OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=5

clamav-0.90.1.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:8afd4fe3e0dd2d6f25b3f3095dfe9e5d7a8e8785e5611fdd6f5846296f90b492
-size 11205477

clamav-0.90.2.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2d8c6488fb2908793f9b054f80e9890f8557e777713a29b6e354056b3b92dca1
+size 11625070

clamav-daemonize.patch

@@ -1,20 +0,0 @@
---- shared/misc.c
-+++ shared/misc.c
-@@ -268,7 +268,7 @@
- 	int i;
- 
- 
--    if((i = open("/dev/null", O_WRONLY)) == -1) {
-+    if((i = open("/dev/null", O_RDWR)) == -1) {
- 	for(i = 0; i <= 2; i++)
- 	    close(i);
- 
-@@ -276,6 +276,8 @@
- 	dup2(i, 0);
- 	dup2(i, 1);
- 	dup2(i, 2);
-+	if (i > 2)
-+	    close(i);
-     }
- 
-     if(fork())

clamav.changes

@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Fri Apr 13 11:48:12 CEST 2007 - max@suse.de
+
+- Security update: 0.90.2 (#264189)
+- CVE-2007-1997: CAB File Unstore Buffer Overflow Vulnerability
+- CVE-2007-1745: file descriptor leak in CHM handler
+- File descriptor leaks in libclamav/pdf.c and libclamav/lockdb.c
+
 -------------------------------------------------------------------
 Mon Mar  5 16:00:56 CET 2007 - max@suse.de
 

clamav.spec

@@ -1,5 +1,5 @@
 #
-# spec file for package clamav (Version 0.90.1)
+# spec file for package clamav (Version 0.90.2)
 #
 # Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany.
 # This file and all modifications and additions to the pristine
@@ -14,9 +14,12 @@ Name:           clamav
 %if 0%{?suse_version} >= 1010 || 0%{!?suse_version:1}
 BuildRequires:  bc curl-devel gmp-devel pkgconfig tcpd-devel
 %endif
+%if 0%{?suse_version} > 1020
+BuildRequires:  pwdutils
+%endif
 Summary:        Antivirus Toolkit
-Version:        0.90.1
-Release:        2
+Version:        0.90.2
+Release:        1
 License:        GNU General Public License (GPL)
 Group:          Productivity/Security
 URL:            http://www.clamav.net
@@ -28,7 +31,6 @@ Source1:        clamav-rcclamd
 Source2:        clamav-rcfreshclam
 Source3:        clamav-updateclamconf
 Patch1:         %name-conf.patch
-Patch2:         clamav-daemonize.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %description
@@ -66,7 +68,6 @@ Authors:
 %prep
 %setup -q
 %patch1
-%patch2
 
 %build
 %if %suse_version >= 1010
@@ -200,6 +201,11 @@ for distfile in {main,daily}.cvd.dist; do
 done
 
 %changelog
+* Fri Apr 13 2007 - max@suse.de
+- Security update: 0.90.2 (#264189)
+- CVE-2007-1997: CAB File Unstore Buffer Overflow Vulnerability
+- CVE-2007-1745: file descriptor leak in CHM handler
+- File descriptor leaks in libclamav/pdf.c and libclamav/lockdb.c
 * Mon Mar 05 2007 - max@suse.de
 - Extended the database presence check in rcclamd to accept the
   main.inc directory in addition to the main.cvd file, because