{"id":"CLSA-2024-1725385588","summary":"clamav: Fix of 2 CVEs","details":"- Update to 0.103.11\n- CVE-2023-20032: fix missing buffer size check that may result\n  in a heap buffer overflow write\n- Don't apply clamav-check.patch and CVE-2022-20698.patch as they have already\n  been applied in new 0.103.11 version\n- Don't apply clamav-clamonacc-service.patch since el6 doesn't have systemd\n  and service file is useless","modified":"2026-05-27T11:35:23.572754623Z","published":"2024-09-03T17:50:17Z","upstream":["CVE-2022-20698","CVE-2023-20032"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/els6/CLSA-2024-1725385588.html"}],"affected":[{"package":{"name":"clamav","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/clamav?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2024-1725385588.json"}},{"package":{"name":"clamav-data","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/clamav-data?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2024-1725385588.json"}},{"package":{"name":"clamav-devel","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/clamav-devel?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2024-1725385588.json"}},{"package":{"name":"clamav-filesystem","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/clamav-filesystem?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2024-1725385588.json"}},{"package":{"name":"clamav-lib","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/clamav-lib?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2024-1725385588.json"}},{"package":{"name":"clamav-milter","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/clamav-milter?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2024-1725385588.json"}},{"package":{"name":"clamav-update","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/clamav-update?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2024-1725385588.json"}},{"package":{"name":"clamd","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/clamd?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2024-1725385588.json"}}],"schema_version":"1.7.5"}