Bump PORTREVISION of all dependent ports.
Fix the build errors in the few ports that still use the long deprecated,
and now obsoleted, cURL options.
Thanks to everyone who took the time to look over the patch!
Discussed on: -ports
logs and use on smtp log. In preparation to update spamcontro to 2.4 series.
- s/unarj/arj/ on clamscan man [1]
- Bump PORTREVISION because man change
Reported by: Anton Yuzhaninov <citrin at citrin.ru> [1]
* CVE-2006-1614
Damian Put discovered an integer overflow in the PE header parser.
This is only exploitable if the ArchiveMaxFileSize option is disabled.
* CVE-2006-1615
Format string vulnerabilities in the logging code have been discovered,
which might lead to the execution of arbitrary code.
* CVE-2006-1630
David Luyer discovered, that ClamAV can be tricked into an invalid
memory access in the cli_bitset_set() function, which may lead to
a denial of service.
- Use USE_RC_SUBR=script
PR: ports/95403
Submitted by: garga
Approved by: maintainer timeout (mnag on behalf of secteam)
Security: VuXML 6a5174bd-c580-11da-9110-00123ffe8333
We have not checked for this KEYWORD for a long time now, so this
is a complete noop, and thus no PORTREVISION bump. Removing it at
this point is mostly for pedantic reasons, and partly to avoid
perpetuating this anachronism by copy and paste to future scripts.
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.
Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.
Preliminary documentation can be found at:
http://people.FreeBSD.org/~ade/autotools.txt
which is in the process of being SGMLized before introduction into the
Porters Handbook.
Light blue touch-paper. Run.
If use LIBUNRAR don't need archivers/unrar
Remake patches to work without autotools
Bump PORTREVISION
PR: 87338
Approved by: Rob <rob@debank.tv> (maintainer)
A possible crash in the libmspack's Quantum decompressor has been fixed.
PR: ports/82604
Submitted by: Renato Botelho <freebsd@galle.com.br>
Approved by: maintainer
- Fix build when libmilter was built with LDAP [2]
PR: ports/77255 [1], ports/77235 [2]
Submitted by: Sergey N. Voronkov <serg@tmn.ru> [1],
Lewis Thompson <lewiz@compsoc.man.ac.uk> [2]
Approved by: Rob Evers <rob@debank.tv> (maintainer)
- Change the last instance of literal `/var/run/clamav' to %%RUNDIR%%.
- Bump PORTREVISION since the changes should improve the functionality
of the installed package.
PR: ports/75607
Approved by: maintainer
2. Shut down clamav daemons in the right order
on uninstall (or else they may refuse to quit.)
3. Use rcorder(8) keywords to guarantee the right
startup/shutdown order of the clamav services.
PR: ports/75607
Approved by: the maintainer
directory to /var/db/clamav and fix removal of db on deinstall)
For the sake of coherence, the ClamAV database should be
installed in /var/db/clamav, not /usr/local/share/clamav.
Also fixes the database removal on package deinstallation.
PR: ports/74172
Submitted by: Jean-Yves Lefort <jylefort@brutele.be>
Approved by: Rob Evers <rob@debank.tv>
+ JPEG comment exploit (MS04-028) detection
*** IMPORTANT ***
The configruration file for the clamd daemon has changed from
/usr/local/etc/clamav.conf to /usr/local/etc/clamd.conf.
PR: 72203
Approved by: Rob Evers <revers@infraqon.nl> (maintainer)
-Improved VBA code
-Scan EVS mails
-Handle bounced messages
-ArchiveDetectEncrypted is renamed to ArchiveBlockEncrypted (config file)
-freshclam: fix SIGHUP handling (patch by Dr Matthew J Seaman)
-Use OPTIONS
-Various bugfixes and code cleanup
-Use FixStaleSocket by default in the config file (don't remove the
Socket when starting clamd)
PR: 65763
Submitted by: Rob Evers <rob@debank.tv> (maintainer)
- new thread manager (with better SMP support)
- new switch ArchiveDetectEncrypted
- new directive: ArchiveDetectEncrypted
- see /usr/local/share/doc/clamav/NEWS
- install html documentation to /usr/local/share/doc/clamav/html
added CLAMAVUSER/CLAMAVGROUP support
Adopted the port to ensure timely fixes in case I broke something :P
Please reset the maintainer if TERAMOTO Masahiro shows up again.
NO_SENDMAIL is used to disable Sendmail build in base system.
It's presence does not inhibit Sendmail installed from port.
Requested by: Marius Strobl <marius@alchemy.franken.de>
Alex Vasylenko <lxv@omut.org>
- fix a trivially remote exploitable DOS vulnerability
<http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/62586>
<http://www.securityfocus.com/archive/1/353186>
while I'm here, fix stale socket removal. Perhaps enabling
FixStaleSocket in clamav.conf would be a better idea, but
I don't want to overuse this security related commit.
PR: 62586, 62601
Submitted by: eik, Vivek Khera <vivek@khera.org>
Reviewed by: bugtraq mailing list
Approved by: security-officer
updated periodically. Loosely based on the script in the PR.
2. Reorder some operations in the various Makefile targets.
3. Bump PORTREVISION.
PR: 61966 [1]
Submitted by: Douglas K. Rand <rand@meridian-enviro.com>
in rc.conf.
Bumped PORTREVISION as this fix may be important for an user.
Mail is on its way to the maintainer but because of the actual virus
situation I do not wait for maintainer approval and commit the fix
right now (the submitter also submitted the startup-script for a previous
commit, so this is mainly a bugfix for a previously approved commit).
Submitted by: Marius Strobl <marius@alchemy.franken.de>
- correct typo in the name of the socket variable (used to remove a stale
socket)
- install the startup script with the correct name (important if you use
clamav-milter too)
Submitted by: Marius Strobl <marius@alchemy.franken.de>
Approved by: maintainer (implizit, this is a bugfix for the previous
version)
be started before clamav-milter the startup-script for clamd
must alphabetically arranged before the startup-script for
clamav-milter. It was decided to use the clamd statup-scrtipt
from security/clamav-devel (clamav-clamd.sh), so users running
an older version of security/clamav have to change
'clamd_enable="YES"' to 'clamav_clamd_enable="YES"' in
/etc/rc.conf. On the other hand this changes makes it easier
to switch between security/clamav and security/clamav-devel.
- Respect PTHREAD_CFLAGS.
- Use USE_LIBTOOL_VER=14 as the libtool shipping with clamav 0.65
erroneously links against libc _and_ libc_r on FreeBSD 4.
- Don't link against libcipher on FreeBSD < 501100, clamav doesn't
depend on it. The linker warnings suggesting that it is required
were triggered by linking against both, libc and libc_r.
- Unconditionally depend on math/libgmp4. Otherwise, if libgmp4 is
already installed on a FreeBSD 4-STABLE system compilation of
security/clamav fails, as the headers of libgmp4 are used but the
base libgmp is used for linking.
- Fix generation of clamav-milter.8 when building with WITH_MILTER
(part of new files/patch-clamav-milter::Makefile.in).
- Don't USE_GETOPT_LONG when compiling with WITH_MILTER, clamav
uses its own getopt_long() regardless if a devel/libgnugetopt is
installed or the version in the base of FreeBSD 5 is present.
- Allow compilation of WITH_MILTER with mail/sendmail.
- Install a startup-script (taken from security/clamav-devel with some
fixes in comments) for clamav-milter when compiled with WITH_MILTER.
- In pkg-descr remove the note that clamav-milter doesn't build on
FreeBSD 4 with base gcc, it builds fine there. Mention that
clamav-milter can be optionally used (taken from pkg-descr of
security/clamav-devel).
- Fix compilation when an older version of security/clamav is installed.
If there's an older version of libclamav installed clamav 0.65 will
link against it instead of the newly built one. This is not a problem
if the installed version is compatible with the new one as libclamav
gets linked dynamically and the installed version will be replaced
with the new one. However, if the older version is incompatible
linking of clamav 0.65 fails. This problem was discovered by
Jan-Peter Koopmann Jan-Peter.Koopmann@seceidos.de and the fix
(most of the new patches in the files directory) confirmed working.
- In clamav-milter replace the path to the used sendmail executable with
the location of the mailwrapper(8) (/usr/sbin/sendmail). Obtained
from security/clamav-devel.
PR: 59948
Submitted by: Marius Strobl <marius@alchemy.franken.de>
Approved by: maintainer
as libgmp no longer exists in 5.x, add the needed dependency
to this Makefile.
(Note that stale gmp.h and libgmp files sitting around may
still cause problems, anyone with an "old" 5.x system that
sees oddities in the build should make sure that those old
files are purged from /usr/lib and /usr/include.)
- use included libtool (seems heavily patched)
- make packageable and include a working configure file
- add a rcNG start/stop script
- added web site
- don't install useless .la files
- use DATADIR
- 510001 is FreeBSD 5.10, 5.1-CURRENT is 501100
- minor cleanup
PR: 57256
Submitted by: eikemeier@fillmore-labs.com
o Remove unnecsesary patches for current.
o Add/remove users when installing/removing.
o Set permissions on virus database dir.
PR: ports/53305
Submitted by: Rob Evers<rob@debank.tv>
Approved by: TERAMOTO Masahiro <markun@onohara.to> (maintainer)
Turn on building clamd and clamdscan.
PR: 53056
Pointed out by: Olivier Tharan <olive@oban.frmug.org>
Submitted by: TERAMOTO Masahiro <markun@onohara.to>
Submitted by:
Reviewed by:
Approved by:
Obtained from:
MFC after:
Maintainer update: Clam AntiVirus contains OAV database, but its database is
developed independently.
Pointed out by Tomasz Kojim <zolw@konarski.edu.pl>
developer of Clam AntiVirus
