clamav - several vulnerabilities

Several vulnerabilities have been discovered in the Clam anti-virus
toolkit, which may lead to the execution of arbitrary code or local denial
of service. The Common Vulnerabilities and Exposures project identifies
the following problems:

• CVE-2007-6595
  It was discovered that temporary files are created insecurely,
  which may result in local denial of service by overwriting files.
• CVE-2008-0318
  Silvio Cesare discovered an integer overflow in the parser for PE
  headers.

The version of clamav in the old stable distribution (sarge) is no
longer supported with security updates.

For the stable distribution (etch), these problems have been fixed in
version 0.90.1dfsg-3etch10. In addition to these fixes, this update
also incorporates changes from the upcoming point release of the
stable distribution (non-free RAR handling code was removed).

We recommend that you upgrade your clamav packages.