From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] clamav: Update to 1.0.1
Date: Mon, 20 Feb 2023 16:30:47 +0000
Message-ID: <3F04B7AD-99C7-489B-B9C8-6493DBE185B9@ipfire.org>
In-Reply-To: <20230217180048.1770-1-matthias.fischer@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============7632986697949993689=="
List-Id: <development.lists.ipfire.org>

--===============7632986697949993689==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Thank you. As this is rather critical, I merged this into c173.

> On 17 Feb 2023, at 18:00, Matthias Fischer <matthias.fischer(a)ipfire.org> =
wrote:
>=20
> For details see:
> https://blog.clamav.net/2023/02/clamav-01038-01052-and-101-patch.html
>=20
> "ClamAV 1.0.1 is a critical patch release with the following fixes:
>=20
>    CVE-2023-20032: Fixed a possible remote code execution
>    vulnerability in the HFS+ file parser. The issue affects versions
>    1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
>    Thank you to Simon Scannell for reporting this issue.
>=20
>    CVE-2023-20052: Fixed a possible remote information leak
>    vulnerability in the DMG file parser. The issue affects versions
>    1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
>    Thank you to Simon Scannell for reporting this issue.
>=20
>    Fix an allmatch detection issue with the preclass bytecode hook."
>=20
> Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
> ---
> lfs/clamav | 6 +++---
> 1 file changed, 3 insertions(+), 3 deletions(-)
>=20
> diff --git a/lfs/clamav b/lfs/clamav
> index 24c13f00b..426321c05 100644
> --- a/lfs/clamav
> +++ b/lfs/clamav
> @@ -26,7 +26,7 @@ include Config
>=20
> SUMMARY    =3D Antivirus Toolkit
>=20
> -VER        =3D 1.0.0
> +VER        =3D 1.0.1
>=20
> THISAPP    =3D clamav-$(VER)
> DL_FILE    =3D $(THISAPP).tar.gz
> @@ -34,7 +34,7 @@ DL_FROM    =3D $(URL_IPFIRE)
> DIR_APP    =3D $(DIR_SRC)/$(THISAPP)
> TARGET     =3D $(DIR_INFO)/$(THISAPP)
> PROG       =3D clamav
> -PAK_VER    =3D 64
> +PAK_VER    =3D 65
>=20
> DEPS       =3D
>=20
> @@ -50,7 +50,7 @@ objects =3D $(DL_FILE)
>=20
> $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE)
>=20
> -$(DL_FILE)_BLAKE2 =3D 62d00a9ceb1849d1517f34194daaa3bb8bbc904e81e3a20791cf=
0b5f557587cc497e23feb38cdfbb8b152446821eb20d9a4bce18a0c83d1c31474bfed9944c69
> +$(DL_FILE)_BLAKE2 =3D 8f216051eeb94a9196849c9edff2fe0c73e4aa3ca242cf72d91c=
1692eb2a4688f8e525f638b6870a2f934976435a4272a1f116c1cf3a7cfd194efa91f11fd135
>=20
> install : $(TARGET)
>=20
> --=20
> 2.34.1
>=20


--===============7632986697949993689==--