<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="1dc4f0f1094b8419226f489d118a9939"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="clamav-2180"
    timestamp="1161110740"
    engine="1.0">
  <yum:name>clamav</yum:name>
  <summary lang="en">clamav: Security upgrade to version 0.88.5</summary>
  <summary lang="de">clamav: Security Upgrade auf Version 0.88.5</summary>
  <description lang="en">Two security problems have been found and fixed in the
antivirus scan engine &quot;clamav&quot;, which could be used by
remote attackers sending prepared E-Mails containing
special crafted infected files to potentially execute code.

CVE-2006-4182: A problem in dealing with PE (Portable
Executables aka Windows .EXE) files could result in an
integer overflow, causing a heap overflow, which could be
used by attackers to potentially execute code.

CVE-2006-5295: A problem in dealing with CHM (compressed
helpfile) exists that could cause an invalid memory read,
causing the clamav engine to crash.
</description>
  <description lang="de">Zwei Sicherheitsprobleme wurden in der Antivirus Scan
Engine &quot;clamav&quot; gefunden und behoben, die von entfernten
Angreifern zum Ausführen von Code oder zum Abstürzenlassen
des clamav Prozesses benutzt werden können.

CVE-2006-4182: Ein Problem in der Behandlung von PE
(Portable Executable aka Windows .EXE) Dateien konnte zu
einem Integer Überlauf führen, der wiederum zu einem Heap
Überlauf führt, der potentiell zum Code ausführen benutzt
werden kann.

CVE-2006-5295: Ein Problem in der Behandlung von CHM
(komprimierten Hilfe) Dateien existiert, womit der Scanner
zum Absturz gebracht werden kann.
</description>
  <yum:version ver="2180" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="clamav" epoch="0" ver="0.88.5" rel="0.2" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.88.5" rel="0.2"/>
      <checksum type="sha" pkgid="YES">be510c69da5398e66604ebfb55f52aeeb546c687</checksum>
      <time file="1161165488" build="1161110740"/>
      <size package="1034518" installed="2159291" archive="2194256"/>
      <location href="rpm/i586/clamav-0.88.5-0.2.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav" epoch="0" ver="0.88.5" rel="0.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/clamav-0.88.5-0.2.i586.patch.rpm"/>
          <checksum type="sha">b23d7fe55d637a8d1bf0ad278165675e21a23008</checksum>
          <time file="1161167656" build="1161110740"/>
          <size package="730650" archive="1808260"/>
          <base-version epoch="0" ver="0.88.2" rel="3"/>
          <base-version epoch="0" ver="0.88.3" rel="1.2"/>
          <base-version epoch="0" ver="0.88.4" rel="0.2"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.88.5" rel="0.2"/>
      <checksum type="sha" pkgid="YES">9ddcc1929e2ce272def6760937c9938c5e68b0ff</checksum>
      <time file="1161165438" build="1161110878"/>
      <size package="1049886" installed="2250551" archive="2285516"/>
      <location href="rpm/ppc/clamav-0.88.5-0.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav" epoch="0" ver="0.88.5" rel="0.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/clamav-0.88.5-0.2.ppc.patch.rpm"/>
          <checksum type="sha">5fd9ce394a1dabfe5d35daed1e9c415725a5d437</checksum>
          <time file="1161167666" build="1161110878"/>
          <size package="741588" archive="1899520"/>
          <base-version epoch="0" ver="0.88.2" rel="3"/>
          <base-version epoch="0" ver="0.88.3" rel="1.2"/>
          <base-version epoch="0" ver="0.88.4" rel="0.2"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.88.5" rel="0.2"/>
      <checksum type="sha" pkgid="YES">7e5256e734b92dadbac1501bb53c06edd1f4f967</checksum>
      <time file="1161165523" build="1161110781"/>
      <size package="1036952" installed="2212873" archive="2247852"/>
      <location href="rpm/x86_64/clamav-0.88.5-0.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav" epoch="0" ver="0.88.5" rel="0.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/clamav-0.88.5-0.2.x86_64.patch.rpm"/>
          <checksum type="sha">bb97cad75e710a86c0cba076b838b6d118491f60</checksum>
          <time file="1161167673" build="1161110781"/>
          <size package="737935" archive="1861852"/>
          <base-version epoch="0" ver="0.88.2" rel="3"/>
          <base-version epoch="0" ver="0.88.3" rel="1.2"/>
          <base-version epoch="0" ver="0.88.4" rel="0.2"/>
        </patchrpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
