Security update for clamav SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:0470-1 Final 1 1 2023-02-21T09:06:01Z current 2023-02-21T09:06:01Z 2023-02-21T09:06:01Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for clamav This update for clamav fixes the following issues: - CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser (bsc#1208363). - CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser (bsc#1208365). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2023-470,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2023-470,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2023-470,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2023-470,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2023-470,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2023-470,Image SLES15-SP4-SAP-Azure-LI-BYOS-2023-470,Image SLES15-SP4-SAP-Azure-LI-BYOS-Production-2023-470,Image SLES15-SP4-SAP-Azure-VLI-BYOS-2023-470,Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production-2023-470,SUSE-2023-470,SUSE-SLE-Module-Basesystem-15-SP4-2023-470,SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-470,SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-470,SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-470,SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-470,SUSE-SLE-Product-RT-15-SP3-2023-470,SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-470,SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-470,SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-470,SUSE-SLE-Product-SLES_SAP-15-SP1-2023-470,SUSE-SLE-Product-SLES_SAP-15-SP2-2023-470,SUSE-SLE-Product-SLES_SAP-15-SP3-2023-470,SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-470,SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-470,SUSE-Storage-7-2023-470,SUSE-Storage-7.1-2023-470,openSUSE-SLE-15.4-2023-470 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20230470-1/ Link for SUSE-SU-2023:0470-1 https://lists.suse.com/pipermail/sle-security-updates/2023-February/013849.html E-Mail link for SUSE-SU-2023:0470-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1208363 SUSE Bug 1208363 https://bugzilla.suse.com/1208365 SUSE Bug 1208365 https://www.suse.com/security/cve/CVE-2023-20032/ SUSE CVE CVE-2023-20032 page https://www.suse.com/security/cve/CVE-2023-20052/ SUSE CVE CVE-2023-20052 page Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.4 clamav-0.103.8-150000.3.44.1 libclamav9-0.103.8-150000.3.44.1 libfreshclam2-0.103.8-150000.3.44.1 clamav-devel-0.103.8-150000.3.44.1 clamav-0.103.8-150000.3.44.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production libclamav9-0.103.8-150000.3.44.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production libfreshclam2-0.103.8-150000.3.44.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production clamav-0.103.8-150000.3.44.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production libclamav9-0.103.8-150000.3.44.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production libfreshclam2-0.103.8-150000.3.44.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production clamav-0.103.8-150000.3.44.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libclamav9-0.103.8-150000.3.44.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libfreshclam2-0.103.8-150000.3.44.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production clamav-0.103.8-150000.3.44.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libclamav9-0.103.8-150000.3.44.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libfreshclam2-0.103.8-150000.3.44.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production clamav-0.103.8-150000.3.44.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libclamav9-0.103.8-150000.3.44.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libfreshclam2-0.103.8-150000.3.44.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production clamav-0.103.8-150000.3.44.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libclamav9-0.103.8-150000.3.44.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libfreshclam2-0.103.8-150000.3.44.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production clamav-0.103.8-150000.3.44.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS libclamav9-0.103.8-150000.3.44.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS libfreshclam2-0.103.8-150000.3.44.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS clamav-0.103.8-150000.3.44.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production libclamav9-0.103.8-150000.3.44.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production libfreshclam2-0.103.8-150000.3.44.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production clamav-0.103.8-150000.3.44.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS libclamav9-0.103.8-150000.3.44.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS libfreshclam2-0.103.8-150000.3.44.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS clamav-0.103.8-150000.3.44.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production libclamav9-0.103.8-150000.3.44.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production libfreshclam2-0.103.8-150000.3.44.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production clamav-0.103.8-150000.3.44.1 as a component of SUSE Enterprise Storage 7 clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Enterprise Storage 7 libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Enterprise Storage 7 libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Enterprise Storage 7 clamav-0.103.8-150000.3.44.1 as a component of SUSE Enterprise Storage 7.1 clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Enterprise Storage 7.1 libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Enterprise Storage 7.1 libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Enterprise Storage 7.1 clamav-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS clamav-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS clamav-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS clamav-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS clamav-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 clamav-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 clamav-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS clamav-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS clamav-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS clamav-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 clamav-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 clamav-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 clamav-0.103.8-150000.3.44.1 as a component of SUSE Manager Proxy 4.2 clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Manager Proxy 4.2 libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Manager Proxy 4.2 libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Manager Proxy 4.2 clamav-0.103.8-150000.3.44.1 as a component of SUSE Manager Server 4.2 clamav-devel-0.103.8-150000.3.44.1 as a component of SUSE Manager Server 4.2 libclamav9-0.103.8-150000.3.44.1 as a component of SUSE Manager Server 4.2 libfreshclam2-0.103.8-150000.3.44.1 as a component of SUSE Manager Server 4.2 clamav-0.103.8-150000.3.44.1 as a component of openSUSE Leap 15.4 clamav-devel-0.103.8-150000.3.44.1 as a component of openSUSE Leap 15.4 libclamav9-0.103.8-150000.3.44.1 as a component of openSUSE Leap 15.4 libfreshclam2-0.103.8-150000.3.44.1 as a component of openSUSE Leap 15.4 On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to execute arbitrary code. This vulnerability is due to a missing buffer size check that may result in a heap buffer overflow write. An attacker could exploit this vulnerability by submitting a crafted HFS+ partition file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the ClamAV scanning process, or else crash the process, resulting in a denial of service (DoS) condition. For a description of this vulnerability, see the ClamAV blog ["https://blog.clamav.net/"]. CVE-2023-20032 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:clamav-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:clamav-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7.1:clamav-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7.1:clamav-devel-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7.1:libclamav9-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7.1:libfreshclam2-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7:clamav-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7:clamav-devel-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7:libclamav9-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Real Time 15 SP3:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Real Time 15 SP3:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Real Time 15 SP3:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Real Time 15 SP3:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP1-LTSS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP1-LTSS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP2-LTSS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP2-LTSS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP3-LTSS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP3-LTSS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP3-LTSS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP3-LTSS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfreshclam2-0.103.8-150000.3.44.1 SUSE Manager Proxy 4.2:clamav-0.103.8-150000.3.44.1 SUSE Manager Proxy 4.2:clamav-devel-0.103.8-150000.3.44.1 SUSE Manager Proxy 4.2:libclamav9-0.103.8-150000.3.44.1 SUSE Manager Proxy 4.2:libfreshclam2-0.103.8-150000.3.44.1 SUSE Manager Server 4.2:clamav-0.103.8-150000.3.44.1 SUSE Manager Server 4.2:clamav-devel-0.103.8-150000.3.44.1 SUSE Manager Server 4.2:libclamav9-0.103.8-150000.3.44.1 SUSE Manager Server 4.2:libfreshclam2-0.103.8-150000.3.44.1 openSUSE Leap 15.4:clamav-0.103.8-150000.3.44.1 openSUSE Leap 15.4:clamav-devel-0.103.8-150000.3.44.1 openSUSE Leap 15.4:libclamav9-0.103.8-150000.3.44.1 openSUSE Leap 15.4:libfreshclam2-0.103.8-150000.3.44.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230470-1/ https://www.suse.com/security/cve/CVE-2023-20032.html CVE-2023-20032 https://bugzilla.suse.com/1208363 SUSE Bug 1208363 https://bugzilla.suse.com/1211720 SUSE Bug 1211720 On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes from any file that may be read by the ClamAV scanning process. CVE-2023-20052 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:clamav-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:clamav-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libfreshclam2-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:clamav-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libclamav9-0.103.8-150000.3.44.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7.1:clamav-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7.1:clamav-devel-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7.1:libclamav9-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7.1:libfreshclam2-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7:clamav-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7:clamav-devel-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7:libclamav9-0.103.8-150000.3.44.1 SUSE Enterprise Storage 7:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Real Time 15 SP3:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Real Time 15 SP3:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Real Time 15 SP3:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Real Time 15 SP3:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP1-LTSS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP1-LTSS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP2-LTSS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP2-LTSS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP3-LTSS:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP3-LTSS:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP3-LTSS:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server 15 SP3-LTSS:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libfreshclam2-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:clamav-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:clamav-devel-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libclamav9-0.103.8-150000.3.44.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfreshclam2-0.103.8-150000.3.44.1 SUSE Manager Proxy 4.2:clamav-0.103.8-150000.3.44.1 SUSE Manager Proxy 4.2:clamav-devel-0.103.8-150000.3.44.1 SUSE Manager Proxy 4.2:libclamav9-0.103.8-150000.3.44.1 SUSE Manager Proxy 4.2:libfreshclam2-0.103.8-150000.3.44.1 SUSE Manager Server 4.2:clamav-0.103.8-150000.3.44.1 SUSE Manager Server 4.2:clamav-devel-0.103.8-150000.3.44.1 SUSE Manager Server 4.2:libclamav9-0.103.8-150000.3.44.1 SUSE Manager Server 4.2:libfreshclam2-0.103.8-150000.3.44.1 openSUSE Leap 15.4:clamav-0.103.8-150000.3.44.1 openSUSE Leap 15.4:clamav-devel-0.103.8-150000.3.44.1 openSUSE Leap 15.4:libclamav9-0.103.8-150000.3.44.1 openSUSE Leap 15.4:libfreshclam2-0.103.8-150000.3.44.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230470-1/ https://www.suse.com/security/cve/CVE-2023-20052.html CVE-2023-20052 https://bugzilla.suse.com/1208365 SUSE Bug 1208365