[USN-3722-5] ClamAV regression

-----BEGIN PGP SIGNATURE-----
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=QYf7
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-3722-5
September 18, 2018

clamav regression
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

USN-3722-1 introduced a regression in ClamAV.

Software Description:
- clamav: Anti-virus utility for Unix

Details:

USN-3722-1 fixed vulnerabilities in ClamAV. The new package introduced an
issue which caused dpkg-reconfigure to enter an infinite loop. This update
fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that ClamAV incorrectly handled parsing certain HWP
files. A remote attacker could use this issue to cause ClamAV to hang,
resulting in a denial of service. (CVE-2018-0360)
It was discovered that ClamAV incorrectly handled parsing certain PDF
files. A remote attacker could use this issue to cause ClamAV to hang,
resulting in a denial of service. (CVE-2018-0361)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
clamav 0.100.1+dfsg-1ubuntu0.18.04.3

Ubuntu 16.04 LTS:
clamav 0.100.1+dfsg-1ubuntu0.16.04.3

Ubuntu 14.04 LTS:
clamav 0.100.1+dfsg-1ubuntu0.14.04.4

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/usn/usn-3722-5
https://usn.ubuntu.com/usn/usn-3722-1
https://launchpad.net/bugs/1792051

Package Information:
https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg-1ubuntu0.18.04.3
https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg-1ubuntu0.16.04.3
https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg-1ubuntu0.14.04.4