Date: Sat, 5 Nov 2005 14:55:20 GMT From: Cristiano Deana <cris@gufi.org> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/88525: Security patch for security/clamav Message-ID: <200511051455.jA5EtK73030384@www.freebsd.org> Resent-Message-ID: <200511051500.jA5F0F6D070268@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 88525
>Category: ports
>Synopsis: Security patch for security/clamav
>Confidential: no
>Severity: serious
>Priority: high
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Sat Nov 05 15:00:15 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator: Cristiano Deana
>Release: FreeBSD 6.0-STABLE
>Organization:
GUFI - FreeBSD Italian User Group
>Environment:
FreeBSD casa.deana.it 6.0-STABLE FreeBSD 6.0-STABLE #3: Sat Nov 5 13:33:04 CET 2005 root@casa.deana.it:/usr/obj/usr/src/sys/CASA i386
>Description:
clamav 0.87 ha a serious bug allowing remote code execution, MUST upgrade to 0.87.1
>How-To-Repeat:
>Fix:
--- Makefile.orig Fri Oct 14 15:40:26 2005
+++ Makefile Sat Nov 5 15:31:57 2005
@@ -7,6 +7,5 @@
PORTNAME= clamav
-PORTVERSION= 0.87
-PORTREVISION= 2
+PORTVERSION= 0.87.1
CATEGORIES= security
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE_EXTENDED}
--- distinfo.orig Tue Sep 20 10:09:03 2005
+++ distinfo Sat Nov 5 15:32:21 2005
@@ -1,2 +1,2 @@
-MD5 (clamav-0.87.tar.gz) = dd0a12deb4f48f760fa1fcd378ae7c24
-SIZE (clamav-0.87.tar.gz) = 4273714
+MD5 (clamav-0.87.1.tar.gz) = bf9f038edf0b6d5f76552e1b8d014b81 SIZE
+(clamav-0.87.1.tar.gz) = 4468992
--- files/patch-clamav-milter_clamav-milter.c.orig Tue Sep 20 21:03:51 2005
+++ files/patch-clamav-milter_clamav-milter.c Thu Jan 1 01:00:00 1970
@@ -1,16 +0,0 @@
-
-$FreeBSD: ports/security/clamav/files/patch-clamav-milter_clamav-milter.c,v 1.3 2005/09/20 19:03:51 simon Exp $
-
---- clamav-milter/clamav-milter.c.orig
-+++ clamav-milter/clamav-milter.c
-@@ -3439,9 +3439,9 @@
- {
- fd_set rfds;
- struct timeval tv;
-+ int ret;
-
- assert(sock >= 0);
-- int ret;
-
- if(readTimeout == 0) {
- do
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200511051455.jA5EtK73030384>