<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="6dbaa33e357785be5b4d6124113eb39f"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="clamav-2632"
    timestamp="1172091403"
    engine="1.0">
  <yum:name>clamav</yum:name>
  <summary lang="en">clamav: security update to version 0.90</summary>
  <summary lang="de">clamav: Sicherheitsupdate auf Version 0.90</summary>
  <description lang="en">This update to ClamAV version 0.90 fixes various bugs:

CVE-2007-0897: A filedescriptor leak in the handling of CAB
files can lead to a denial of service attack against the
clamd scanner daemon caused by remote attackers.

CVE-2007-0898: A directory traversal in handling of MIME
E-Mail headers could be used by remote attackers to
overwrite local files owned by the user under which clamd
is running.
</description>
  <description lang="de">Dieses Update von ClamAV auf Version 0.90 behebt mehrere
Probleme:

CVE-2007-0897: Ein Filedescriptorleck in der Behandlung von
CAB Dateien kann zu einem durch entfernte Angreifer
verursachten Denial of Service gegen den clamd daemon
führen.

CVE-2007-0898: Eine Directory Traversal in der Behandlung
von MIME E-Mail Headern kann von entfernten Angreifern zum
Überschreiben von Dateien im System benutzt werden, auf die
der &quot;clamd&quot; Benutzer schreiben darf.
</description>
  <yum:version ver="2632" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="clamav" epoch="0" ver="0.90" rel="0.1" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.90" rel="0.1"/>
      <checksum type="sha" pkgid="YES">95a3e8f1062e330be138ba6b6ca3e187665efedc</checksum>
      <time file="1172156989" build="1172091403"/>
      <size package="1002979" installed="2025282" archive="2043196"/>
      <location href="rpm/i586/clamav-0.90-0.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav" epoch="0" ver="0.90" rel="0.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/clamav-0.90-0.1.i586.patch.rpm"/>
          <checksum type="sha">eac7d3419b6a24cd01abfae0ec17e376fb7a4cf0</checksum>
          <time file="1172187183" build="1172091403"/>
          <size package="826828" archive="1866636"/>
          <base-version epoch="0" ver="0.88.6" rel="9"/>
          <base-version epoch="0" ver="0.88.7" rel="1.1"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.90" rel="0.1"/>
      <checksum type="sha" pkgid="YES">d04ee84c4221554c989da5f7122165440a32e182</checksum>
      <time file="1172186726" build="1172085225"/>
      <size package="1027542" installed="2136158" archive="2154072"/>
      <location href="rpm/ppc/clamav-0.90-0.1.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav" epoch="0" ver="0.90" rel="0.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/clamav-0.90-0.1.ppc.patch.rpm"/>
          <checksum type="sha">2b9bbd7ceee410f676a2b1275228cdc0dc7a0340</checksum>
          <time file="1172187200" build="1172085225"/>
          <size package="855512" archive="1977512"/>
          <base-version epoch="0" ver="0.88.6" rel="9"/>
          <base-version epoch="0" ver="0.88.7" rel="1.1"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>clamav</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.90" rel="0.1"/>
      <checksum type="sha" pkgid="YES">a8ce94fe9a0d24c3ec8033ddc016c1a6d9c2a37d</checksum>
      <time file="1172169057" build="1172168784"/>
      <size package="1013633" installed="2075826" archive="2093752"/>
      <location href="rpm/x86_64/clamav-0.90-0.1.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="clamav" epoch="0" ver="0.90" rel="0.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="clamav"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/clamav-0.90-0.1.x86_64.patch.rpm"/>
          <checksum type="sha">0f0441c04bd3088096846a938733b1064070ca8f</checksum>
          <time file="1172187222" build="1172168784"/>
          <size package="838161" archive="1917192"/>
          <base-version epoch="0" ver="0.88.6" rel="9"/>
          <base-version epoch="0" ver="0.88.7" rel="1.1"/>
        </patchrpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
