Path to this page:
Subject: CVS commit: [pkgsrc-2014Q4] pkgsrc/security/clamav
From: Matthias Scheler
Date: 2015-03-01 15:26:41
Message id: 20150301142641.71B8D98@cvs.netbsd.org
Log Message:
Pullup ticket #4630 - requested by hiramatsu
security/clamav: security update
Revisions pulled up:
- security/clamav/Makefile 1.21
- security/clamav/distinfo 1.16
---
Module Name: pkgsrc
Committed By: hiramatsu
Date: Tue Feb 24 07:28:59 UTC 2015
Modified Files:
pkgsrc/security/clamav: Makefile distinfo
Log Message:
Update clamav to 0.98.6.
Changes from 0.98.5.
--------------------
- library shared object revisions.
- installation issues on some Mac OS X and FreeBSD platforms.
- includes a patch from Sebastian Andrzej Siewior making
ClamAV pid files compatible with systemd.
- Fix a heap out of bounds condition with crafted Yoda's
crypter files. This issue was discovered by Felix Groebert
of the Google Security Team.
- Fix a heap out of bounds condition with crafted mew packer
files. This issue was discovered by Felix Groebert of the
Google Security Team.
- Fix a heap out of bounds condition with crafted upx packer
files. This issue was discovered by Kevin Szkudlapski of
Quarkslab.
- Fix a heap out of bounds condition with crafted upack packer
files. This issue was discovered by Sebastian Andrzej Siewior.
CVE-2014-9328.
- Compensate a crash due to incorrect compiler optimization when
handling crafted petite packer files. This issue was discovered
by Sebastian Andrzej Siewior.
Files: