pool/clamav
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
136 Commits 2 Branches 0 Tags
Commit Graph

136 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Dominique Leuenberger
1a3fe256a2 Accepting request 314723 from security 
1

OBS-URL: https://build.opensuse.org/request/show/314723
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=77
 2015-07-02 20:50:45 +00:00
Reinhard Max
d1e009b238 Accepting request 314711 from home:pluskalm:branches:security 
- Make clamd and clamav-milter services depend on freshclam as
  they need it

OBS-URL: https://build.opensuse.org/request/show/314711
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=120
 2015-07-01 13:01:41 +00:00
Stephan Kulow
c1139d0047 Accepting request 305579 from security 
- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.

OBS-URL: https://build.opensuse.org/request/show/305579
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=76
 2015-05-07 06:29:09 +00:00
Reinhard Max
116d5ae918 OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=118 2015-05-06 12:57:46 +00:00
Reinhard Max
820d5ab130 - Version 0.98.7 fixes several security issues (bsc#929192) and 
other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.

OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=117
 2015-05-05 17:04:23 +00:00
Dominique Leuenberger
c3d87fe7f4 Accepting request 284469 from security 
- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch

OBS-URL: https://build.opensuse.org/request/show/284469
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=75
 2015-02-06 21:38:06 +00:00
Reinhard Max
e02bbc5b40 - Version 0.98.6 fixes several security issues: 
* bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch

OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=115
 2015-02-05 11:43:54 +00:00
Dominique Leuenberger
7f9dc647f8 Accepting request 283477 from security 
- Don't need sendmail for building clamav-milter anymore,
  sendmail-devel is enough (bnc#915414).

- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.
- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193,
  clamav-soname.patch).

OBS-URL: https://build.opensuse.org/request/show/283477
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=74
 2015-01-30 19:31:51 +00:00
Reinhard Max
9f9980f068 - Don't need sendmail for building clamav-milter anymore, 
sendmail-devel is enough (bnc#915414).

OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=113
 2015-01-30 15:22:56 +00:00
Reinhard Max
8bcbc54867 Mention new patch in changes file 
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=112
 2015-01-23 16:29:49 +00:00
Reinhard Max
99c3101ce3 - bnc#914505: Config file merging and temp file creation got moved 
to %pre by mistake. Put them back to %post.
- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193).

OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=111
 2015-01-23 14:07:57 +00:00
Dominique Leuenberger
481d7e613a Accepting request 267016 from security 
1

OBS-URL: https://build.opensuse.org/request/show/267016
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=73
 2015-01-03 21:01:06 +00:00
Marcus Meissner
b85a1eb8ca Accepting request 266991 from home:msmeissn:branches:security 
- build with PIE

OBS-URL: https://build.opensuse.org/request/show/266991
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=109
 2015-01-02 08:49:36 +00:00
Dominique Leuenberger
b908e31c82 Accepting request 263145 from security 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/263145
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=72
 2014-11-28 07:44:36 +00:00
Reinhard Max
82b4700cc8 Version 0.98.5 
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=107
 2014-11-19 15:50:31 +00:00
Dominique Leuenberger
7d3f73404e Accepting request 260626 from security 
1

OBS-URL: https://build.opensuse.org/request/show/260626
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=71
 2014-11-10 16:28:56 +00:00
Marcus Meissner
1bc819d92e Accepting request 260428 from home:Ledest:misc 
fix bashism in pre script

OBS-URL: https://build.opensuse.org/request/show/260428
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=105
 2014-11-10 10:17:19 +00:00
Stephan Kulow
5948c0a431 Accepting request 239485 from security 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/239485
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=69
 2014-07-04 07:34:55 +00:00
Reinhard Max
9354c3737c Preliminary checkin fixing various security holes. 
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=103
 2014-06-26 15:35:06 +00:00
Stephan Kulow
27a2f3123a Accepting request 238066 from security 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/238066
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=68
 2014-06-23 07:23:52 +00:00
Reinhard Max
9eebf39f01 - Fix dangling symlink in documentation (bnc#872682). 
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.

OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=101
 2014-06-12 13:36:29 +00:00
Stephan Kulow
8c93e5fff5 Accepting request 233239 from security 
- Version 0.98.3

OBS-URL: https://build.opensuse.org/request/show/233239
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=67
 2014-05-09 18:30:13 +00:00
Reinhard Max
019b469993 - Version 0.98.3 
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=99
 2014-05-08 15:21:16 +00:00
Stephan Kulow
cec2b505ec Accepting request 231146 from security 
- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64 (forwarded request 231142 from dirkmueller)

OBS-URL: https://build.opensuse.org/request/show/231146
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=66
 2014-05-02 07:51:38 +00:00
Reinhard Max
ab126c170e Accepting request 231142 from devel:ARM:Factory 
- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64

OBS-URL: https://build.opensuse.org/request/show/231142
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=97
 2014-04-23 11:33:39 +00:00
Stephan Kulow
5fc69a483a Accepting request 228125 from security 
- initial systemd support unit files (forwarded request 226920 from bmanojlovic)

OBS-URL: https://build.opensuse.org/request/show/228125
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=65
 2014-03-30 05:58:39 +00:00
Marcus Meissner
e543ab3c80 Accepting request 226920 from home:bmanojlovic:branches:security 
- initial systemd support unit files

OBS-URL: https://build.opensuse.org/request/show/226920
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=95
 2014-03-28 16:04:21 +00:00
Stephan Kulow
a9e6ba286c Accepting request 223389 from security 
- add fanotify systemcalls for power, s390 and arm (forwarded request 223009 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/223389
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=64
 2014-02-22 17:07:14 +00:00
Reinhard Max
a8582c8355 Accepting request 223009 from home:msmeissn:branches:security 
- add fanotify systemcalls for power, s390 and arm

OBS-URL: https://build.opensuse.org/request/show/223009
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=93
 2014-02-21 14:43:48 +00:00
Reinhard Max
aaf08ee937 Improve changes entry for 0.98.1 
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=92
 2014-02-17 12:55:24 +00:00
Stephan Kulow
023acaa87c Accepting request 220894 from security 
- Improve handling of /var/run/clamav.

OBS-URL: https://build.opensuse.org/request/show/220894
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=63
 2014-02-06 05:47:14 +00:00
Reinhard Max
2e3ac5bbfe Add missing separator lines to .changes. 
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=90
 2014-02-04 18:24:39 +00:00
Reinhard Max
bc9c8634ed - Improve handling of /var/run/clamav. 
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=89
 2014-02-04 14:37:44 +00:00
Stephan Kulow
9e4f65d940 Accepting request 220513 from security 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/220513
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=62
 2014-02-01 07:43:18 +00:00
Reinhard Max
409168917e - Version 0.98.1: 
* remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.

OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=87
 2014-01-24 15:48:31 +00:00
Stephan Kulow
3efa592759 Accepting request 212242 from security 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/212242
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=61
 2013-12-30 08:49:51 +00:00
Reinhard Max
fddb1b1ad5 Accepting request 211259 from openSUSE:Factory:PowerLE 
- fix build failures on ppc64le:
  * fanotify is only supported on x86 platforms
  * building tomsfastmath on (non-x86) 64-bit platforms requires -DFP_64BIT

OBS-URL: https://build.opensuse.org/request/show/211259
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=85
 2013-12-18 08:10:11 +00:00
Tomáš Chvátal
a865820f45 Accepting request 201270 from security 
- Version 0.98 (bnc#841815)
 * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
 * code quality fixes on libclamav, libclamunrar and freshclam
 * valgrind suppression rules for dl_catch_error complaints
 * bb #8385: PDF ASCII85Decode zero-length fix
 * libclamav: SCAN_ALL mode fixes
 * bb #7436: elf64 header early exit
 * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.

OBS-URL: https://build.opensuse.org/request/show/201270
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=60
 2013-09-30 15:51:28 +00:00
Marcus Meissner
9715995115 OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=83 2013-09-28 07:50:07 +00:00
Marcus Meissner
43c9963191 - Version 0.98 (bnc#841815) 
* code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
 * code quality fixes on libclamav, libclamunrar and freshclam
 * valgrind suppression rules for dl_catch_error complaints
 * bb #8385: PDF ASCII85Decode zero-length fix
 * libclamav: SCAN_ALL mode fixes
 * bb #7436: elf64 header early exit
 * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.

OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=82
 2013-09-28 07:41:14 +00:00
Marcus Meissner
4b519d3c75 Accepting request 201239 from home:lemmy04 
OBS-URL: https://build.opensuse.org/request/show/201239
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=81
 2013-09-28 07:38:07 +00:00
Stephan Kulow
0edb5cac9e Accepting request 173882 from security 
- mirror the amavisd-new change of /var/spool/amavis bnc#663726

- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team

OBS-URL: https://build.opensuse.org/request/show/173882
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=58
 2013-05-02 10:34:00 +00:00
Marcus Meissner
7f2aa965eb - mirror the amavisd-new change of /var/spool/amavis bnc#663726 
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=79
 2013-04-29 14:32:27 +00:00
Marcus Meissner
42563f5417 - Version 0.97.8 (bnc#816865) 
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=78
 2013-04-29 09:50:53 +00:00
Marcus Meissner
b9426dfc54 Accepting request 173623 from home:ecsos 
update to 0.97.8

OBS-URL: https://build.opensuse.org/request/show/173623
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=77
 2013-04-29 09:38:54 +00:00
Stephan Kulow
7eafa37df0 Accepting request 160305 from security 
- Version 0.97.7 (bnc#809945)
  * several hardening fixes.

OBS-URL: https://build.opensuse.org/request/show/160305
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=57
 2013-03-21 09:37:11 +00:00
Reinhard Max
2758bfd427 - Version 0.97.7 (bnc#809945) 
* several hardening fixes.

OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=75
 2013-03-20 17:47:08 +00:00
Stephan Kulow
9b1f342df8 Accepting request 148454 from security 
- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts (forwarded request 148449 from m_meister)

OBS-URL: https://build.opensuse.org/request/show/148454
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=55
 2013-01-17 08:37:23 +00:00
Reinhard Max
a7d93681e5 Accepting request 148449 from home:m_meister:branches:security 
- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts

OBS-URL: https://build.opensuse.org/request/show/148449
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=73
 2013-01-14 15:06:55 +00:00
Stephan Kulow
a19facfab0 Accepting request 147211 from security 
- update daily.cvd to ver. 16364 
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions (forwarded request 147180 from AndreasStieger)

OBS-URL: https://build.opensuse.org/request/show/147211
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=54
 2013-01-07 14:01:33 +00:00