<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="6dbaa33e357785be5b4d6124113eb39f"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="clamav-2632"
    timestamp="1172080752"
    engine="1.0">
  <yum:name>clamav</yum:name>
  <summary lang="en">clamav: security update to version 0.90</summary>
  <summary lang="de">clamav: Sicherheitsupdate auf Version 0.90</summary>
  <description lang="en">This update to ClamAV version 0.90 fixes various bugs:

CVE-2007-0897: A filedescriptor leak in the handling of CAB
files can lead to a denial of service attack against the
clamd scanner daemon caused by remote attackers.

CVE-2007-0898: A directory traversal in handling of MIME
E-Mail headers could be used by remote attackers to
overwrite local files owned by the user under which clamd
is running.
</description>
  <description lang="de">Dieses Update von ClamAV auf Version 0.90 behebt mehrere
Probleme:

CVE-2007-0897: Ein Filedescriptorleck in der Behandlung von
CAB Dateien kann zu einem durch entfernte Angreifer
verursachten Denial of Service gegen den clamd daemon
führen.

CVE-2007-0898: Eine Directory Traversal in der Behandlung
von MIME E-Mail Headern kann von entfernten Angreifern zum
Überschreiben von Dateien im System benutzt werden, auf die
der &quot;clamd&quot; Benutzer schreiben darf.
</description>
  <yum:version ver="2632" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="clamav" epoch="0" ver="0.90" rel="0.2" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.90" rel="0.2"/>
      <checksum type="sha" pkgid="YES">77d7d57a4c4bbc169681778c9b5e0e8342b6b2c1</checksum>
      <time file="1172156522" build="1172080752"/>
      <size package="1004962" installed="2013963" archive="2031876"/>
      <location href="rpm/i586/clamav-0.90-0.2.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav" epoch="0" ver="0.90" rel="0.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/clamav-0.90-0.2.i586.patch.rpm"/>
          <checksum type="sha">ccbf21437ceff028bd62bdecbcd6b5f4e406a5ef</checksum>
          <time file="1172187083" build="1172080752"/>
          <size package="827722" archive="1855448"/>
          <base-version epoch="0" ver="0.88.2" rel="3"/>
          <base-version epoch="0" ver="0.88.3" rel="1.2"/>
          <base-version epoch="0" ver="0.88.4" rel="0.2"/>
          <base-version epoch="0" ver="0.88.5" rel="0.2"/>
          <base-version epoch="0" ver="0.88.6" rel="1.4"/>
          <base-version epoch="0" ver="0.88.7" rel="1.2"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.90" rel="0.2"/>
      <checksum type="sha" pkgid="YES">f5d76f856dae7408cf9639bcfaeae02db19895e0</checksum>
      <time file="1172156454" build="1172078829"/>
      <size package="1027641" installed="2127067" archive="2144980"/>
      <location href="rpm/ppc/clamav-0.90-0.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav" epoch="0" ver="0.90" rel="0.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/clamav-0.90-0.2.ppc.patch.rpm"/>
          <checksum type="sha">79c0a05e15393d1ef99424616aaf13bb9bfc6e01</checksum>
          <time file="1172187118" build="1172078829"/>
          <size package="855783" archive="1968552"/>
          <base-version epoch="0" ver="0.88.2" rel="3"/>
          <base-version epoch="0" ver="0.88.3" rel="1.2"/>
          <base-version epoch="0" ver="0.88.4" rel="0.2"/>
          <base-version epoch="0" ver="0.88.5" rel="0.2"/>
          <base-version epoch="0" ver="0.88.6" rel="1.4"/>
          <base-version epoch="0" ver="0.88.7" rel="1.2"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.90" rel="0.2"/>
      <checksum type="sha" pkgid="YES">17ab4a8f0076997a7d4636c4be868415b5fd51de</checksum>
      <time file="1172156537" build="1172078567"/>
      <size package="1013655" installed="2061017" archive="2078944"/>
      <location href="rpm/x86_64/clamav-0.90-0.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav" epoch="0" ver="0.90" rel="0.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/clamav-0.90-0.2.x86_64.patch.rpm"/>
          <checksum type="sha">e018487f5015749227fee7048fb63c0802590baa</checksum>
          <time file="1172187150" build="1172078567"/>
          <size package="837165" archive="1902516"/>
          <base-version epoch="0" ver="0.88.2" rel="3"/>
          <base-version epoch="0" ver="0.88.3" rel="1.2"/>
          <base-version epoch="0" ver="0.88.4" rel="0.2"/>
          <base-version epoch="0" ver="0.88.5" rel="0.2"/>
          <base-version epoch="0" ver="0.88.6" rel="1.4"/>
          <base-version epoch="0" ver="0.88.7" rel="1.2"/>
        </patchrpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
