Overview

Request 125471 accepted

- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
entry with a length field corresponding to that entire entry, plus
part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning (forwarded request 125380 from AndreasStieger)

Loading...
Request History
Marcus Meissner's avatar

msmeissn created request

- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
entry with a length field corresponding to that entire entry, plus
part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning (forwarded request 125380 from AndreasStieger)


Factory Auto's avatar

factory-auto added a reviewer

the package is still building for repository openSUSE_Factory


Factory Auto's avatar

factory-auto added a reviewer

Please review sources


Sascha Peilicke's avatar

saschpe approved review


Stephan Kulow's avatar

coolo accepted request

checkin and copy for 12.2


Saul Goodman's avatar

licensedigger accepted review

{"approve": "preliminary, version number changed"}


Factory Auto's avatar

factory-auto accepted review

Builds for repo openSUSE_Factory


Sascha Peilicke's avatar

saschpe accepted review

openSUSE Build Service is sponsored by