USN-4146-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that ClamAV incorrectly handled unpacking ZIP files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2019-12625)
It was discovered that ClamAV incorrectly handled unpacking bzip2 files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-12900)
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libclamav-dev", "binary_version": "0.101.4+dfsg-0ubuntu0.14.04.1+esm1" }, { "binary_name": "clamav-testfiles", "binary_version": "0.101.4+dfsg-0ubuntu0.14.04.1+esm1" }, { "binary_name": "clamav-base", "binary_version": "0.101.4+dfsg-0ubuntu0.14.04.1+esm1" }, { "binary_name": "clamav", "binary_version": "0.101.4+dfsg-0ubuntu0.14.04.1+esm1" }, { "binary_name": "clamav-daemon", "binary_version": "0.101.4+dfsg-0ubuntu0.14.04.1+esm1" }, { "binary_name": "clamav-milter", "binary_version": "0.101.4+dfsg-0ubuntu0.14.04.1+esm1" }, { "binary_name": "clamav-docs", "binary_version": "0.101.4+dfsg-0ubuntu0.14.04.1+esm1" }, { "binary_name": "clamav-freshclam", "binary_version": "0.101.4+dfsg-0ubuntu0.14.04.1+esm1" }, { "binary_name": "libclamav9", "binary_version": "0.101.4+dfsg-0ubuntu0.14.04.1+esm1" } ] }