Date: Thu, 13 Jan 2022 03:33:21 GMT From: Yasuhiro Kimura <yasu@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: bc8209a61f26 - main - security/vuxml: Document invalid pointer read vulnerability in ClamAV. Message-ID: <202201130333.20D3XL2Y000906@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by yasu: URL: https://cgit.FreeBSD.org/ports/commit/?id=bc8209a61f26947aad22b8d04f8906bb3e98a7d1 commit bc8209a61f26947aad22b8d04f8906bb3e98a7d1 Author: Yasuhiro Kimura <yasu@FreeBSD.org> AuthorDate: 2022-01-13 02:35:00 +0000 Commit: Yasuhiro Kimura <yasu@FreeBSD.org> CommitDate: 2022-01-13 03:32:20 +0000 security/vuxml: Document invalid pointer read vulnerability in ClamAV. --- security/vuxml/vuln-2022.xml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml index 44af6ee9520a..8dbd45f6186e 100644 --- a/security/vuxml/vuln-2022.xml +++ b/security/vuxml/vuln-2022.xml @@ -1,3 +1,38 @@ + <vuln vid="2a6106c6-73e5-11ec-8fa2-0800270512f4"> + <topic>clamav -- invalid pointer read that may cause a crash</topic> + <affects> + <package> + <name>clamav</name> + <range><lt>0.104.2,1</lt></range> + </package> + <package> + <name>clamav-lts</name> + <range><lt>0.103.5,1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Laurent Delosieres reports:</p> + <blockquote cite="https://blog.clamav.net/2022/01/clamav-01035-and-01042-security-patch.html">; + <p> + Fix for invalid pointer read that may cause a crash. This issue affects + 0.104.1, 0.103.4 and prior when ClamAV is compiled with libjson-c and the + <code>CL_SCAN_GENERAL_COLLECT_METADATA</code> scan option + (the <code>clamscan --gen-json</code> option) is enabled. + </p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2022-20698</cvename> + <url>https://blog.clamav.net/2022/01/clamav-01035-and-01042-security-patch.html</url>; + </references> + <dates> + <discovery>2022-01-12</discovery> + <entry>2022-01-12</entry> + </dates> + </vuln> + <vuln vid="672eeea9-a070-4f88-b0f1-007e90a2cbc3"> <topic>jenkins -- multiple vulnerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202201130333.20D3XL2Y000906>