public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed
* [PATCH] clamav: Update to version 1.3.1
@ 2024-09-03  9:17 Adolf Belka
  2024-09-03  9:17 ` [PATCH] iotop: Update to version 1.26 Adolf Belka
                   ` (5 more replies)
  0 siblings, 6 replies; 7+ messages in thread
From: Adolf Belka @ 2024-09-03  9:17 UTC (permalink / raw)
  To: development

[-- Attachment #1: Type: text/plain, Size: 2965 bytes --]

- Update from version 1.3.0 to 1.3.1
- Update of rootfile not required
- As we can not upgrade currently to version 1.4.0 due to the rust/ruby issue we need to
   update to 1.3.1 as it has a CVE fix in it.
- There are three rust dependencies that have been updated but all have a rust-1.57
   requirement so have no problem with our current rust-1.67.0 version
- Changelog
    1.3.1
      This is a critical patch release with the following fixes:
	- [CVE-2024-20380](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20380):
	  Fixed a possible crash in the HTML file parser that could cause a
	  denial-of-service (DoS) condition.
	  This issue affects version 1.3.0 only and does not affect prior versions.
	  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1242)
	- Updated select Rust dependencies to the latest versions.
	  This resolved Cargo audit complaints and included PNG parser bug fixes.
	  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1227)
	- Fixed a bug causing some text to be truncated when converting from UTF-16.
	  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1230)
	- Fixed assorted complaints identified by Coverity static analysis.
	  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1235)
	- Fixed a bug causing CVDs downloaded by the `DatabaseCustomURL` Freshclam
	  config option to be pruned and then re-downloaded with every update.
	  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1238)
	- Added the new 'valhalla' database name to the list of optional databases in
	  preparation for future work.
	  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1238)
	- Added symbols to the `libclamav.map` file to enable additional build
	  configurations.
	  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1244)

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/clamav | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/clamav b/lfs/clamav
index 5a1089187..32b4aa4f9 100644
--- a/lfs/clamav
+++ b/lfs/clamav
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Antivirus Toolkit
 
-VER        = 1.3.0
+VER        = 1.3.1
 
 THISAPP    = clamav-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = clamav
-PAK_VER    = 71
+PAK_VER    = 72
 
 DEPS       =
 
@@ -50,7 +50,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = dc411b1a905d2699c497870877fbe99e3910f8e29bc77830085c8ab75161c80066ca1396f47c3cd6a098c06c839464dbe31feb2e7e64622c657ad4a6a9401282
+$(DL_FILE)_BLAKE2 = 49fc5f2f9b4497c095c4d19f86ebcdbcd49cac0e1355c0dbaba8bd56cbbc5af94404b6e6b04fbfb5e3d4364b7ff110b8461f93ba485ddc3f6b56cd86dbe4b362
 
 
 install : $(TARGET)
-- 
2.46.0


^ permalink raw reply	[flat|nested] 7+ messages in thread

end of thread, other threads:[~2024-09-03  9:17 UTC | newest]

Thread overview: 7+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2024-09-03  9:17 [PATCH] clamav: Update to version 1.3.1 Adolf Belka
2024-09-03  9:17 ` [PATCH] iotop: Update to version 1.26 Adolf Belka
2024-09-03  9:17 ` [PATCH] libvirt: Update to version 10.7.0 Adolf Belka
2024-09-03  9:17 ` [PATCH] mcelog: Update to version 200 Adolf Belka
2024-09-03  9:17 ` [PATCH] observium-agent: Update to version 24.4 Adolf Belka
2024-09-03  9:17 ` [PATCH] shairport-sync: Update to version 4.3.4 Adolf Belka
2024-09-03  9:17 ` [PATCH] taglib: Update to version 2.0.2 Adolf Belka

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox