Overview

Request 728340 accepted

- update to 0.101.4:
* CVE-2019-12900: An out of bounds write in the NSIS bzip2
(boo#1149458)
* CVE-2019-12625: Introduce a configurable time limit to mitigate
zip bomb vulnerability completely. Default is 2 minutes,
configurable useing the clamscan --max-scantime and for clamd
using the MaxScanTime` config option (boo#1144504)

Loading...

Request History
Andreas Stieger's avatar

AndreasStieger created request

- update to 0.101.4:
* CVE-2019-12900: An out of bounds write in the NSIS bzip2
(boo#1149458)
* CVE-2019-12625: Introduce a configurable time limit to mitigate
zip bomb vulnerability completely. Default is 2 minutes,
configurable useing the clamscan --max-scantime and for clamd
using the MaxScanTime` config option (boo#1144504)


Marcus Meissner's avatar

msmeissn accepted request

ok

openSUSE Build Service is sponsored by