Accepting request 284469 from security

- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch

OBS-URL: https://build.opensuse.org/request/show/284469
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=75
This commit is contained in:
Dominique Leuenberger 2015-02-06 21:38:06 +00:00 committed by Git OBS Bridge
commit c3d87fe7f4
7 changed files with 18 additions and 32 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:9c2f37d5fa9033936468237f6f4b29289f30791caa84765ef510acb56c8daa4d
size 15146379

Binary file not shown.

3
clamav-0.98.6.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:6591245d55445a2ddcc1700964c33b8bf62fe20c75bd9c7746f4fe0735502951
size 15148292

BIN
clamav-0.98.6.tar.gz.sig Normal file

Binary file not shown.

View File

@ -1,26 +0,0 @@
diff --git a/configure b/configure
index 95168bb..c31f831 100755
--- a/configure
+++ b/configure
@@ -5090,7 +5090,7 @@ $as_echo "$ac_cv_safe_to_define___extensions__" >&6; }
VERSION="0.98.5"
LC_CURRENT=7
-LC_REVISION=22
+LC_REVISION=24
LC_AGE=1
LIBCLAMAV_VERSION="$LC_CURRENT":"$LC_REVISION":"$LC_AGE"
diff --git a/m4/reorganization/version.m4 b/m4/reorganization/version.m4
index ea263b2..f4fe8b1 100644
--- a/m4/reorganization/version.m4
+++ b/m4/reorganization/version.m4
@@ -3,7 +3,7 @@ dnl VERSION="devel-`date +%Y%m%d`"
VERSION="0.98.5"
LC_CURRENT=7
-LC_REVISION=22
+LC_REVISION=24
LC_AGE=1
LIBCLAMAV_VERSION="$LC_CURRENT":"$LC_REVISION":"$LC_AGE"
AC_SUBST([LIBCLAMAV_VERSION])

View File

@ -1,3 +1,17 @@
-------------------------------------------------------------------
Thu Feb 5 10:29:02 UTC 2015 - max@suse.com
- Version 0.98.6 fixes several security issues:
* bsc#916217, CVE-2015-1461: Remote attackers can have
unspecified impact via Yoda's crypter or mew packer files.
* bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
packer file.
* bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
of service via a crafted petite packer file.
* bsc#915512, CVE-2014-9328: heap out of bounds condition with
crafted upack packer files.
- Obsoletes clamav-soname.patch
-------------------------------------------------------------------
Fri Jan 30 15:19:34 UTC 2015 - max@suse.com

View File

@ -48,7 +48,7 @@ BuildRequires: bzip2
Summary: Antivirus Toolkit
License: GPL-2.0
Group: Productivity/Security
Version: 0.98.5
Version: 0.98.6
Release: 0
Url: http://www.clamav.net
Requires: latex2html-pngicons
@ -67,7 +67,6 @@ Source9: service.clamav-milter
Patch1: clamav-conf.patch
Patch2: clamav-sles9.patch
Patch3: clamav-gcc47.patch
Patch4: clamav-soname.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: systemd
%systemd_requires
@ -90,7 +89,6 @@ and multiple signature languages for detecting threats.
%patch2
%endif
%patch3 -p1
%patch4 -p1
%build
%if 0%{?suse_version} >= 1010