SUSE-RU-2018:1856-1: moderate: Recommended update for clamav

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for clamav
______________________________________________________________________________

Announcement ID:    SUSE-RU-2018:1856-1
Rating:             moderate
References:         #1089502 #1093322 
Affected Products:
                    SUSE Linux Enterprise Server 11-SP4
                    SUSE Linux Enterprise Server 11-SP3-LTSS
                    SUSE Linux Enterprise Point of Sale 11-SP3
                    SUSE Linux Enterprise Debuginfo 11-SP4
                    SUSE Linux Enterprise Debuginfo 11-SP3
______________________________________________________________________________

   An update that has two recommended fixes can now be
   installed.

Description:

   This update for clamav fixes the following issues:

   Clamav was updated to version 0.100.0 (bsc#1089502):

   * Add interfaces to the Prelude SIEM open source package for collecting
     ClamAV virus events.
   * Support libmspack internal code or as a shared object library. The
     internal library is the default and includes modifications to enable
     parsing of CAB files that do not entirely adhere to the CAB file format.
   * Deprecate of the AllowSupplementaryGroups parameter statement in clamd,
     clamav-milter, and freshclam. Use of supplementary is now in effect by
     default.
   * Deprecate internal LLVM code support.
   * Compute and check PE import table hash (a.k.a. "imphash") signatures.
   * Support file property collection and analysis for MHTML files.
   * Raw scanning of PostScript files.
   * Fix clamsubmit to use the new virus and false positive submission web
     interface.
   * Optionally, flag files with the virus "Heuristic.Limits.Exceeded" when
     size limitations are exceeded.
   * Improved decoders for PDF files.
   * Reduced number of compile time warnings.
   * Improved support for C++11.
   * Improved detection of system installed libraries.
   * Fixes to ClamAV's Container system and the introduction of Intermediates
     for more descriptive signatures.
   * Improvements to clamd's On-Access scanning capabilities for Linux.

   Re-introduce removed options as deprecated, so that clamd and freshclam
   don't exit on startup with an old config file

   Revert accidental path change in config files from /var/run back to
   /var/lib (bsc#1093322).


Patch Instructions:

   To install this SUSE Recommended Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server 11-SP4:

      zypper in -t patch slessp4-clamav-13687=1

   - SUSE Linux Enterprise Server 11-SP3-LTSS:

      zypper in -t patch slessp3-clamav-13687=1

   - SUSE Linux Enterprise Point of Sale 11-SP3:

      zypper in -t patch sleposp3-clamav-13687=1

   - SUSE Linux Enterprise Debuginfo 11-SP4:

      zypper in -t patch dbgsp4-clamav-13687=1

   - SUSE Linux Enterprise Debuginfo 11-SP3:

      zypper in -t patch dbgsp3-clamav-13687=1



Package List:

   - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64):

      clamav-0.100.0-0.20.12.2

   - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 s390x x86_64):

      clamav-0.100.0-0.20.12.2

   - SUSE Linux Enterprise Point of Sale 11-SP3 (i586):

      clamav-0.100.0-0.20.12.2

   - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64):

      clamav-debuginfo-0.100.0-0.20.12.2
      clamav-debugsource-0.100.0-0.20.12.2

   - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 s390x x86_64):

      clamav-debuginfo-0.100.0-0.20.12.2
      clamav-debugsource-0.100.0-0.20.12.2


References:

   https://bugzilla.suse.com/1089502
   https://bugzilla.suse.com/1093322