diff options
| author | taca <taca@pkgsrc.org> | 2022-01-13 15:28:22 +0000 |
|---|---|---|
| committer | taca <taca@pkgsrc.org> | 2022-01-13 15:28:22 +0000 |
| commit | 857dacd4f9fc5bbec33966dc9cf5f12ba85473a1 (patch) | |
| tree | 8a8e481e32dec4c8a9196ac5d39a612cb388b756 /security/clamav/Makefile | |
| parent | 1f0852b76509985a5a9a92db287695531771d176 (diff) | |
| download | pkgsrc-857dacd4f9fc5bbec33966dc9cf5f12ba85473a1.tar.gz | |
security/clamav: update to 0.103.5
0.103.5 (2022-01-12)
ClamAV 0.103.5 is a critical patch release with the following fixes:
* CVE-2022-20698<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20698>:
Fix for invalid pointer read that may cause a crash. This issue affects
0.104.1, 0.103.4 and prior when ClamAV is compiled with libjson-c and the
CL_SCAN_GENERAL_COLLECT_METADATA scan option (the clamscan --gen-json
option) is enabled.
Cisco would like to thank Laurent Delosieres of ManoMano for reporting
this vulnerability.
* Fixed ability to disable the file size limit with libclamav C API, like
this:
cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
This issue didn't affect ClamD or ClamScan which also can disable the
limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
or clamscan --max-filesize=0 for ClamScan.
Note: Internally, the max file size is still set to 2 GiB. Disabling the
limit for a scan will fall back on the internal 2 GiB limitation.
* Increased the maximum line length for ClamAV config files from 512 bytes
to 1,024 bytes to allow for longer config option strings.
* SigTool: Fix insufficient buffer size for --list-sigs that caused a
failure when listing a database containing one or more very long
signatures. This fix was backported from 0.104.
Special thanks to the following for code contributions and bug reports:
* Laurent Delosieres
Diffstat (limited to 'security/clamav/Makefile')
| -rw-r--r-- | security/clamav/Makefile | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/security/clamav/Makefile b/security/clamav/Makefile index a03141433c0..86ac5c321e5 100644 --- a/security/clamav/Makefile +++ b/security/clamav/Makefile @@ -1,6 +1,5 @@ -# $NetBSD: Makefile,v 1.81 2021/12/08 16:02:33 adam Exp $ +# $NetBSD: Makefile,v 1.82 2022/01/13 15:28:22 taca Exp $ -PKGREVISION= 1 .include "Makefile.common" COMMENT= Anti-virus toolkit |