From 9b73834c344f9d3019e7248c1d853b64a07210c3 Mon Sep 17 00:00:00 2001 From: ensc Date: Apr 22 2009 16:16:47 +0000 Subject: updated --- diff --git a/clamav-0.93.3-nooutdate.patch b/clamav-0.93.3-nooutdate.patch new file mode 100644 index 0000000..f9faf84 --- /dev/null +++ b/clamav-0.93.3-nooutdate.patch @@ -0,0 +1,12 @@ +diff -up clamav-0.93.3/freshclam/mirman.c.nooutdate clamav-0.93.3/freshclam/mirman.c +--- clamav-0.93.3/freshclam/mirman.c.nooutdate 2008-03-06 19:41:02.000000000 +0100 ++++ clamav-0.93.3/freshclam/mirman.c 2009-04-21 20:46:47.000000000 +0200 +@@ -105,7 +105,7 @@ int mirman_check(uint32_t ip, struct mir + for(i = 0; i < mdat->num; i++) { + if(mdat->mirtab[i].atime && mdat->mirtab[i].ip == ip) { + +- if(mdat->dbflevel && (mdat->dbflevel > flevel) && (mdat->dbflevel - flevel > 3)) ++ if(0 && mdat->dbflevel && (mdat->dbflevel > flevel) && (mdat->dbflevel - flevel > 3)) + if(time(NULL) - mdat->mirtab[i].atime < 4 * 3600) + return 2; + diff --git a/clamav.spec b/clamav.spec index bcf1fc8..600242c 100644 --- a/clamav.spec +++ b/clamav.spec @@ -13,13 +13,14 @@ %global milterstatedir %_var/run/clamav-milter %global pkgdatadir %_datadir/%name +%global _default_patch_fuzz 2 %{!?release_func:%global release_func() %1%{?dist}} Summary: End-user tools for the Clam Antivirus scanner Name: clamav Version: 0.93.3 -Release: %release_func 2%{?snapshot:.%snapshot} +Release: %release_func 3%{?snapshot:.%snapshot} License: %{?with_unrar:proprietary}%{!?with_unrar:GPLv2} Group: Applications/File @@ -46,6 +47,7 @@ Patch22: clamav-0.80-initoff.patch Patch24: clamav-0.92-private.patch Patch25: clamav-0.92-open.patch Patch26: clamav-0.93.3-pid.patch +Patch27: clamav-0.93.3-nooutdate.patch # security patches # 0.94 Patch30: clamav-0.93.3-CVE-2008-1389.diff @@ -266,6 +268,7 @@ Sendmail customizations of the clamav-milter. %patch24 -p1 -b .private %patch25 -p1 -b .open %patch26 -p1 -b .pid +%patch27 -p1 -b .nooutdate # security patches %patch30 -p1 -b .CVE-2008-1389 @@ -563,6 +566,16 @@ test "$1" = 0 || %_initrddir/clamav-milter condrestart >/dev/null || : %changelog +* Wed Apr 22 2009 Enrico Scholz - 0.93.3-3 +- added -nooutdate patch to avoid the 'has connected too many times + with an outdated version' on freshclam invocation. Because clamav is + buggy like hell and full with security leaks, the database upgrade + must not be skipped as broken modules are disabled by it too. + + The patch itself is probably required due to a bug in freshclam: + this message should never be triggered when 'freshclam' is invoked + in non-daemon mode (e.g. manually or as a cron-job). + * Thu Nov 13 2008 Tomas Hoger - 0.93.3-2 - Security update - backport security fixes from 0.94: CVE-2008-1389 (#461461): Invalid memory access in the CHM unpacker