From mboxrd@z Thu Jan  1 00:00:00 1970
From: Peter =?utf-8?q?M=C3=BCller?= <peter.mueller@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] clamav: Update to 0.104.2
Date: Fri, 14 Jan 2022 16:12:53 +0000
Message-ID: <6d501ab7-a7e7-bdcd-0516-1449866a8abb@ipfire.org>
In-Reply-To: <20220114161107.2146-1-matthias.fischer@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3031596694579589076=="
List-Id: <development.lists.ipfire.org>

--===============3031596694579589076==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Reviewed-by: Peter M=C3=BCller <peter.mueller(a)ipfire.org>

> For details see:
> https://blog.clamav.net/2022/01/clamav-01035-and-01042-security-patch.html
>=20
> "ClamAV 0.104.2 is a critical patch release with the following fixes:
>=20
> CVE-2022-20698: Fix for invalid pointer read that may cause a crash.
> Affects 0.104.1, 0.103.4 and prior when ClamAV is compiled with libjson-c
> and the CL_SCAN_GENERAL_COLLECT_METADATA scan option (the clamscan
> --gen-json option) is enabled.
> ..."
>=20
> Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
> ---
>  lfs/clamav | 8 ++++----
>  1 file changed, 4 insertions(+), 4 deletions(-)
>=20
> diff --git a/lfs/clamav b/lfs/clamav
> index 69e5d8c0f..1fffd99d9 100644
> --- a/lfs/clamav
> +++ b/lfs/clamav
> @@ -1,7 +1,7 @@
>  ##########################################################################=
#####
>  #                                                                         =
    #
>  # IPFire.org - A linux based firewall                                     =
    #
> -# Copyright (C) 2007-2021  IPFire Team  <info(a)ipfire.org>               =
      #
> +# Copyright (C) 2007-2022  IPFire Team  <info(a)ipfire.org>               =
      #
>  #                                                                         =
    #
>  # This program is free software: you can redistribute it and/or modify    =
    #
>  # it under the terms of the GNU General Public License as published by    =
    #
> @@ -24,7 +24,7 @@
> =20
>  include Config
> =20
> -VER        =3D 0.104.1
> +VER        =3D 0.104.2
> =20
>  THISAPP    =3D clamav-$(VER)
>  DL_FILE    =3D $(THISAPP).tar.gz
> @@ -32,7 +32,7 @@ DL_FROM    =3D $(URL_IPFIRE)
>  DIR_APP    =3D $(DIR_SRC)/$(THISAPP)
>  TARGET     =3D $(DIR_INFO)/$(THISAPP)
>  PROG       =3D clamav
> -PAK_VER    =3D 58
> +PAK_VER    =3D 59
> =20
>  DEPS       =3D
> =20
> @@ -46,7 +46,7 @@ objects =3D $(DL_FILE)
> =20
>  $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE)
> =20
> -$(DL_FILE)_MD5 =3D 49b9bb94d5b2cafc761f8fbe660d3bfa
> +$(DL_FILE)_MD5 =3D ad099675f2c09c07850e36496b06c552
> =20
>  install : $(TARGET)
> =20

--===============3031596694579589076==--