav-0.93-0.1.i586.patch.rpm"/>
          <checksum type="sha">3c7f8bb6d9a8491408b3237254c1505370e7f9e5</checksum>
          <time file="1208367277" build="1208342526"/>
          <size package="1130420" archive="2469352"/>
          <base-version epoch="0" ver="0.88.6" rel="9"/>
          <base-version epoch="0" ver="0.88.7" rel="1.1"/>
          <base-version epoch="0" ver="0.90" rel="0.1"/>
          <base-version epoch="0" ver="0.90.1" rel="1.2"/>
          <base-version epoch="0" ver="0.90.2" rel="0.1"/>
          <base-version epoch="0" ver="0.90.3" rel="2.1"/>
          <base-version epoch="0" ver="0.91" rel="4.1"/>
          <base-version epoch="0" ver="0.91.1" rel="2.1"/>
          <base-version epoch="0" ver="0.91.2" rel="3.1"/>
          <base-version epoch="0" ver="0.92" rel="0.1"/>
          <base-version epoch="0" ver="0.92.1" rel="0.1"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.93" rel="0.1"/>
      <checksum type="sha" pkgid="YES">71fb8970f4de03dbd35c0d778c1b2760a49f57e4</checksum>
      <time file="1208357280" build="1208356434"/>
      <size package="1323407" installed="2758772" archive="2778424"/>
      <location href="rpm/ppc/clamav-0.93-0.1.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav" epoch="0" ver="0.93" rel="0.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/clamav-0.93-0.1.ppc.patch.rpm"/>
          <checksum type="sha">54f1c8c2f94e9662693b7f2ad888a7128986c78f</checksum>
          <time file="1208367296" build="1208356434"/>
          <size package="1156728" archive="2611108"/>
          <base-version epoch="0" ver="0.88.6" rel="9"/>
          <base-version epoch="0" ver="0.88.7" rel="1.1"/>
          <base-version epoch="0" ver="0.90" rel="0.1"/>
          <base-version epoch="0" ver="0.90.1" rel="1.2"/>
          <base-version epoch="0" ver="0.90.2" rel="0.1"/>
          <base-version epoch="0" ver="0.90.3" rel="2.1"/>
          <base-version epoch="0" ver="0.91" rel="4.1"/>
          <base-version epoch="0" ver="0.91.1" rel="2.1"/>
          <base-version epoch="0" ver="0.91.2" rel="3.1"/>
          <base-version epoch="0" ver="0.92" rel="0.1"/>
          <base-version epoch="0" ver="0.92.1" rel="0.1"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.93" rel="0.1"/>
      <checksum type="sha" pkgid="YES">c978301effd585aac17774ab3917a6385d443c3c</checksum>
      <time file="1208357358" build="1208342290"/>
      <size package="1315260" installed="2711573" archive="2731260"/>
      <location href="rpm/x86_64/clamav-0.93-0.1.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav" epoch="0" ver="0.93" rel="0.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/clamav-0.93-0.1.x86_64.patch.rpm"/>
          <checksum type="sha">e6f07e527d025dab3bbfd440bda0397f799b2007</checksum>
          <time file="1208367310" build="1208342290"/>
          <size package="1149129" archive="2563944"/>
          <base-version epoch="0" ver="0.88.6" rel="9"/>
          <base-version epoch="0" ver="0.88.7" rel="1.1"/>
          <base-version epoch="0" ver="0.90" rel="0.1"/>
          <base-version epoch="0" ver="0.90.1" rel="1.2"/>
          <base-version epoch="0" ver="0.90.2" rel="0.1"/>
          <base-version epoch="0" ver="0.90.3" rel="2.1"/>
          <base-version epoch="0" ver="0.91" rel="4.1"/>
          <base-version epoch="0" ver="0.91.1" rel="2.1"/>
          <base-version epoch="0" ver="0.91.2" rel="3.1"/>
          <base-version epoch="0" ver="0.92" rel="0.1"/>
          <base-version epoch="0" ver="0.92.1" rel="0.1"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav-db</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.93" rel="0.1"/>
      <checksum type="sha" pkgid="YES">baf54d7b61ec392d7e1cb11438e52c78480d0ee4</checksum>
      <time file="1208357095" build="1208342526"/>
      <size package="13651771" installed="13574599" archive="13575140"/>
      <location href="rpm/i586/clamav-db-0.93-0.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav-db" epoch="0" ver="0.93" rel="0.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav-db"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/clamav-db-0.93-0.1.i586.patch.rpm"/>
          <checksum type="sha">bfd188355d3b18d3c954043073cc8855eb2ebece</checksum>
          <time file="1208367342" build="1208342526"/>
          <size package="13653151" archive="13575012"/>
          <base-version epoch="0" ver="0.88.6" rel="9"/>
          <base-version epoch="0" ver="0.90.3" rel="2.1"/>
          <base-version epoch="0" ver="0.91" rel="4.1"/>
          <base-version epoch="0" ver="0.91.1" rel="2.1"/>
          <base-version epoch="0" ver="0.91.2" rel="3.1"/>
          <base-version epoch="0" ver="0.92" rel="0.1"/>
          <base-version epoch="0" ver="0.92.1" rel="0.1"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav-db</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.93" rel="0.1"/>
      <checksum type="sha" pkgid="YES">85a242fa46d1d23a1ff4b4b065a45420a18c3e38</checksum>
      <time file="1208357280" build="1208356434"/>
      <size package="13653152" installed="13574599" archive="13575140"/>
      <location href="rpm/ppc/clamav-db-0.93-0.1.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav-db" epoch="0" ver="0.93" rel="0.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav-db"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/clamav-db-0.93-0.1.ppc.patch.rpm"/>
          <checksum type="sha">5c12b63a3b1332cc71bc5fd6dff17f8ecb71acec</checksum>
          <time file="1208367412" build="1208356434"/>
          <size package="13653198" archive="13575012"/>
          <base-version epoch="0" ver="0.88.6" rel="9"/>
          <base-version epoch="0" ver="0.90.3" rel="2.1"/>
          <base-version epoch="0" ver="0.91" rel="4.1"/>
          <base-version epoch="0" ver="0.91.1" rel="2.1"/>
          <base-version epoch="0" ver="0.91.2" rel="3.1"/>
          <base-version epoch="0" ver="0.92" rel="0.1"/>
          <base-version epoch="0" ver="0.92.1" rel="0.1"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav-db</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.93" rel="0.1"/>
      <checksum type="sha" pkgid="YES">73e5d595fe788f0c3748baec8c872fbe172ed014</checksum>
      <time file="1208357359" build="1208342290"/>
      <size package="13652838" installed="13574599" archive="13575140"/>
      <location href="rpm/x86_64/clamav-db-0.93-0.1.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav-db" epoch="0" ver="0.93" rel="0.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav-db"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/clamav-db-0.93-0.1.x86_64.patch.rpm"/>
          <checksum type="sha">c30e93c0a3b976b468447fb6c61b5b3c4bec4cd0</checksum>
          <time file="1208367459" build="1208342290"/>
          <size package="13652817" archive="13575012"/>
          <base-version epoch="0" ver="0.88.6" rel="9"/>
          <base-version epoch="0" ver="0.90.3" rel="2.1"/>
          <base-version epoch="0" ver="0.91" rel="4.1"/>
          <base-version epoch="0" ver="0.91.1" rel="2.1"/>
          <base-version epoch="0" ver="0.91.2" rel="3.1"/>
          <base-version epoch="0" ver="0.92" rel="0.1"/>
          <base-version epoch="0" ver="0.92.1" rel="0.1"/>
        </patchrpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
