From dbbdf5e26efedef21283e6ccd639f1724e49adcc Mon Sep 17 00:00:00 2001 From: Robert Scheck Date: Apr 14 2008 20:31:45 +0000 Subject: - Upgrade to 0.93 (SECURITY): - CVE-2008-1100 Upack processing buffer overflow (#442360) - Removed *.inc directories; got replaced by *.cld containers --- diff --git a/.cvsignore b/.cvsignore index 9a29028..069bca4 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -clamav-0.92.1-norar.tar.bz2 +clamav-0.93-norar.tar.bz2 diff --git a/clamav-0.92-nounrar.patch b/clamav-0.92-nounrar.patch deleted file mode 100644 index b63921e..0000000 --- a/clamav-0.92-nounrar.patch +++ /dev/null @@ -1,57 +0,0 @@ -diff -up clamav-0.92/Makefile.in.BAD clamav-0.92/Makefile.in ---- clamav-0.92/Makefile.in.BAD 2007-12-21 12:39:00.000000000 -0500 -+++ clamav-0.92/Makefile.in 2007-12-21 12:39:11.000000000 -0500 -@@ -242,7 +242,7 @@ target_os = @target_os@ - target_vendor = @target_vendor@ - top_builddir = @top_builddir@ - top_srcdir = @top_srcdir@ --SUBDIRS = libclamunrar libclamunrar_iface libclamav clamscan clamd clamdscan freshclam sigtool clamconf database docs etc clamav-milter -+SUBDIRS = libclamav clamscan clamd clamdscan freshclam sigtool clamconf database docs etc clamav-milter - EXTRA_DIST = FAQ contrib test examples BUGS shared libclamav.pc.in UPGRADE COPYING.nsis COPYING.unrar COPYING.LGPL - bin_SCRIPTS = clamav-config - pkgconfigdir = $(libdir)/pkgconfig -diff -up clamav-0.92/configure.in.BAD clamav-0.92/configure.in ---- clamav-0.92/configure.in.BAD 2007-12-21 12:37:51.000000000 -0500 -+++ clamav-0.92/configure.in 2007-12-21 12:38:00.000000000 -0500 -@@ -1214,8 +1214,6 @@ AC_MSG_RESULT($have_signed_rightshift_ex - AC_C_FPU_BIGENDIAN - - AC_OUTPUT([ --libclamunrar/Makefile --libclamunrar_iface/Makefile - libclamav/Makefile - clamscan/Makefile - database/Makefile -diff -up clamav-0.92/Makefile.am.BAD clamav-0.92/Makefile.am ---- clamav-0.92/Makefile.am.BAD 2007-12-21 12:38:39.000000000 -0500 -+++ clamav-0.92/Makefile.am 2007-12-21 12:38:47.000000000 -0500 -@@ -16,7 +16,7 @@ - # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, - # MA 02110-1301, USA. - --SUBDIRS = libclamunrar libclamunrar_iface libclamav clamscan clamd clamdscan freshclam sigtool clamconf database docs etc clamav-milter -+SUBDIRS = libclamav clamscan clamd clamdscan freshclam sigtool clamconf database docs etc clamav-milter - EXTRA_DIST = FAQ contrib test examples BUGS shared libclamav.pc.in UPGRADE COPYING.nsis COPYING.unrar COPYING.LGPL - - bin_SCRIPTS=clamav-config -diff -up clamav-0.92/configure.BAD clamav-0.92/configure ---- clamav-0.92/configure.BAD 2007-12-21 12:45:38.000000000 -0500 -+++ clamav-0.92/configure 2007-12-21 12:46:05.000000000 -0500 -@@ -26397,7 +26397,7 @@ echo "$as_me: WARNING: Unable to determi - esac - - --ac_config_files="$ac_config_files libclamunrar/Makefile libclamunrar_iface/Makefile libclamav/Makefile clamscan/Makefile database/Makefile docs/Makefile clamd/Makefile clamdscan/Makefile clamav-milter/Makefile freshclam/Makefile sigtool/Makefile clamconf/Makefile etc/Makefile Makefile clamav-config libclamav.pc docs/man/clamav-milter.8 docs/man/clamconf.1 docs/man/clamd.8 docs/man/clamd.conf.5 docs/man/clamdscan.1 docs/man/clamscan.1 docs/man/freshclam.1 docs/man/freshclam.conf.5 docs/man/sigtool.1" -+ac_config_files="$ac_config_files libclamav/Makefile clamscan/Makefile database/Makefile docs/Makefile clamd/Makefile clamdscan/Makefile clamav-milter/Makefile freshclam/Makefile sigtool/Makefile clamconf/Makefile etc/Makefile Makefile clamav-config libclamav.pc docs/man/clamav-milter.8 docs/man/clamconf.1 docs/man/clamd.8 docs/man/clamd.conf.5 docs/man/clamdscan.1 docs/man/clamscan.1 docs/man/freshclam.1 docs/man/freshclam.conf.5 docs/man/sigtool.1" - - cat >confcache <<\_ACEOF - # This file is a shell script that caches the results of configure -@@ -27013,8 +27013,6 @@ do - case $ac_config_target in - "clamav-config.h") CONFIG_HEADERS="$CONFIG_HEADERS clamav-config.h" ;; - "depfiles") CONFIG_COMMANDS="$CONFIG_COMMANDS depfiles" ;; -- "libclamunrar/Makefile") CONFIG_FILES="$CONFIG_FILES libclamunrar/Makefile" ;; -- "libclamunrar_iface/Makefile") CONFIG_FILES="$CONFIG_FILES libclamunrar_iface/Makefile" ;; - "libclamav/Makefile") CONFIG_FILES="$CONFIG_FILES libclamav/Makefile" ;; - "clamscan/Makefile") CONFIG_FILES="$CONFIG_FILES clamscan/Makefile" ;; - "database/Makefile") CONFIG_FILES="$CONFIG_FILES database/Makefile" ;; diff --git a/clamav.spec b/clamav.spec index a0dff5c..a6c30f4 100644 --- a/clamav.spec +++ b/clamav.spec @@ -1,4 +1,4 @@ -## $Id: clamav.spec,v 1.48 2007/12/21 19:23:28 spot Exp $ +## $Id: clamav.spec,v 1.49 2008/02/14 16:00:40 robert Exp $ ## Fedora Extras specific customization below... # %bcond_without fedora @@ -17,7 +17,7 @@ Summary: End-user tools for the Clam Antivirus scanner Name: clamav -Version: 0.92.1 +Version: 0.93 Release: %release_func 1 License: GPLv2 @@ -42,7 +42,6 @@ Patch21: clamav-0.70-path.patch Patch22: clamav-0.80-initoff.patch Patch24: clamav-0.90rc3-private.patch Patch25: clamav-0.92-open.patch -Patch26: clamav-0.92-nounrar.patch BuildRoot: %_tmppath/%name-%version-%release-root Requires: clamav-lib = %version-%release Requires: data(clamav) @@ -235,7 +234,9 @@ The SysV initscripts for clamav-milter. %patch22 -p1 -b .initoff %patch24 -p1 -b .private %patch25 -p1 -b .open -%patch26 -p1 -b .nounrar + +mkdir -p libclamunrar{,_iface} +touch libclamunrar/{Makefile.in,all,install} perl -pi -e 's!^(#?LogFile ).*!\1/var/log/clamd.!g; s!^#?(LocalSocket ).*!\1/var/run/clamd./clamd.sock!g; @@ -291,14 +292,13 @@ install -d -m755 \ ${RPM_BUILD_ROOT}%milterstatedir \ ${RPM_BUILD_ROOT}%pkgdatadir/template \ ${RPM_BUILD_ROOT}%_initrddir \ - ${RPM_BUILD_ROOT}%homedir/daily.inc + ${RPM_BUILD_ROOT}%homedir rm -f ${RPM_BUILD_ROOT}%_sysconfdir/clamd.conf \ ${RPM_BUILD_ROOT}%_libdir/*.la -for i in COPYING daily.{db,fp,hdb,info,ndb,pdb,zmd}; do - touch ${RPM_BUILD_ROOT}%homedir/daily.inc/$i -done +touch ${RPM_BUILD_ROOT}%homedir/daily.cld +touch ${RPM_BUILD_ROOT}%homedir/main.cld ## prepare the server-files @@ -439,7 +439,6 @@ test "$1" = 0 || %_initrddir/clamav-milter condrestart >/dev/null || : %files filesystem %attr(-,%username,%username) %dir %homedir -%attr(-,%username,%username) %dir %homedir/daily.inc %attr(-,root,root) %dir %pkgdatadir ## ----------------------- @@ -454,7 +453,7 @@ test "$1" = 0 || %_initrddir/clamav-milter condrestart >/dev/null || : %files data-empty %defattr(-,%username,%username,-) -%ghost %attr(0664,%username,%username) %homedir/main.cvd +%ghost %attr(0664,%username,%username) %homedir/*.cvd ## ----------------------- @@ -470,14 +469,7 @@ test "$1" = 0 || %_initrddir/clamav-milter condrestart >/dev/null || : %ghost %attr(0664,root,%username) %verify(not size md5 mtime) %freshclamlog -%ghost %attr(0664,%username,%username) %homedir/daily.inc/COPYING -%ghost %attr(0664,%username,%username) %homedir/daily.inc/daily.db -%ghost %attr(0664,%username,%username) %homedir/daily.inc/daily.fp -%ghost %attr(0664,%username,%username) %homedir/daily.inc/daily.hdb -%ghost %attr(0664,%username,%username) %homedir/daily.inc/daily.info -%ghost %attr(0664,%username,%username) %homedir/daily.inc/daily.ndb -%ghost %attr(0664,%username,%username) %homedir/daily.inc/daily.pdb -%ghost %attr(0664,%username,%username) %homedir/daily.inc/daily.zmd +%ghost %attr(0664,%username,%username) %homedir/*.cld ## ----------------------- @@ -519,6 +511,11 @@ test "$1" = 0 || %_initrddir/clamav-milter condrestart >/dev/null || : %changelog +* Mon Apr 14 2008 Robert Scheck - 0.93-1 +- Upgrade to 0.93 (SECURITY): +- CVE-2008-1100 Upack processing buffer overflow (#442360) +- Removed *.inc directories; got replaced by *.cld containers + * Thu Feb 14 2008 Robert Scheck - 0.92.1-1 - Upgrade to 0.92.1 (SECURITY): - CVE-2008-0318 Integer overflow in libclamav (#432623) diff --git a/sources b/sources index 6e9b8a3..444be31 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -aecbcc39bf5b85e8967ddfa2bef4eb90 clamav-0.92.1-norar.tar.bz2 +141ea153f0bf19e98f914d3e855cb715 clamav-0.93-norar.tar.bz2