* remove copy of wxWidgets (halves the size of the tarball).
* Decompression and scanning of files in "Xz" compression
format.
* Extraction, decompression, and scanning of files within Apple
Disk Image (DMG) format.
* Extraction, decompression, and scanning of files within
Extensible Archive (XAR) format. XAR format is commonly used
for software packaging, such as PKG and RPM, as well as
general archival.
* Improvements and fixes to extraction and scanning of ole
formats.
* Option to force all scanned data to disk.
* Various improvements to ClamAV configuration, support of third
party libraries, and unit tests.
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=87
- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
entry with a length field corresponding to that entire entry, plus
part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning (forwarded request 125380 from AndreasStieger)
OBS-URL: https://build.opensuse.org/request/show/125471
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=50
- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
entry with a length field corresponding to that entire entry, plus
part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning
OBS-URL: https://build.opensuse.org/request/show/125380
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=62
- New version 0.97.4
* libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
so that we don't fail to re-enable or re-disable it again
(bb#3789)
* misc: performance improvement for HP-UX PA-RISC - patch from
Michael Pelletier <michael.v.pelletier*raytheon.com>
(bb#3926)
* libclamav/pe.c: parse vinfo where varfileinfo occours before
stringfileinfo (bb#3062)
* clamd: add support for on-access scanning on OS X with ClamAuth
(beta)
* libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
* libclamav: fix bytecode whitelisting
* libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
* libclamav/readdb.c: allow comments in all db files (bb#3930)
* libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
* libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
architectures (bb #3894). (forwarded request 109812 from toganm)
OBS-URL: https://build.opensuse.org/request/show/109833
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/clamav?expand=0&rev=47
- New version 0.97.4
* libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
so that we don't fail to re-enable or re-disable it again
(bb#3789)
* misc: performance improvement for HP-UX PA-RISC - patch from
Michael Pelletier <michael.v.pelletier*raytheon.com>
(bb#3926)
* libclamav/pe.c: parse vinfo where varfileinfo occours before
stringfileinfo (bb#3062)
* clamd: add support for on-access scanning on OS X with ClamAuth
(beta)
* libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
* libclamav: fix bytecode whitelisting
* libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
* libclamav/readdb.c: allow comments in all db files (bb#3930)
* libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
* libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
architectures (bb #3894).
OBS-URL: https://build.opensuse.org/request/show/109812
OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=58
