cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update to clamav-0.104.3

Browse Source 
CVE-2022-20803: Fixed a possible double-free vulnerability in the OLE2 file parser.
Issue affects versions 0.104.0 through 0.104.2.

CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM file parser.
Issue affects versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions.

CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the scan verdict cache check.
Issue affects versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2.

CVE-2022-20771: Fixed a possible infinite loop vulnerability in the TIFF file parser.
Issue affects versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions.

CVE-2022-20785: Fixed a possible memory leak in the HTML file parser / Javascript normalizer.
Issue affects versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions.

CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write vulnerability in the
signature database load module.
Issue affects versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions.
This commit is contained in:
sthen 2022-05-05 10:57:55 +00:00
parent 71dd9cfc00
commit eb20b9aa41
4 changed files with 7 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
security/clamav/Makefile
View File

@ -1,5 +1,5 @@
COMMENT= virus scanner
DISTNAME= clamav-0.104.2
DISTNAME= clamav-0.104.3
CATEGORIES= security

4
security/clamav/distinfo
View File

@ -1,2 +1,2 @@
SHA256 (clamav-0.104.2.tar.gz) = PkXkbZqus6aVbtMDdiN6t8TNlXO8D11vwVxYjTCXjZ0=
SIZE (clamav-0.104.2.tar.gz) = 11950409
SHA256 (clamav-0.104.3.tar.gz) = KBz668KiHTJ0bVI8TSOpYwmSq2H8KPVdL4EPKWfBBSE=
SIZE (clamav-0.104.3.tar.gz) = 12017176

20
security/clamav/patches/patch-cmake_FindCURSES_cmake
View File

@ -1,20 +0,0 @@
revert upstream change that breaks build on systems which don't
provide pkg-config files for curses.
https://github.com/Cisco-Talos/clamav/commit/54829910d0254dfb1ec42085279774e202ea74dc
Index: cmake/FindCURSES.cmake
--- cmake/FindCURSES.cmake.orig
+++ cmake/FindCURSES.cmake
@@ -58,7 +58,11 @@ if(NCURSES_NOT_FOUND EQUAL -1)
set(HAVE_LIBNCURSES 1)
set(CURSES_INCLUDE "<ncurses.h>")
- set(CURSES_LIBRARY ${PC_NCurses_LINK_LIBRARIES})
+ find_library(CURSES_LIBRARY
+ NAMES ncurses
+ PATHS ${PC_NCurses_LIBRARY_DIRS}
+ )
+
set(CURSES_VERSION ${PC_NCurses_VERSION})
include(FindPackageHandleStandardArgs)

4
security/clamav/pkg/PLIST
View File

@ -76,6 +76,8 @@ share/doc/clamav/html/appendix/Terminology.html
share/doc/clamav/html/ayu-highlight.css
share/doc/clamav/html/book.js
share/doc/clamav/html/clipboard.min.js
share/doc/clamav/html/community_resources/
share/doc/clamav/html/community_resources/CommunityResources.html
share/doc/clamav/html/css/
share/doc/clamav/html/css/chrome.css
share/doc/clamav/html/css/general.css
@ -91,6 +93,7 @@ share/doc/clamav/html/faq/faq-ignore.html
share/doc/clamav/html/faq/faq-misc.html
share/doc/clamav/html/faq/faq-ml.html
share/doc/clamav/html/faq/faq-pua.html
share/doc/clamav/html/faq/faq-rust.html
share/doc/clamav/html/faq/faq-safebrowsing.html
share/doc/clamav/html/faq/faq-scan-alerts.html
share/doc/clamav/html/faq/faq-troubleshoot.html
@ -169,6 +172,7 @@ share/doc/clamav/html/manual/Signatures/FileTypeMagic.html
share/doc/clamav/html/manual/Signatures/HashSignatures.html
share/doc/clamav/html/manual/Signatures/LogicalSignatures.html
share/doc/clamav/html/manual/Signatures/PhishSigs.html
share/doc/clamav/html/manual/Signatures/SignatureNames.html
share/doc/clamav/html/manual/Signatures/YaraRules.html
share/doc/clamav/html/manual/Usage/
share/doc/clamav/html/manual/Usage.html