96d637a4a8
0.103.5 (2022-01-12) ClamAV 0.103.5 is a critical patch release with the following fixes: * CVE-2022-20698<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20698>: Fix for invalid pointer read that may cause a crash. This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option (the clamscan --gen-json option) is enabled. Cisco would like to thank Laurent Delosieres of ManoMano for reporting this vulnerability. * Fixed ability to disable the file size limit with libclamav C API, like this: cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0); This issue didn't affect ClamD or ClamScan which also can disable the limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD, or clamscan --max-filesize=0 for ClamScan. Note: Internally, the max file size is still set to 2 GiB. Disabling the limit for a scan will fall back on the internal 2 GiB limitation. * Increased the maximum line length for ClamAV config files from 512 bytes to 1,024 bytes to allow for longer config option strings. * SigTool: Fix insufficient buffer size for --list-sigs that caused a failure when listing a database containing one or more very long signatures. This fix was backported from 0.104. Special thanks to the following for code contributions and bug reports: * Laurent Delosieres
100 lines
3.1 KiB
Makefile
100 lines
3.1 KiB
Makefile
# $NetBSD: Makefile,v 1.82 2022/01/13 15:28:22 taca Exp $
|
|
|
|
.include "Makefile.common"
|
|
|
|
COMMENT= Anti-virus toolkit
|
|
|
|
USE_LANGUAGES= c c++
|
|
USE_LIBTOOL= yes
|
|
USE_TOOLS+= gsed
|
|
GNU_CONFIGURE= yes
|
|
SET_LIBDIR= yes
|
|
FAKE_NCURSES= yes
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR}
|
|
CONFIGURE_ARGS+= --with-dbdir=${CLAMAV_DBDIR}
|
|
CONFIGURE_ARGS+= --with-group=${CLAMAV_GROUP}
|
|
CONFIGURE_ARGS+= --with-user=${CLAMAV_USER}
|
|
CONFIGURE_ARGS+= --with-libcurl=${BUILDLINK_PREFIX.curl}
|
|
CONFIGURE_ARGS+= --with-libjson=${BUILDLINK_PREFIX.json-c}
|
|
CONFIGURE_ARGS+= --with-ltdl-include=${BUILDLINK_PREFIX.libltdl}/include
|
|
CONFIGURE_ARGS+= --with-ltdl-lib=${BUILDLINK_PREFIX.libltdl}/lib
|
|
CONFIGURE_ARGS+= --with-openssl=${BUILDLINK_PREFIX.openssl}
|
|
CONFIGURE_ARGS+= --with-pcre=${BUILDLINK_PREFIX.pcre2}
|
|
CONFIGURE_ARGS+= --with-system-libmspack=${BUILDLINK_PREFIX.libmspack}
|
|
CONFIGURE_ARGS+= --with-xml=${BUILDLINK_PREFIX.libxml2}
|
|
CONFIGURE_ARGS+= --with-zlib=${BUILDLINK_PREFIX.zlib}
|
|
# Linux only:
|
|
CONFIGURE_ARGS+= --disable-clamonacc
|
|
# Work around build failure PR pkg/54420
|
|
CONFIGURE_ARGS+= --disable-unrar
|
|
|
|
CONFIGURE_ENV.SunOS+= ac_cv_ld_version_script=no
|
|
|
|
CHECK_PORTABILITY_SKIP= contrib/* unit_tests/* win32/*
|
|
|
|
.include "../../mk/compiler.mk"
|
|
|
|
NOT_PAX_MPROTECT_SAFE+= sbin/clamd
|
|
NOT_PAX_MPROTECT_SAFE+= bin/clamscan
|
|
NOT_PAX_MPROTECT_SAFE+= bin/freshclam
|
|
|
|
CFLAGS.SunOS+= -D__EXTENSIONS__
|
|
.if !empty(PKGSRC_COMPILER:Mclang) || !empty(CC_VERSION:Mgcc-[6-9]*) || !empty(CC_VERSION:Mgcc-1[0-9].*)
|
|
CFLAGS.SunOS+= -D_XOPEN_SOURCE=600
|
|
.endif
|
|
|
|
BUILD_DEFS+= CLAMAV_USER CLAMAV_GROUP CLAMAV_DBDIR
|
|
FILES_SUBST+= CLAMAV_USER=${CLAMAV_USER}
|
|
FILES_SUBST+= CLAMAV_GROUP=${CLAMAV_GROUP}
|
|
FILES_SUBST+= CLAMAV_DBDIR=${CLAMAV_DBDIR}
|
|
MESSAGE_SUBST+= CLAMAV_USER=${CLAMAV_USER}
|
|
|
|
SUBST_CLASSES+= vars
|
|
SUBST_STAGE.vars= pre-configure
|
|
SUBST_FILES.vars= etc/clamav-milter.conf.sample etc/clamd.conf.sample
|
|
SUBST_VARS.vars= CLAMAV_DBDIR
|
|
|
|
RCD_SCRIPTS= clamd freshclamd
|
|
SMF_METHODS= clamd freshclamd
|
|
SMF_INSTANCES= ${SMF_METHODS}
|
|
|
|
PKG_GROUPS+= ${CLAMAV_GROUP}
|
|
PKG_USERS+= ${CLAMAV_USER}:${CLAMAV_GROUP}
|
|
|
|
PKG_GROUPS_VARS+= CLAMAV_GROUP
|
|
PKG_USERS_VARS= CLAMAV_USER
|
|
|
|
EGDIR= ${PREFIX}/share/examples/clamav
|
|
|
|
CONF_SAMPLES= clamd.conf freshclam.conf
|
|
|
|
.include "options.mk"
|
|
|
|
OWN_DIRS_PERMS= ${CLAMAV_DBDIR} ${CLAMAV_USER} ${CLAMAV_GROUP} 0775
|
|
CONF_FILES= # empty
|
|
CONF_FILES_PERMS= # empty
|
|
.for i in ${CONF_SAMPLES}
|
|
CONF_FILES+= ${EGDIR}/${i} ${PKG_SYSCONFDIR}/${i}
|
|
.endfor
|
|
|
|
INSTALLATION_DIRS+= ${EGDIR}
|
|
|
|
post-install:
|
|
.for i in ${CONF_SAMPLES}
|
|
${MV} ${DESTDIR}${PKG_SYSCONFDIR}/${i}.sample ${DESTDIR}${EGDIR}/${i}
|
|
.endfor
|
|
|
|
.include "../../archivers/bzip2/buildlink3.mk"
|
|
.include "../../archivers/libmspack/buildlink3.mk"
|
|
.include "../../devel/libltdl/buildlink3.mk"
|
|
.include "../../devel/pcre2/buildlink3.mk"
|
|
.include "../../devel/zlib/buildlink3.mk"
|
|
.include "../../devel/gmp/buildlink3.mk"
|
|
.include "../../mail/libmilter/buildlink3.mk"
|
|
.include "../../security/openssl/buildlink3.mk"
|
|
.include "../../textproc/json-c/buildlink3.mk"
|
|
.include "../../textproc/libxml2/buildlink3.mk"
|
|
.include "../../www/curl/buildlink3.mk"
|
|
.include "../../mk/curses.buildlink3.mk"
|
|
.include "../../mk/pthread.buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|