head	1.9;
access;
symbols
	pkgsrc-2026Q1:1.9.0.6
	pkgsrc-2026Q1-base:1.9
	pkgsrc-2025Q4:1.9.0.4
	pkgsrc-2025Q4-base:1.9
	pkgsrc-2025Q3:1.9.0.2
	pkgsrc-2025Q3-base:1.9
	pkgsrc-2025Q2:1.8.0.46
	pkgsrc-2025Q2-base:1.8
	pkgsrc-2025Q1:1.8.0.44
	pkgsrc-2025Q1-base:1.8
	pkgsrc-2024Q4:1.8.0.42
	pkgsrc-2024Q4-base:1.8
	pkgsrc-2024Q3:1.8.0.40
	pkgsrc-2024Q3-base:1.8
	pkgsrc-2024Q2:1.8.0.38
	pkgsrc-2024Q2-base:1.8
	pkgsrc-2024Q1:1.8.0.36
	pkgsrc-2024Q1-base:1.8
	pkgsrc-2023Q4:1.8.0.34
	pkgsrc-2023Q4-base:1.8
	pkgsrc-2023Q3:1.8.0.32
	pkgsrc-2023Q3-base:1.8
	pkgsrc-2023Q2:1.8.0.30
	pkgsrc-2023Q2-base:1.8
	pkgsrc-2023Q1:1.8.0.28
	pkgsrc-2023Q1-base:1.8
	pkgsrc-2022Q4:1.8.0.26
	pkgsrc-2022Q4-base:1.8
	pkgsrc-2022Q3:1.8.0.24
	pkgsrc-2022Q3-base:1.8
	pkgsrc-2022Q2:1.8.0.22
	pkgsrc-2022Q2-base:1.8
	pkgsrc-2022Q1:1.8.0.20
	pkgsrc-2022Q1-base:1.8
	pkgsrc-2021Q4:1.8.0.18
	pkgsrc-2021Q4-base:1.8
	pkgsrc-2021Q3:1.8.0.16
	pkgsrc-2021Q3-base:1.8
	pkgsrc-2021Q2:1.8.0.14
	pkgsrc-2021Q2-base:1.8
	pkgsrc-2021Q1:1.8.0.12
	pkgsrc-2021Q1-base:1.8
	pkgsrc-2020Q4:1.8.0.10
	pkgsrc-2020Q4-base:1.8
	pkgsrc-2020Q3:1.8.0.8
	pkgsrc-2020Q3-base:1.8
	pkgsrc-2020Q2:1.8.0.6
	pkgsrc-2020Q2-base:1.8
	pkgsrc-2020Q1:1.8.0.2
	pkgsrc-2020Q1-base:1.8
	pkgsrc-2019Q4:1.8.0.4
	pkgsrc-2019Q4-base:1.8
	pkgsrc-2019Q3:1.7.0.2
	pkgsrc-2019Q3-base:1.7
	pkgsrc-2019Q2:1.6.0.44
	pkgsrc-2019Q2-base:1.6
	pkgsrc-2019Q1:1.6.0.42
	pkgsrc-2019Q1-base:1.6
	pkgsrc-2018Q4:1.6.0.40
	pkgsrc-2018Q4-base:1.6
	pkgsrc-2018Q3:1.6.0.38
	pkgsrc-2018Q3-base:1.6
	pkgsrc-2018Q2:1.6.0.36
	pkgsrc-2018Q2-base:1.6
	pkgsrc-2018Q1:1.6.0.34
	pkgsrc-2018Q1-base:1.6
	pkgsrc-2017Q4:1.6.0.32
	pkgsrc-2017Q4-base:1.6
	pkgsrc-2017Q3:1.6.0.30
	pkgsrc-2017Q3-base:1.6
	pkgsrc-2017Q2:1.6.0.26
	pkgsrc-2017Q2-base:1.6
	pkgsrc-2017Q1:1.6.0.24
	pkgsrc-2017Q1-base:1.6
	pkgsrc-2016Q4:1.6.0.22
	pkgsrc-2016Q4-base:1.6
	pkgsrc-2016Q3:1.6.0.20
	pkgsrc-2016Q3-base:1.6
	pkgsrc-2016Q2:1.6.0.18
	pkgsrc-2016Q2-base:1.6
	pkgsrc-2016Q1:1.6.0.16
	pkgsrc-2016Q1-base:1.6
	pkgsrc-2015Q4:1.6.0.14
	pkgsrc-2015Q4-base:1.6
	pkgsrc-2015Q3:1.6.0.12
	pkgsrc-2015Q3-base:1.6
	pkgsrc-2015Q2:1.6.0.10
	pkgsrc-2015Q2-base:1.6
	pkgsrc-2015Q1:1.6.0.8
	pkgsrc-2015Q1-base:1.6
	pkgsrc-2014Q4:1.6.0.6
	pkgsrc-2014Q4-base:1.6
	pkgsrc-2014Q3:1.6.0.4
	pkgsrc-2014Q3-base:1.6
	pkgsrc-2014Q2:1.6.0.2
	pkgsrc-2014Q2-base:1.6
	pkgsrc-2014Q1:1.5.0.2
	pkgsrc-2014Q1-base:1.5
	pkgsrc-2013Q4:1.4.0.2
	pkgsrc-2013Q4-base:1.4
	pkgsrc-2013Q3:1.3.0.10
	pkgsrc-2013Q3-base:1.3
	pkgsrc-2013Q2:1.3.0.8
	pkgsrc-2013Q2-base:1.3
	pkgsrc-2013Q1:1.3.0.6
	pkgsrc-2013Q1-base:1.3
	pkgsrc-2012Q4:1.3.0.4
	pkgsrc-2012Q4-base:1.3
	pkgsrc-2012Q3:1.3.0.2
	pkgsrc-2012Q3-base:1.3
	pkgsrc-2012Q2:1.2.0.8
	pkgsrc-2012Q2-base:1.2
	pkgsrc-2012Q1:1.2.0.6
	pkgsrc-2012Q1-base:1.2
	pkgsrc-2011Q4:1.2.0.4
	pkgsrc-2011Q4-base:1.2
	pkgsrc-2011Q3:1.2.0.2
	pkgsrc-2011Q3-base:1.2
	pkgsrc-2011Q2:1.1.1.1.0.6
	pkgsrc-2011Q2-base:1.1.1.1
	pkgsrc-2011Q1:1.1.1.1.0.4
	pkgsrc-2011Q1-base:1.1.1.1
	pkgsrc-2010Q4:1.1.1.1.0.2
	pkgsrc-2010Q4-base:1.1.1.1
	pkgsrc-base:1.1.1.1
	TNF:1.1.1;
locks; strict;
comment	@# @;


1.9
date	2025.08.31.14.49.46;	author bouyer;	state Exp;
branches;
next	1.8;
commitid	qAeuqyPt3UCjpT8G;

1.8
date	2019.10.10.15.41.29;	author prlw1;	state Exp;
branches;
next	1.7;
commitid	xJvAmWghK3aWQkGB;

1.7
date	2019.08.05.14.44.20;	author prlw1;	state Exp;
branches;
next	1.6;
commitid	sYG6HxnG9hSOBQxB;

1.6
date	2014.05.08.16.01.09;	author jperkin;	state Exp;
branches
	1.6.44.1;
next	1.5;
commitid	e3h6KBasrENeEKzx;

1.5
date	2014.03.11.14.05.13;	author jperkin;	state Exp;
branches;
next	1.4;
commitid	ZdYDtaK33Yj8Shsx;

1.4
date	2013.10.02.18.30.13;	author adam;	state Exp;
branches;
next	1.3;
commitid	3SoHNYuqlonjuK7x;

1.3
date	2012.07.02.07.12.58;	author adam;	state Exp;
branches;
next	1.2;

1.2
date	2011.07.08.09.28.06;	author adam;	state Exp;
branches;
next	1.1;

1.1
date	2010.12.24.07.11.05;	author kefren;	state Exp;
branches
	1.1.1.1;
next	;

1.6.44.1
date	2019.09.05.09.26.25;	author bsiegert;	state Exp;
branches;
next	;
commitid	XdOeTipziZZ8VNBB;

1.1.1.1
date	2010.12.24.07.11.05;	author kefren;	state Exp;
branches
	1.1.1.1.6.1;
next	;

1.1.1.1.6.1
date	2011.07.08.16.33.12;	author tron;	state Exp;
branches;
next	;


desc
@@


1.9
log
@clamav, clamav-doc: update to 1.4.3 (from wip/clamav).
main changes since 0.103.12:

Added support for extracting ALZ archives. The new ClamAV file type for
ALZ archives is CL_TYPE_ALZ. Added a DCONF option to enable or disable
ALZ archive support.

    Tip: DCONF (Dynamic CONFiguration) is a feature that allows for some
	configuration changes to be made via ClamAV .cfg "signatures".

Added support for extracting LHA/LZH archives. The new ClamAV file type
for LHA/LZH archives is CL_TYPE_LHA_LZH. Added a DCONF option to enable
or disable LHA/LZH archive support.

Added the ability to disable image fuzzy hashing, if needed. For context,
image fuzzy hashing is a detection mechanism useful for identifying malware
by matching images included with the malware or phishing email/document.

New ClamScan options:

--scan-image[=yes(*)/no]
--scan-image-fuzzy-hash[=yes(*)/no]

New ClamD config options:

ScanImage yes(*)/no
ScanImageFuzzyHash yes(*)/no

New libclamav scan options:

options.parse &= ~CL_SCAN_PARSE_IMAGE;
options.parse &= ~CL_SCAN_PARSE_IMAGE_FUZZY_HASH;

    Added a DCONF option to enable or disable image fuzzy hashing support.

Added support for extracting and scanning attachments found in Microsoft
OneNote section files. OneNote parsing will be enabled by default, but may
be optionally disabled using one of the following options:
a. The clamscan command line option: --scan-onenote=no,
b. The clamd.conf config option: ScanOneNote no,
c. The libclamav scan option options.parse &= ~CL_SCAN_PARSE_ONENOTE;,
d.  A signature change to the daily.cfg dynamic configuration (DCONF).

Added support for extracting Universal Disk Format (UDF) partitions.
Specifically, this version adds support for the
Beginning Extended Area Descriptor (BEA01) type of UDF files.

Added an option to customize the size of ClamAV's clean file cache.
Increasing the size of the clean file cache may improve scan performance but
will require more RAM. The cache size value should be a square number or
will be rounded up to the nearest square number.
The cache size option for clamd and clamscan is --cache-size. Alternatively,
you can customize the cache size for ClamD by setting CacheSize in clamd.conf.

Raised the MaxScanSize limit so the total amount of data scanned when
scanning a file or archive may exceed 4 gigabytes.
Introduced the ability to suffix the MaxScanSize and other config file size
options with a "G" or "g" for the number of gigabytes. For example,
for ClamD you may now specify MaxScanSize 10G in clamd.conf. And for ClamScan,
you may now specify --max-scansize=10g.
The MaxFileSize is still limited internally in ClamAV to 2 gigabytes.
Any file, or embedded file, larger than 2GB will be skipped. You may use
clamscan --alert-exceeds-max, or the clamd.conf option AlertExceedsMax yes
to tell if a scan is not completed because of the scan limits.

Added ability for Freshclam to use a client certificate PEM file
and a private key PEM file for authentication to a private mirror by
setting the following environment variables:

    FRESHCLAM_CLIENT_CERT: May be set to the path of a file (PEM)
    containing the client certificate.
    FRESHCLAM_CLIENT_KEY: May be set to the path of a file (PEM)
    containing the client private key.
    FRESHCLAM_CLIENT_KEY_PASSWD: May be set to a password for the client
    key PEM file, if it is password protected.

Added the ability to extract images embedded in HTML CSS <style> blocks.

Updated to Sigtool so that the --vba option will extract VBA code
from Microsoft Office documents the same way that libclamav extracts VBA.
This resolves several issues where Sigtool could not extract VBA.
Sigtool will also now display the normalized VBA code instead of the
pre-normalized VBA code.

Added a new ClamScan and ClamD option: --fail-if-cvd-older-than=days.
Additionally, we introduce FailIfCvdOlderThan as a clamd.conf synonym
for --fail-if-cvd-older-than. When passed, it causes ClamD to exit on
startup with a non-zero return code if the virus database is older than
the specified number of days.

Added a new function cl_cvdgetage() to the libclamav API. This function
will retrieve the age in seconds of the youngest file in a database directory,
or the age of a single CVD (or CLD) file.

Added a new function cl_engine_set_clcb_vba() to the libclamav API. Use this
function to set a cb_vba callback function. The cb_vba callback function will
be run whenever VBA is extracted from office documents. The provided data will
be a normalized copy of the extracted VBA. This callback was added to support
Sigtool so that it can use the same VBA extraction logic that ClamAV uses to
scan documents.

Support for decrypting read-only OLE2-based XLS files that are encrypted
with the default password. Use of the default password will now appear in
the metadata JSON.

Overhauled the implementation of the all-match feature. The newer code is
more reliable and easier to maintain.
This project fixed several known issues with signature detection in
all- match mode:
	Enabled embedded file-type recognition signatures to match when
	    a malware signature also matched in a scan of the same layer.
	Enabled bytecode signatures to run in all-match mode after a match
	    has occurred.
	Fixed an assortment of all-match edge case issues.
	Added multiple test cases to verify correct all-match behavior.

Increased the default limits for file-size and scan-size:

    MaxScanSize: 100M -> 400M
    MaxFileSize: 25M -> 100M
    StreamMaxLength: 25M -> 100M
    PCREMaxFileSize: 25M -> 100M
    MaxEmbeddedPE: 10M -> 40M
    MaxHTMLNormalize: 10M -> 40M
    MaxScriptNormalize: 5M -> 20M
    MaxHTMLNoTags: 2M -> 8M

Added image fuzzy hash subsignatures for logical signatures.
Image fuzzy hash subsignatures are a new feature for detecting images known
to be used in phishing campaigns or otherwise used when distributing malware.

For a full list of changes, including bug fixes, see
https://github.com/Cisco-Talos/clamav/blob/rel/1.4/NEWS.md
@
text
@@@comment $NetBSD: PLIST,v 1.8 2019/10/10 15:41:29 prlw1 Exp $
bin/clamav-config
bin/clambc
bin/clamconf
bin/clamdscan
bin/clamdtop
bin/clamscan
bin/clamsubmit
bin/freshclam
bin/sigtool
include/clamav-types.h
include/clamav-version.h
include/clamav.h
include/libfreshclam.h
lib/libclamav.so
lib/libclamav.so.12
lib/libclamav.so.12.0.3
lib/libclamav_rust.a
lib/libclamunrar.so
lib/libclamunrar.so.12
lib/libclamunrar.so.12.0.3
lib/libclamunrar_iface.so
lib/libclamunrar_iface.so.12
lib/libclamunrar_iface.so.12.0.3
lib/libfreshclam.so
lib/libfreshclam.so.3
lib/libfreshclam.so.3.0.2
lib/pkgconfig/libclamav.pc
man/man1/clambc.1
man/man1/clamconf.1
man/man1/clamdscan.1
man/man1/clamdtop.1
man/man1/clamscan.1
man/man1/clamsubmit.1
man/man1/freshclam.1
man/man1/sigtool.1
man/man5/clamav-milter.conf.5
man/man5/clamd.conf.5
man/man5/freshclam.conf.5
man/man8/clamav-milter.8
man/man8/clamd.8
${PLIST.milter}sbin/clamav-milter
sbin/clamd
${PLIST.milter}share/examples/clamav/clamav-milter.conf
share/examples/clamav/clamd.conf
share/examples/clamav/freshclam.conf
@


1.8
log
@Update clamav to 0.102.0

* The On-Access Scanning feature has been migrated out of clamd and
  into a brand new utility named clamonacc, which is disabled in this
  package as it is for Linux only.
* The freshclam database update utility has undergone a significant
  update. This includes:
     + Added support for HTTPS.
     + Support for database mirrors hosted on ports other than 80.
     + Removal of the mirror management feature (mirrors.dat).
     + An all new libfreshclam library API.
* Added support for extracting ESTsoft .egg archives. This feature is
  new code developed from scratch using ESTsoft's Egg-archive
  specification and without referencing the UnEgg library provided by
  ESTsoft. This was necessary because the UnEgg library's license
  includes restrictions limiting the commercial use of the UnEgg library.

Full release notes available at:
https://github.com/Cisco-Talos/clamav-devel/blob/rel/0.102/NEWS.md
@
text
@d1 1
a1 1
@@comment $NetBSD: PLIST,v 1.7 2019/08/05 14:44:20 prlw1 Exp $
d15 13
a27 3
lib/libclamav.la
lib/libclammspack.la
lib/libfreshclam.la
@


1.7
log
@Update clamav to 0.101.2

Remove rar support to workaround PR pkg/54420

  This release includes 3 extra security related bug fixes that do not
   apply to prior versions. In addition, it includes a number of minor bug
   fixes and improvements.
     * Fixes for the following vulnerabilities affecting 0.101.1 and
       prior:
          + CVE-2019-1787: An out-of-bounds heap read condition may occur
            when scanning PDF documents. The defect is a failure to
            correctly keep track of the number of bytes remaining in a
            buffer when indexing file data.
          + CVE-2019-1789: An out-of-bounds heap read condition may occur
            when scanning PE files (i.e. Windows EXE and DLL files) that
            have been packed using Aspack as a result of inadequate
            bound-checking.
          + CVE-2019-1788: An out-of-bounds heap write condition may occur
            when scanning OLE2 files such as Microsoft Office 97-2003
            documents. The invalid write happens when an invalid pointer
            is mistakenly used to initialize a 32bit integer to zero. This
            is likely to crash the application.
     * Fixes for the following ClamAV vulnerabilities:
          + CVE-2018-15378: Vulnerability in ClamAV's MEW unpacking
            feature that could allow an unauthenticated, remote attacker
            to cause a denial of service (DoS) condition on an affected
            device. Reported by Secunia Research at Flexera.
          + Fix for a 2-byte buffer over-read bug in ClamAV's PDF parsing
            code. Reported by Alex Gaynor.
     * Fixes for the following vulnerabilities in bundled third-party
       libraries:
          + CVE-2018-14680: An issue was discovered in mspack/chmd.c in
            libmspack before 0.7alpha. It does not reject blank CHM
            filenames.
          + CVE-2018-14681: An issue was discovered in kwajd_read_headers
            in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file
            header extensions could cause a one or two byte overwrite.
          + CVE-2018-14682: An issue was discovered in mspack/chmd.c in
            libmspack before 0.7alpha. There is an off-by-one error in the
            TOLOWER() macro for CHM decompression.
          + Additionally, 0.100.2 reverted 0.100.1's patch for
            CVE-2018-14679, and applied libmspack's version of the fix in
            its place.
     * Fixes for the following CVE's:
          + CVE-2017-16932: Vulnerability in libxml2 dependency (affects
            ClamAV on Windows only).
          + CVE-2018-0360: HWP integer overflow, infinite loop
            vulnerability. Reported by Secunia Research at Flexera.
          + CVE-2018-0361: ClamAV PDF object length check, unreasonably
            long time to parse relatively small file. Reported by aCaB.

For the full release notes, see:
https://github.com/Cisco-Talos/clamav-devel/blob/clamav-0.101.2/NEWS.md
@
text
@d1 1
a1 1
@@comment $NetBSD: PLIST,v 1.6 2014/05/08 16:01:09 jperkin Exp $
d12 1
d14 1
d17 1
@


1.6
log
@Update to clamav-0.98.3.  Changes:

 - Support for common raw disk image formats using 512 byte sectors,
   specifically GPT, APM, and MBR partitioning.

 - Experimental support of OpenIOC files. ClamAV will now extract file
   hashes from OpenIOC files residing in the signature database location,
   and generate ClamAV hash signatures. ClamAV uses no other OpenIOC
   features at this time. No OpenIOC files will be delivered through
   freshclam. See openioc.org and iocbucket.com for additional information
   about OpenIOC.

 - All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan, clamdtop)
   now support IPV6 addresses and configuration parameters.

 - Use OpenSSL file hash functions for improved performance. OpenSSL
   is now prerequisite software for ClamAV 0.98.3.

 - Improved detection of malware scripts within image files. Issue reported
   by Maarten Broekman.

 - Change to circumvent possible denial of service when processing icons within
   specially crafted PE files. Icon limits are now in place with corresponding
   clamd and clamscan configuration parameters. This issue was reported by
   Joxean Koret.

 - Improvements to the fidelity of the ClamAV pattern matcher, an issue
   reported by Christian Blichmann.

 - Opt-in collection of statistics. Statistics collected are: sizes and MD5
   hashes of files, PE file section counts and section MD5 hashes, and names
   and counts of detected viruses. Enable statistics collection with the
  --enable-stats clamscan flag or StatsEnabled clamd configuration
   parameter.

 - Improvements to ClamAV build process, unit tests, and platform support with
   assistance and suggestions by Sebastian Andrzej Siewior, Scott Kitterman,
   and Dave Simonson.

 - Patch by Arkadiusz Miskiewicz to improve error handling in freshclam.

 - ClamAV 0.98.3 also includes miscellaneous bug fixes and documentation
   improvements.
@
text
@d1 1
a1 1
@@comment $NetBSD: PLIST,v 1.5 2014/03/11 14:05:13 jperkin Exp $
d11 1
d14 1
a14 2
lib/libclamunrar.la
lib/libclamunrar_iface.la
d31 1
a31 1
share/examples/clamav/clamav-milter.conf
@


1.6.44.1
log
@Pullup ticket #6036 - requested by taca
security/clamav: security fix

Revisions pulled up:
- security/clamav/Makefile                                      1.51
- security/clamav/Makefile.common                               1.11
- security/clamav/PLIST                                         1.7
- security/clamav/buildlink3.mk                                 1.8
- security/clamav/distinfo                                      1.28
- security/clamav/options.mk                                    1.6
- security/clamav/patches/patch-Makefile.in                     1.5
- security/clamav/patches/patch-ab                              1.2

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Sat Jul 20 22:46:59 UTC 2019

   Modified Files:

   	pkgsrc/security/clamav: Makefile

   Log Message:
   *: recursive bump for nettle 3.5.1

---
   Module Name:	pkgsrc
   Committed By:	prlw1
   Date:		Mon Aug  5 14:44:20 UTC 2019

   Modified Files:
   	pkgsrc/security/clamav: Makefile Makefile.common PLIST buildlink3.mk
   	    distinfo options.mk
   	pkgsrc/security/clamav/patches: patch-Makefile.in patch-ab

   Log Message:
   Update clamav to 0.101.2

   Remove rar support to workaround PR pkg/54420

     This release includes 3 extra security related bug fixes that do not
      apply to prior versions. In addition, it includes a number of minor bug
      fixes and improvements.
        * Fixes for the following vulnerabilities affecting 0.101.1 and
          prior:
             + CVE-2019-1787: An out-of-bounds heap read condition may occur
               when scanning PDF documents. The defect is a failure to
               correctly keep track of the number of bytes remaining in a
               buffer when indexing file data.
             + CVE-2019-1789: An out-of-bounds heap read condition may occur
               when scanning PE files (i.e. Windows EXE and DLL files) that
               have been packed using Aspack as a result of inadequate
               bound-checking.
             + CVE-2019-1788: An out-of-bounds heap write condition may occur
               when scanning OLE2 files such as Microsoft Office 97-2003
               documents. The invalid write happens when an invalid pointer
               is mistakenly used to initialize a 32bit integer to zero. This
               is likely to crash the application.
        * Fixes for the following ClamAV vulnerabilities:
             + CVE-2018-15378: Vulnerability in ClamAV's MEW unpacking
               feature that could allow an unauthenticated, remote attacker
               to cause a denial of service (DoS) condition on an affected
               device. Reported by Secunia Research at Flexera.
             + Fix for a 2-byte buffer over-read bug in ClamAV's PDF parsing
               code. Reported by Alex Gaynor.
        * Fixes for the following vulnerabilities in bundled third-party
          libraries:
             + CVE-2018-14680: An issue was discovered in mspack/chmd.c in
               libmspack before 0.7alpha. It does not reject blank CHM
               filenames.
             + CVE-2018-14681: An issue was discovered in kwajd_read_headers
               in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file
               header extensions could cause a one or two byte overwrite.
             + CVE-2018-14682: An issue was discovered in mspack/chmd.c in
               libmspack before 0.7alpha. There is an off-by-one error in the
               TOLOWER() macro for CHM decompression.
             + Additionally, 0.100.2 reverted 0.100.1's patch for
               CVE-2018-14679, and applied libmspack's version of the fix in
               its place.
        * Fixes for the following CVE's:
             + CVE-2017-16932: Vulnerability in libxml2 dependency (affects
               ClamAV on Windows only).
             + CVE-2018-0360: HWP integer overflow, infinite loop
               vulnerability. Reported by Secunia Research at Flexera.
             + CVE-2018-0361: ClamAV PDF object length check, unreasonably
               long time to parse relatively small file. Reported by aCaB.

   For the full release notes, see:
   https://github.com/Cisco-Talos/clamav-devel/blob/clamav-0.101.2/NEWS.md
@
text
@d1 1
a1 1
@@comment $NetBSD$
a10 1
include/clamav-types.h
d13 2
a14 1
lib/libclammspack.la
d31 1
a31 1
${PLIST.milter}share/examples/clamav/clamav-milter.conf
@


1.5
log
@Remove example rc.d scripts from PLISTs.

These are now handled dynamically if INIT_SYSTEM is set to "rc.d", or
ignored otherwise.
@
text
@d1 1
a1 1
@@comment $NetBSD: PLIST,v 1.4 2013/10/02 18:30:13 adam Exp $
d8 1
d21 1
d29 1
a30 1
${PLIST.milter}sbin/clamav-milter
@


1.4
log
@ClamAV 0.98 includes many new features, across many different components
of ClamAV. There are new scanning options, extensions to the libclamav API,
support for additional filetypes, and internal upgrades.
@
text
@d1 1
a1 1
@@comment $NetBSD: PLIST,v 1.3 2012/07/02 07:12:58 adam Exp $
a31 2
share/examples/rc.d/clamd
share/examples/rc.d/freshclamd
@


1.3
log
@Changes 0.97.5:
* libclamav: Scan output at end of truncated tar
* libclamav: Fix handling of tar file with malformed header
* libclamav: Scan chm with invalid handling
* freshclam: give custom dbs higher priority during update
* libclamav: detect read races and abort the scan with an error
* libclamav/pe.c: drop old header check
@
text
@d1 1
a1 1
@@comment $NetBSD: PLIST,v 1.2 2011/07/08 09:28:06 adam Exp $
d28 2
@


1.2
log
@Changes 0.97.1:
This is a bugfix release recommended for all users. Please refer to the
ChangeLog file for details.
@
text
@d1 1
a1 1
@@comment $NetBSD: PLIST,v 1.1.1.1 2010/12/24 07:11:05 kefren Exp $
a28 1
share/examples/clamav/daily.cvd
a29 1
share/examples/clamav/main.cvd
@


1.1
log
@Initial revision
@
text
@d1 1
a1 1
@@comment $NetBSD: PLIST,v 1.25 2010/05/20 07:47:45 martti Exp $
d15 1
@


1.1.1.1
log
@Move clamav into security/. No objections on tech-pkg@@
Part of PR/32554
@
text
@@


1.1.1.1.6.1
log
@Pullup ticket #3466 - requested by adam
security/clama: bug fix update

Revisions pulled up:
- security/clamav/Makefile                                      1.3
- security/clamav/PLIST                                         1.2
- security/clamav/distinfo                                      1.3
- security/clamav/patches/patch-ad                              1.2
- security/clamav/patches/patch-af                              1.2

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Fri Jul  8 09:28:06 UTC 2011

   Modified Files:
           pkgsrc/security/clamav: Makefile PLIST distinfo
           pkgsrc/security/clamav/patches: patch-ad patch-af

   Log Message:
   Changes 0.97.1:
   This is a bugfix release recommended for all users. Please refer to the
   ChangeLog file for details.
@
text
@d1 1
a1 1
@@comment $NetBSD$
a14 1
man/man1/clambc.1
@