openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

Revisions of clamav

buildservice-autocommit accepted request 803386 from

Reinhard Max (rmax) over 4 years ago (revision 206)

baserev update by copy to link target

Reinhard Max (rmax) accepted request 803374 from

Arjen de Korte (adkorte) over 4 years ago (revision 205)

- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.

buildservice-autocommit accepted request 794379 from

Lars Vogdt (lrupp) over 4 years ago (revision 204)

baserev update by copy to link target

Lars Vogdt (lrupp) accepted request 790518 from

Martin Pluskal (pluskalm) over 4 years ago (revision 203)

- Drop python build dependency as it is not needed

buildservice-autocommit accepted request 770647 from

Reinhard Max (rmax) almost 5 years ago (revision 202)

baserev update by copy to link target

Reinhard Max (rmax) accepted request 770381 from

Arjen de Korte (adkorte) almost 5 years ago (revision 201)

- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.

buildservice-autocommit accepted request 759922 from

Lars Vogdt (lrupp) almost 5 years ago (revision 200)

baserev update by copy to link target

Lars Vogdt (lrupp) accepted request 759130 from

Arjen de Korte (adkorte) almost 5 years ago (revision 199)

- The freshclam.service should not be started before the network is online (it checks for updates immediately upon service start)

buildservice-autocommit accepted request 759585 from

Factory Maintainer (factory-maintainer) almost 5 years ago (revision 198)

baserev update by copy to link target

buildservice-autocommit accepted request 758279 from

Robert Frohl (rfrohl) almost 5 years ago (revision 197)

baserev update by copy to link target

Lars Vogdt (lrupp) accepted request 758289 from

Dominique Leuenberger (dimstar) almost 5 years ago (revision 196)

Fix a typo in the changelog

Robert Frohl (rfrohl) accepted request 758248 from

Dominique Leuenberger (dimstar) almost 5 years ago (revision 195)

- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Aloow OBS to shortcut through the -mini flavors.

buildservice-autocommit accepted request 750886 from

Lars Vogdt (lrupp) about 5 years ago (revision 194)

baserev update by copy to link target

Lars Vogdt (lrupp) accepted request 750749 from

Arjen de Korte (adkorte) about 5 years ago (revision 193)

- update to 0.102.1
  * CVE-2019-15961: A Denial-of-Service (DoS) vulnerability may
    occur when scanning a specially crafted email file as a result
    of excessively long scan times. The issue is resolved by
    implementing several maximums in parsing MIME messages and by
    optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
    --gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)
- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
    - On-Access scanning for created and moved files (Extra-Scanning)
      is fixed.
    - VirusEvent for On-Access scans is fixed.
    - With clamonacc, it is now possible to copy, move, or remove a
      file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
    - Added support for HTTPS.
    - Support for database mirrors hosted on ports other than 80.
    - Removal of the mirror management feature (mirrors.dat).
    - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter

buildservice-autocommit accepted request 742982 from

Reinhard Max (rmax) about 5 years ago (revision 192)

baserev update by copy to link target

Reinhard Max (rmax) committed about 5 years ago (revision 191)

- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.

buildservice-autocommit accepted request 729457 from

Marcus Meissner (msmeissn) about 5 years ago (revision 190)

baserev update by copy to link target

Marcus Meissner (msmeissn) accepted request 728340 from

Andreas Stieger (AndreasStieger) about 5 years ago (revision 189)

- update to 0.101.4:
* CVE-2019-12900: An out of bounds write in the NSIS bzip2
(boo#1149458)
* CVE-2019-12625: Introduce a configurable time limit to mitigate
zip bomb vulnerability completely. Default is 2 minutes,
configurable useing the clamscan --max-scantime and for clamd
using the MaxScanTime` config option (boo#1144504)

buildservice-autocommit accepted request 721852 from

Reinhard Max (rmax) over 5 years ago (revision 188)

baserev update by copy to link target

Reinhard Max (rmax) committed over 5 years ago (revision 187)

- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes

Displaying revisions 61 - 80 of 266

Places

Revisions of clamav

Places