[Kolab-devel] Kolab Security Issue 21 20080618 (clamav)

Thomas Arendsen Hein thomas at intevation.de
Wed Jun 18 18:09:53 CEST 2008

Kolab Security Issue 21 20080618

Package:              Kolab Server, ClamAV
Vulnerability:        denial of service
Kolab Specific:       no
Dependent Packages:   none


Damian Put reported a problem in ClamAV's code to decompress executables
created by the Petite packer, which causes invalid memory access.

Affected Versions

This affects versions of ClamAV up to version 0.93
Kolab Server 2.1.0 and previous releases of the 2.1 branch are affected.
Kolab Server 2.0.4 and previous releases of the 2.0 branch are affected.
Kolab Server 2.2-rc3 and previous prereleases are affected.


Upgrade to ClamAV 0.93.1.

The ClamAV source RPM patched to be compilable with Kolab Server 2.1 and 2.0
is available from the Kolab download mirrors as:

For Kolab Server 2.2 release candidates the unmodified OpenPKG rpm can be used:

A binary RPM for Kolab Server 2.1.0 (ix86 Debian GNU/Linux Sarge) is available:

A binary RPM for Kolab Server 2.2 release candidates (ix86 Debian GNU/Linux
Etch) is available from:

All other server versions: Please build from the src.rpm.

The mirrors are listed on http://kolab.org/mirrors.html
While the mirrors are catching up, you can also get the package via rsync:
# rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080618/clamav-0.93.1-20080610_kolab.src.rpm .
# rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080618/clamav-0.93.1-20080610_kolab.ix86-debian3.1-kolab.rpm .
# rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080618/clamav-0.93.1-20080610.src.rpm .
# rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080618/clamav-0.93.1-20080610.ix86-debian4.0-kolab.rpm .

MD5 sums:
15a088fcdcd8af3513c38afe69a69d2b  clamav-0.93.1-20080610.ix86-debian4.0-kolab.rpm
57d5566041ee8f771673be894de8c00f  clamav-0.93.1-20080610.src.rpm
9c7d90027b3c4a923be2269f7a91fd3e  clamav-0.93.1-20080610_kolab.ix86-debian3.1-kolab.rpm
7d7e51d550282eff0eeb9c0eb34bb446  clamav-0.93.1-20080610_kolab.src.rpm

The package can be installed on your Kolab Server with

# /kolab/bin/openpkg rpm --rebuild clamav-0.93.1-20080610_kolab.src.rpm
# /kolab/bin/openpkg rpm \
  -Uvh /kolab/RPM/PKG/clamav-0.93.1-20080610_kolab.<ARCH>-<OS>-kolab.rpm
# rm /kolab/etc/clamav/*.rpmsave
# /kolab/bin/openpkg rc clamav stop
# /kolab/bin/openpkg rc clamav start
# su - kolab-r
$ freshclam
$ rm -r /kolab/share/clamav/*.inc

For Kolab Server 2.0.4 you have to copy the new /kolab/etc/clamav/clamd.conf
to /kolab/etc/kolab/templates/clamd.conf.template so it will not be
overwritten by kolabconf. Do NOT copy this file with Kolab Server 2.1 or 2.2!


	ClamAV 0.93.1 release notes

	Entry in the ClamAV bug database

	News about DoS vulnerability on Heise security

    20080609 ClamAV release 0.93.1.
    20080610 OpenPKG 0.93.1 package release.
    20080618 News on Heise security.
    20080618 Kolab Server security advisory published.

thomas at intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A
Intevation GmbH, Osnabrueck - Register: Amtsgericht Osnabrueck, HR B 18998
Geschaeftsfuehrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.kolab.org/pipermail/devel/attachments/20080618/e04c0967/attachment.sig>

More information about the devel mailing list