January 2006
Four Mandriva Linux Advisories
ID: 00057
Ref: 56/2006
Date: 17 January 2006:13:44:23
Version: 1
Title: Four Mandriva Linux Advisories
Abstract:
Vendors affected: Mandriva
Operating systems affected: Mandriva
Applications affected: Mandriva
Title
=====
Four Mandriva Linux Advisories:
1. MDKA-2006:007 - Updated festival packages fix crash on x86.
2. MDKSA-2006:014 - Updated wine packages fix WMF vulnerability
3. MDKSA-2006:015 - Updated hylafax packages fix eval injection vulnerabilities
4. MDKSA-2006:016 - Updated clamav packages fix vulnerability
Detail
======
1. The festival program on x86 platforms crashes when the user attempts
to use it. The updated packages are rebuilt against the correct
libraries and correct this issue.
2. A vulnerability was discovered by H D Moore in Wine which implements
the SETABORTPROC GDI Escape function for Windows Metafile (WMF) files.
This could be abused by an attacker who is able to entice a user to
open a specially crafted WMF file from within a Wine-execute Windows
application, possibly resulting in the execution of arbitrary code
with the privileges of the user runing Wine.
3. Patrice Fournier discovered the faxrcvd/notify scripts
(executed as the uucp/fax user) run user-supplied input through
eval without any attempt at sanitising it first. This would
allow any user who could submit jobs to HylaFAX, or through
telco manipulation control the representation of callid
information presented to HylaFAX to run arbitrary commands as
the uucp/fax user.
4. A heap-based buffer overflow was discovered in ClamAV versions prior to
0.88 which allows remote attackers to cause a crash and possibly
execute arbitrary code via specially crafted UPX files.
1.
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Advisory MDKA-2006:007
http://www.mandriva.com/security/
_______________________________________________________________________
Package : festival
Date : January 16, 2006
Affected: 2006.0
_______________________________________________________________________
Problem Description:
The festival program on x86 platforms crashes when the user attempts
to use it. The updated packages are rebuilt against the correct
libraries and correct this issue.
_______________________________________________________________________
Updated Packages:
Mandriva Linux 2006.0:
a7739a6f980ff3623c5e412e6243eb0b 2006.0/RPMS/festival-1.4.3-8.1.20060mdk.i586.rpm
c8a53d33f2bb8bb5f1e667caa3a4e10a 2006.0/RPMS/festival-devel-1.4.3-8.1.20060mdk.i586.rpm
5ae54a9babeff150eee20c44194a60cf 2006.0/SRPMS/festival-1.4.3-8.1.20060mdk.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFDzAhDmqjQ0CJFipgRAlRKAJwJhm+f3eYpoDfIbKX/ccUNqxlnagCgh6I0
nuSJ/esCKy9lIvL4LqOXHv0=
=4MmH
- -----END PGP SIGNATURE-----
2.
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDKSA-2006:014
http://www.mandriva.com/security/
_______________________________________________________________________
Package : wine
Date : January 16, 2006
Affected: 2006.0, Corporate 3.0
_______________________________________________________________________
Problem Description:
A vulnerability was discovered by H D Moore in Wine which implements
the SETABORTPROC GDI Escape function for Windows Metafile (WMF) files.
This could be abused by an attacker who is able to entice a user to
open a specially crafted WMF file from within a Wine-execute Windows
application, possibly resulting in the execution of arbitrary code
with the privileges of the user runing Wine.
The updated packages have been patched to correct these problems.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0106
_______________________________________________________________________
Updated Packages:
Mandriva Linux 2006.0:
d4f3baabbba81f1bad315bc79dad7e9c 2006.0/RPMS/libwine1-20050725-6.1.20060mdk.i586.rpm
fc810c3d98a537fce73977c5aa6912ea 2006.0/RPMS/libwine1-capi-20050725-6.1.20060mdk.i586.rpm
5663e266c34853af09f421897bd778c7 2006.0/RPMS/libwine1-devel-20050725-6.1.20060mdk.i586.rpm
27052e10ffe276948b7902d9a72aba9a 2006.0/RPMS/libwine1-twain-20050725-6.1.20060mdk.i586.rpm
02f66be98c0d8bde52bcfeb4e4a4ce2d 2006.0/RPMS/wine-20050725-6.1.20060mdk.i586.rpm
37780f9798d8da0c4de0a996f65b41b9 2006.0/SRPMS/wine-20050725-6.1.20060mdk.src.rpm
Corporate 3.0:
a22d48d27955a0b5c8cf7c872a5332ea corporate/3.0/RPMS/libwine1-20040213-3.1.C30mdk.i586.rpm
b0214de7c0416e65330c2aa07c7de5ad corporate/3.0/RPMS/libwine1-capi-20040213-3.1.C30mdk.i586.rpm
d9abcd416d2bb0f3d1b892f3c58d3432 corporate/3.0/RPMS/libwine1-devel-20040213-3.1.C30mdk.i586.rpm
6495fbac8ea70deab3b8401b3d83f12d corporate/3.0/RPMS/libwine1-twain-20040213-3.1.C30mdk.i586.rpm
5659cd4b240da12ed15644da93c81723 corporate/3.0/RPMS/wine-20040213-3.1.C30mdk.i586.rpm
c32125932c612311afa5c930af3869ab corporate/3.0/RPMS/wine-utils-20040213-3.1.C30mdk.i586.rpm
4611ae314fd47a15f540e1d15021e79d corporate/3.0/SRPMS/wine-20040213-3.1.C30mdk.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFDzAZmmqjQ0CJFipgRAsTIAKCdC5LN/aFvdUrLN6EkdBJhcodGkgCglH2/
ElJAar9JZJxnyaVn7VJyOKA=
=Gsty
- -----END PGP SIGNATURE-----
3.
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDKSA-2006:015
http://www.mandriva.com/security/
_______________________________________________________________________
Package : hylafax
Date : January 16, 2006
Affected: 10.1, 10.2, 2006.0
_______________________________________________________________________
Problem Description:
Patrice Fournier discovered the faxrcvd/notify scripts
(executed as the uucp/fax user) run user-supplied input through
eval without any attempt at sanitising it first. This would
allow any user who could submit jobs to HylaFAX, or through
telco manipulation control the representation of callid
information presented to HylaFAX to run arbitrary commands as
the uucp/fax user. (CVE-2005-3539, only 'notify' in the covered
versions)
Updated packages were also reviewed for vulnerability to
an issue where if PAM is disabled, a user could log in with no
password. (CVE-2005-3538)
In addition, some fixes to the packages for permissions, and
the %pre/%post scripts were backported from cooker. (#19679)
The updated packages have been patched to correct these issues.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3538
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3539
http://qa.mandriva.com/show_bug.cgi?id=19679
_______________________________________________________________________
Updated Packages:
Mandriva Linux 10.1:
2288eb6fa13db28cec0a2936e6da201b 10.1/RPMS/hylafax-4.2.0-1.4.101mdk.i586.rpm
ae01aff5e685211d56d782c7107aa643 10.1/RPMS/hylafax-client-4.2.0-1.4.101mdk.i586.rpm
2d160b49e8e9e41beb3a8bd98995a4e7 10.1/RPMS/hylafax-server-4.2.0-1.4.101mdk.i586.rpm
0210a8f6269b741c88f1a08e1fd3bf67 10.1/RPMS/libhylafax4.2.0-4.2.0-1.4.101mdk.i586.rpm
21aad742a2af1af8bef9ec598dcc9808 10.1/RPMS/libhylafax4.2.0-devel-4.2.0-1.4.101mdk.i586.rpm
0db2c22f9b1714b2bc67767be3af086b 10.1/SRPMS/hylafax-4.2.0-1.4.101mdk.src.rpm
Mandriva Linux 10.1/X86_64:
204fddbe437c72f04bbc10d9520b29bf x86_64/10.1/RPMS/hylafax-4.2.0-1.4.101mdk.x86_64.rpm
0c0b7f49dc6ba818255066d880b1eeda x86_64/10.1/RPMS/hylafax-client-4.2.0-1.4.101mdk.x86_64.rpm
514b0ae30861e05453665b10c96e0471 x86_64/10.1/RPMS/hylafax-server-4.2.0-1.4.101mdk.x86_64.rpm
0a91eadc96ace924c000932bf7b73f00 x86_64/10.1/RPMS/lib64hylafax4.2.0-4.2.0-1.4.101mdk.x86_64.rpm
1eea0a264c43552015c86490e562f3c3 x86_64/10.1/RPMS/lib64hylafax4.2.0-devel-4.2.0-1.4.101mdk.x86_64.rpm
0db2c22f9b1714b2bc67767be3af086b x86_64/10.1/SRPMS/hylafax-4.2.0-1.4.101mdk.src.rpm
Mandriva Linux 10.2:
695fe8a1cf2e5833db4ffb268b655d6c 10.2/RPMS/hylafax-4.2.0-3.2.102mdk.i586.rpm
c9225a4743adb84c29980e08c21012af 10.2/RPMS/hylafax-client-4.2.0-3.2.102mdk.i586.rpm
aae88d44d8bf87dff930cd55fef41859 10.2/RPMS/hylafax-server-4.2.0-3.2.102mdk.i586.rpm
ab985d622d8163af3f8c14741bb12605 10.2/RPMS/libhylafax4.2.0-4.2.0-3.2.102mdk.i586.rpm
351cdb560784d10d328485feef281291 10.2/RPMS/libhylafax4.2.0-devel-4.2.0-3.2.102mdk.i586.rpm
8afc40fca6dffd46b6f7655248210c78 10.2/SRPMS/hylafax-4.2.0-3.2.102mdk.src.rpm
Mandriva Linux 10.2/X86_64:
98d01067467b97abd72184241bfb9f79 x86_64/10.2/RPMS/hylafax-4.2.0-3.2.102mdk.x86_64.rpm
8f21f4566fb19a5cb4b01829ad80c7cc x86_64/10.2/RPMS/hylafax-client-4.2.0-3.2.102mdk.x86_64.rpm
15af886a1b4b2720415dc7c5193bef31 x86_64/10.2/RPMS/hylafax-server-4.2.0-3.2.102mdk.x86_64.rpm
8f2eebb841672550e7fc312eaf994f6e x86_64/10.2/RPMS/lib64hylafax4.2.0-4.2.0-3.2.102mdk.x86_64.rpm
950422660ba456ace9450a99ead9f09e x86_64/10.2/RPMS/lib64hylafax4.2.0-devel-4.2.0-3.2.102mdk.x86_64.rpm
8afc40fca6dffd46b6f7655248210c78 x86_64/10.2/SRPMS/hylafax-4.2.0-3.2.102mdk.src.rpm
Mandriva Linux 2006.0:
f59e6af800bd40730fc55268dd30a50f 2006.0/RPMS/hylafax-4.2.1-2.2.20060mdk.i586.rpm
cf0592e938676ea718034a3a34ba6d5e 2006.0/RPMS/hylafax-client-4.2.1-2.2.20060mdk.i586.rpm
f0f64fc2f28bbba0cf80a1f3e2be55e0 2006.0/RPMS/hylafax-server-4.2.1-2.2.20060mdk.i586.rpm
278d2008b94d186cc56c067685ad617b 2006.0/RPMS/libhylafax4.2.0-4.2.1-2.2.20060mdk.i586.rpm
47f570e1550aa2a286c0417d6a8673a6 2006.0/RPMS/libhylafax4.2.0-devel-4.2.1-2.2.20060mdk.i586.rpm
7fa7882271a6486bb797a21ac3621d3c 2006.0/SRPMS/hylafax-4.2.1-2.2.20060mdk.src.rpm
Mandriva Linux 2006.0/X86_64:
35a706154fb7111baa93011a32077284 x86_64/2006.0/RPMS/hylafax-4.2.1-2.2.20060mdk.x86_64.rpm
73cb090effdccf7cb1a6cbe04f121da4 x86_64/2006.0/RPMS/hylafax-client-4.2.1-2.2.20060mdk.x86_64.rpm
552d1a2f6b1ade68f2694dd4880bc000 x86_64/2006.0/RPMS/hylafax-server-4.2.1-2.2.20060mdk.x86_64.rpm
e4a63e6b0898a58d6125062ae913fe31 x86_64/2006.0/RPMS/lib64hylafax4.2.0-4.2.1-2.2.20060mdk.x86_64.rpm
6f2d818013c1f3be6aeacd5d7ca9cce2 x86_64/2006.0/RPMS/lib64hylafax4.2.0-devel-4.2.1-2.2.20060mdk.x86_64.rpm
7fa7882271a6486bb797a21ac3621d3c x86_64/2006.0/SRPMS/hylafax-4.2.1-2.2.20060mdk.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFDzAdFmqjQ0CJFipgRAjaCAJ9+YadU465+YmVz9cUfxAGJ1oqYVwCgt/q8
MwhJKlk2ExogvsgfpBxFCy8=
=7hXf
- -----END PGP SIGNATURE-----
4.
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDKSA-2006:016
http://www.mandriva.com/security/
_______________________________________________________________________
Package : clamav
Date : January 16, 2006
Affected: 10.1, 10.2, 2006.0, Corporate 3.0
_______________________________________________________________________
Problem Description:
A heap-based buffer overflow was discovered in ClamAV versions prior to
0.88 which allows remote attackers to cause a crash and possibly
execute arbitrary code via specially crafted UPX files.
This update provides ClamAV 0.88 which corrects this issue and also
fixes some other bugs.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0162
_______________________________________________________________________
Updated Packages:
Mandriva Linux 10.1:
a6f50f607308d688ae0acbb8a03be62f 10.1/RPMS/clamav-0.88-0.1.101mdk.i586.rpm
4a91d81f7ca2baa8392e9822493e9bad 10.1/RPMS/clamav-db-0.88-0.1.101mdk.i586.rpm
f37f5611b73a0b39efc030a7380fd231 10.1/RPMS/clamav-milter-0.88-0.1.101mdk.i586.rpm
3a358f56b38d12dd2f406ad01e4d15d1 10.1/RPMS/clamd-0.88-0.1.101mdk.i586.rpm
1073d9acede45ae3712dde6016d93776 10.1/RPMS/libclamav1-0.88-0.1.101mdk.i586.rpm
3ed0c1a49b4a7aaf2438d2c65a14cf46 10.1/RPMS/libclamav1-devel-0.88-0.1.101mdk.i586.rpm
70ca1d9a3498e82d89d1d8a5ef7386f6 10.1/SRPMS/clamav-0.88-0.1.101mdk.src.rpm
Mandriva Linux 10.1/X86_64:
da3e4a1571a2e98591c6324a06d5dbc1 x86_64/10.1/RPMS/clamav-0.88-0.1.101mdk.x86_64.rpm
1d3a2630d32b08fbb72ccf5543d9ab93 x86_64/10.1/RPMS/clamav-db-0.88-0.1.101mdk.x86_64.rpm
0bb23a740d77e519f79336dd94624995 x86_64/10.1/RPMS/clamav-milter-0.88-0.1.101mdk.x86_64.rpm
fcb790c235e892f2bcb3e40073de37dc x86_64/10.1/RPMS/clamd-0.88-0.1.101mdk.x86_64.rpm
5fbe68962ebdb338f7f2dd642af2e2c5 x86_64/10.1/RPMS/lib64clamav1-0.88-0.1.101mdk.x86_64.rpm
588f38077ecc9334d87bc32d55d19693 x86_64/10.1/RPMS/lib64clamav1-devel-0.88-0.1.101mdk.x86_64.rpm
70ca1d9a3498e82d89d1d8a5ef7386f6 x86_64/10.1/SRPMS/clamav-0.88-0.1.101mdk.src.rpm
Mandriva Linux 10.2:
d2cf2ff410e827248183514a3d28bbee 10.2/RPMS/clamav-0.88-0.1.102mdk.i586.rpm
c6dc409a0ca4464c89fea392773afc2a 10.2/RPMS/clamav-db-0.88-0.1.102mdk.i586.rpm
c3f0b3ca067b4ed9cef80a9a3235b584 10.2/RPMS/clamav-milter-0.88-0.1.102mdk.i586.rpm
1c8c9376e21ae2ffe69d2a932a84b1d6 10.2/RPMS/clamd-0.88-0.1.102mdk.i586.rpm
513f0a8e2f11b87c8aa53bcb73c442af 10.2/RPMS/libclamav1-0.88-0.1.102mdk.i586.rpm
0add915e8292b4103a1a70a8024a9c14 10.2/RPMS/libclamav1-devel-0.88-0.1.102mdk.i586.rpm
e7b233b0e93148483eaddc13fb2c08ca 10.2/SRPMS/clamav-0.88-0.1.102mdk.src.rpm
Mandriva Linux 10.2/X86_64:
95f3d51d9161e8ce768d539fb09bf61e x86_64/10.2/RPMS/clamav-0.88-0.1.102mdk.x86_64.rpm
32d954251997dfe4c6a90b47c1afc043 x86_64/10.2/RPMS/clamav-db-0.88-0.1.102mdk.x86_64.rpm
d65805c70d7610d8c8c4398e061263a2 x86_64/10.2/RPMS/clamav-milter-0.88-0.1.102mdk.x86_64.rpm
435700e77ca28dc666e192e7478f7d2e x86_64/10.2/RPMS/clamd-0.88-0.1.102mdk.x86_64.rpm
511343643497d4b9766b57fe8f04273e x86_64/10.2/RPMS/lib64clamav1-0.88-0.1.102mdk.x86_64.rpm
d0eed7f044d7e8a7f4db533af5fe9ad9 x86_64/10.2/RPMS/lib64clamav1-devel-0.88-0.1.102mdk.x86_64.rpm
e7b233b0e93148483eaddc13fb2c08ca x86_64/10.2/SRPMS/clamav-0.88-0.1.102mdk.src.rpm
Mandriva Linux 2006.0:
56058f4cd26122cea69427cc67865c87 2006.0/RPMS/clamav-0.88-0.1.20060mdk.i586.rpm
fc2da08ef403505d405c27ecf7e70906 2006.0/RPMS/clamav-db-0.88-0.1.20060mdk.i586.rpm
bc9b7175371d7e79dd24eb4eae959963 2006.0/RPMS/clamav-milter-0.88-0.1.20060mdk.i586.rpm
33c61bd443c38a580d0951cce4fd0fc4 2006.0/RPMS/clamd-0.88-0.1.20060mdk.i586.rpm
52ac84d0d82955075917b5d1746f3c89 2006.0/RPMS/libclamav1-0.88-0.1.20060mdk.i586.rpm
17b683eff95867f061c337a5a5ddfc98 2006.0/RPMS/libclamav1-devel-0.88-0.1.20060mdk.i586.rpm
6b9450ddd32e67b51b6210c881c4ee57 2006.0/SRPMS/clamav-0.88-0.1.20060mdk.src.rpm
Mandriva Linux 2006.0/X86_64:
9f8c4d9df419f07e9b77805cc44def6d x86_64/2006.0/RPMS/clamav-0.88-0.1.20060mdk.x86_64.rpm
052b2bce512f66ae755ca5c546e617e2 x86_64/2006.0/RPMS/clamav-db-0.88-0.1.20060mdk.x86_64.rpm
7baabc483eb84d4aa57d4eab4780e0d6 x86_64/2006.0/RPMS/clamav-milter-0.88-0.1.20060mdk.x86_64.rpm
7dedeeafe3bb5d61787d8d580cf47a10 x86_64/2006.0/RPMS/clamd-0.88-0.1.20060mdk.x86_64.rpm
ab4d8c33215c6937e78d817b24a411e7 x86_64/2006.0/RPMS/lib64clamav1-0.88-0.1.20060mdk.x86_64.rpm
dcd8465544b9e49d81788220d166c128 x86_64/2006.0/RPMS/lib64clamav1-devel-0.88-0.1.20060mdk.x86_64.rpm
6b9450ddd32e67b51b6210c881c4ee57 x86_64/2006.0/SRPMS/clamav-0.88-0.1.20060mdk.src.rpm
Corporate 3.0:
83adb159a2d4529422cc13d5946ba755 corporate/3.0/RPMS/clamav-0.88-0.1.C30mdk.i586.rpm
cc58276368f5eb263516a55376cb1d4d corporate/3.0/RPMS/clamav-db-0.88-0.1.C30mdk.i586.rpm
ebda4c6c4e070ae0b02327f64ce5f8c1 corporate/3.0/RPMS/clamav-milter-0.88-0.1.C30mdk.i586.rpm
2343c8e3cb71f9c1f94a04ea153df0b0 corporate/3.0/RPMS/clamd-0.88-0.1.C30mdk.i586.rpm
9b9516676a908e9706070f924d127241 corporate/3.0/RPMS/libclamav1-0.88-0.1.C30mdk.i586.rpm
66c4f79955843bb0dab60021eeda4b89 corporate/3.0/RPMS/libclamav1-devel-0.88-0.1.C30mdk.i586.rpm
e670f8e1032dd9cbf38479f5bc695730 corporate/3.0/SRPMS/clamav-0.88-0.1.C30mdk.src.rpm
Corporate 3.0/X86_64:
cb622db3837b0019ee05fab5b93b3a73 x86_64/corporate/3.0/RPMS/clamav-0.88-0.1.C30mdk.x86_64.rpm
e35b47f2bb233a6a63da9111f33d34b1 x86_64/corporate/3.0/RPMS/clamav-db-0.88-0.1.C30mdk.x86_64.rpm
0bd8f3b55cdf12eb23e1450a116f42d1 x86_64/corporate/3.0/RPMS/clamav-milter-0.88-0.1.C30mdk.x86_64.rpm
c03051f1e521db11b0604ed123caaa24 x86_64/corporate/3.0/RPMS/clamd-0.88-0.1.C30mdk.x86_64.rpm
d9ad3e9cf881de0185cf58ae80c89391 x86_64/corporate/3.0/RPMS/lib64clamav1-0.88-0.1.C30mdk.x86_64.rpm
0148db41a8e5724cd229ea866b7037ad x86_64/corporate/3.0/RPMS/lib64clamav1-devel-0.88-0.1.C30mdk.x86_64.rpm
e670f8e1032dd9cbf38479f5bc695730 x86_64/corporate/3.0/SRPMS/clamav-0.88-0.1.C30mdk.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFDzAsDmqjQ0CJFipgRAn+hAKC+LqIePeyGT996WlgEHRz08tKDmgCeLkl9
fRY6yzxeFm2/EAO5B9Q3/to=
=F+a3
- -----END PGP SIGNATURE-----