PT-2022-37576 · Clamav+1 · Clamav+1

Published 2022-08-29 · Updated 2022-08-29

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ClamAV version 0.103.7

Description The issue concerns a critical patch release for ClamAV, which includes fixes such as upgrading the UnRAR library to version 6.1.7, fixing the logical signature "Intermediates" feature, and relaxing constraints on slightly malformed zip archives.

Recommendations For ClamAV version 0.103.7, upgrade the vendored UnRAR library to version 6.1.7 and apply the provided fixes to address the issue.

Related Identifiers

MGASA-2022-0312

Affected Products

Clamav

Unrar

References · 4

• https://advisories.mageia.org/MGASA-2022-0312.html · Security Note
• https://osv.dev/vulnerability/MGASA-2022-0312 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=30718 · Note
• https://blog.clamav.net/2022/07/clamav-01037-01041-and-01051-patch.html · Note