diff mbox series

clamav: Update to 0.103.2

Message ID 20210407194908.1612-1-matthias.fischer@ipfire.org
State Accepted
Commit 8a65ffe9437f07e1685a1c4c128afbef4c69d435
Headers
Series clamav: Update to 0.103.2 |

Commit Message

Matthias Fischer April 7, 2021, 7:49 p.m. UTC 
  For details see:
https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html

"This is a security patch release with the following fixes:

    CVE-2021-1386: Fix for UnRAR DLL load privilege escalation. Affects 0.103.1 and prior on Windows
    only.

    CVE-2021-1252: Fix for Excel XLM parser infinite loop. Affects 0.103.0 and 0.103.1 only.

    CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. Affects 0.103.0 and 0.103.1
    only.

    CVE-2021-1405: Fix for mail parser NULL-dereference crash. Affects 0.103.1 and prior.

    Fix possible memory leak in PNG parser.

    Fix ClamOnAcc scan on file-creation race condition so files are scanned after their contents are
    written.

    FreshClam: Deprecate the SafeBrowsing config option. The SafeBrowsing option will no longer
    do anything. For more details, see our blog post from last year about the future of the ClamAV Safe
    Browsing database.

        Tip: If creating and hosting your own safebrowing.gdb database, you can use the
        DatabaseCustomURL option in freshclam.conf to download it.

    FreshClam: Improved HTTP 304, 403 and 429 handling.

    FreshClam: Added the mirrors.dat file back to the database directory.

    This new mirrors.dat file will store:
        A randomly generated UUID for the FreshClam User-Agent.
        A retry-after timestamp that so FreshClam won't try to update after having received an
        HTTP 429 response until the Retry-After timeout has expired.

    FreshClam will now exit with a failure in daemon mode if an HTTP 403 (Forbidden) was received
    because the outcome won't change if it tries again later. The FreshClam user will have to take
    appropriate action to get unblocked.

    Fix the FreshClam mirror-sync issue where a downloaded database is "older than the version advertised."

If a new CVD download gets a version that is older than advertised, FreshClam will keep the older version and
retry the update so that the incremental update process (CDIFF patch process) will update to the latest version."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
---
 lfs/clamav | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)
diff mbox series

Patch

diff --git a/lfs/clamav b/lfs/clamav
index 2c4d6a6ba..e36b4003d 100644
--- a/lfs/clamav
+++ b/lfs/clamav
@@ -1,7 +1,7 @@ 
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2020  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2021  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@ 
 
 include Config
 
-VER        = 0.103.1
+VER        = 0.103.2
 
 THISAPP    = clamav-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -32,7 +32,7 @@  DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = clamav
-PAK_VER    = 54
+PAK_VER    = 55
 
 DEPS       =
 
@@ -50,7 +50,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_MD5 = f895e9a261937ed91f5cb3ead4791555
+$(DL_FILE)_MD5 = 508e6988e2937985e702cc3a2202b6e7
 
 install : $(TARGET)