clamav/clamav-fips.patch
Reinhard Max 29a48de7ff - New version 1.4.2:
* CVE-2025-20128: Fixed a possible buffer overflow read bug in
    the OLE2 file parser that could cause a denial-of-service (DoS)
    condition.

OBS-URL: https://build.opensuse.org/package/show/security/clamav?expand=0&rev=272
2025-01-22 18:21:29 +00:00

13 lines
227 B
Diff

--- libclamav/crypto.c.orig
+++ libclamav/crypto.c
@@ -145,6 +145,9 @@ int cl_initialize_crypto(void)
ERR_load_crypto_strings();
#endif
+ /* avoid fips issues */
+ EVP_add_digest(EVP_md5());
+
return 0;
}