clamav 0.105.1: New package to resolve several CVEs

Message ID 20221107175414.3603488-1-matthias.fischer@ipfire.org
State Accepted
Commit c899c04b11709fee4f38e9d13449b0e53527d907
Headers
Series clamav 0.105.1: New package to resolve several CVEs |

Commit Message

Matthias Fischer Nov. 7, 2022, 5:54 p.m. UTC
  For details see:
https://blog.clamav.net/2022/10/new-packages-for-clamav-01037-01044.html

Fixes:

    "CVE-2022-37434 - A critical severity vulnerability in the zlib library.

    CVE-2022-40303 - A high severity vulnerability in the libxml2 library.
    Note: As of writing, the details of this CVE are not published.
    However, you can find additional details on other sites.

    CVE-2022-40304 - A high severity vulnerability in the libxml2 library.
    Note: As of writing, the details of this CVE are not published.
    However, you can find additional details on other sites."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
---
 lfs/clamav | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)
  

Patch

diff --git a/lfs/clamav b/lfs/clamav
index 987c0453a..1cd15ea27 100644
--- a/lfs/clamav
+++ b/lfs/clamav
@@ -27,14 +27,15 @@  include Config
 SUMMARY    = Antivirus Toolkit
 
 VER        = 0.105.1
+SUBVER     = -2
 
 THISAPP    = clamav-$(VER)
-DL_FILE    = $(THISAPP).tar.gz
+DL_FILE    = $(THISAPP)$(SUBVER).tar.gz
 DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = clamav
-PAK_VER    = 62
+PAK_VER    = 63
 
 DEPS       =
 
@@ -50,7 +51,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = be46d9afd76fb536d7de7363a45d38fef6a5983011e3cd0dcc25c2a209c8d37a2bbe1f7f4a5694152cabf622ef83e072b892ae12ba404da1955bb5b654e5216d
+$(DL_FILE)_BLAKE2 = 09e67f4ae4f9689e634aa18cd672b16d8a4cb8b3923527c7c92ffa264b415dc49b5ee82ceaa518cf701a910b49a344753c7d0de894a772b0b871e492c95d60f4
 
 install : $(TARGET)