Version in base suite: 0.103.5+dfsg-0+deb10u1 Base version: clamav_0.103.5+dfsg-0+deb10u1 Target version: clamav_0.103.6+dfsg-0+deb10u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/c/clamav/clamav_0.103.5+dfsg-0+deb10u1.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/c/clamav/clamav_0.103.6+dfsg-0+deb10u1.dsc CMakeLists.txt | 2 NEWS.md | 56 + clamonacc/c-thread-pool/thpool.c | 16 clamonacc/c-thread-pool/thpool.h | 6 clamonacc/clamav-clamonacc.service.in | 2 clamonacc/inotif/inotif.c | 86 +- clamonacc/scan/onas_queue.c | 17 configure | 26 configure.ac | 2 debian/.git-dpm | 14 debian/changelog | 17 debian/libclamav9.symbols | 414 +++++----- debian/patches/0007-unit-tests-Fix-ck_assert_msg-call.patch | 23 debian/patches/Add-support-for-LLVM-3.7.patch | 2 debian/patches/Add-support-for-LLVM-3.8.patch | 2 debian/patches/Add-support-for-LLVM-3.9.patch | 2 debian/patches/Change-paths-in-sample-conf-file-to-match-Debian.patch | 2 debian/patches/add-support-for-system-tomsfastmath.patch | 4 debian/patches/clamd_dont_depend_on_clamav_demon_socket.patch | 2 debian/patches/series | 1 debian/rules | 2 docs/html/404.html | 8 docs/html/Introduction.html | 6 docs/html/appendix/Appendix.html | 10 docs/html/appendix/Authenticode.html | 6 docs/html/appendix/CvdPrivateMirror.html | 6 docs/html/appendix/FileTypes.html | 6 docs/html/appendix/FunctionalityLevels.html | 6 docs/html/appendix/Terminology.html | 6 docs/html/community_resources/CommunityResources.html | 221 +++++ docs/html/faq/faq-cvd.html | 6 docs/html/faq/faq-eol.html | 10 docs/html/faq/faq-freshclam.html | 6 docs/html/faq/faq-ignore.html | 6 docs/html/faq/faq-misc.html | 6 docs/html/faq/faq-ml.html | 6 docs/html/faq/faq-pua.html | 6 docs/html/faq/faq-rust.html | 214 +++++ docs/html/faq/faq-safebrowsing.html | 6 docs/html/faq/faq-scan-alerts.html | 6 docs/html/faq/faq-troubleshoot.html | 6 docs/html/faq/faq-uninstall.html | 6 docs/html/faq/faq-upgrade.html | 10 docs/html/faq/faq-whichversion.html | 6 docs/html/faq/faq-win32.html | 18 docs/html/faq/faq.html | 6 docs/html/index.html | 6 docs/html/manual/Development.html | 10 docs/html/manual/Development/Contribute.html | 6 docs/html/manual/Development/build-installer-packages.html | 6 docs/html/manual/Development/clamav-git-work-flow.html | 6 docs/html/manual/Development/code-coverage.html | 6 docs/html/manual/Development/development-builds.html | 6 docs/html/manual/Development/fuzzing-sanitizers.html | 6 docs/html/manual/Development/github-pr-basics.html | 6 docs/html/manual/Development/libclamav.html | 6 docs/html/manual/Development/performance-profiling.html | 6 docs/html/manual/Development/personal-forks.html | 6 docs/html/manual/Development/testing-pull-requests.html | 6 docs/html/manual/Development/tips-and-tricks.html | 6 docs/html/manual/Installing.html | 6 docs/html/manual/Installing/Add-clamav-user.html | 6 docs/html/manual/Installing/Community-projects.html | 9 docs/html/manual/Installing/Docker.html | 50 - docs/html/manual/Installing/Installing-from-source-Unix-old.html | 6 docs/html/manual/Installing/Installing-from-source-Unix.html | 32 docs/html/manual/Installing/Installing-from-source-Windows.html | 18 docs/html/manual/Installing/Packages.html | 6 docs/html/manual/OnAccess.html | 6 docs/html/manual/Signatures.html | 42 - docs/html/manual/Signatures/AllowLists.html | 15 docs/html/manual/Signatures/AuthenticodeRules.html | 6 docs/html/manual/Signatures/BodySignatureFormat.html | 6 docs/html/manual/Signatures/BytecodeSignatures.html | 6 docs/html/manual/Signatures/ContainerMetadata.html | 15 docs/html/manual/Signatures/DatabaseInfo.html | 6 docs/html/manual/Signatures/DynamicConfig.html | 6 docs/html/manual/Signatures/EncryptedArchives.html | 10 docs/html/manual/Signatures/ExtendedSignatures.html | 6 docs/html/manual/Signatures/FileTypeMagic.html | 8 docs/html/manual/Signatures/HashSignatures.html | 67 + docs/html/manual/Signatures/LogicalSignatures.html | 39 docs/html/manual/Signatures/PhishSigs.html | 29 docs/html/manual/Signatures/SignatureNames.html | 250 ++++++ docs/html/manual/Signatures/YaraRules.html | 6 docs/html/manual/Usage.html | 6 docs/html/manual/Usage/Configuration.html | 6 docs/html/manual/Usage/ReportABug.html | 6 docs/html/manual/Usage/Scanning.html | 6 docs/html/manual/Usage/Services.html | 6 docs/html/manual/Usage/SignatureManagement.html | 6 docs/html/print.html | 357 ++++++-- docs/html/searchindex.js | 2 docs/html/searchindex.json | 2 libclamav/bytecode_api.h | 3 libclamav/cache.c | 33 libclamav/jsparse/js-norm.c | 48 - libclamav/libmspack.c | 33 libclamav/matcher-byte-comp.c | 51 - libclamav/matcher-byte-comp.h | 2 libclamav/matcher.c | 12 libclamav/others.h | 26 libclamav/pe.c | 38 libclamav/regex/cclass.h | 40 libclamav/regex/cname.h | 6 libclamav/regex/engine.c | 239 +++-- libclamav/regex/regcomp.c | 322 ++----- libclamav/regex/regerror.c | 29 libclamav/regex/regex2.h | 40 libclamav/regex/regexec.c | 18 libclamav/regex/regfree.c | 23 libclamav/regex/utils.h | 8 libclamav/scanners.c | 48 - libclamav/sis.c | 10 libclamav/swf.c | 54 - libclamav/swf.h | 2 libclamav/tiff.c | 14 libclamav/tnef.c | 14 libclamav/version.h | 2 m4/reorganization/version.m4 | 2 unit_tests/check_jsnorm.c | 2 121 files changed, 2314 insertions(+), 1243 deletions(-) diff -Nru clamav-0.103.5+dfsg/CMakeLists.txt clamav-0.103.6+dfsg/CMakeLists.txt --- clamav-0.103.5+dfsg/CMakeLists.txt 2022-01-10 23:17:45.000000000 +0000 +++ clamav-0.103.6+dfsg/CMakeLists.txt 2022-05-02 04:46:41.000000000 +0000 @@ -15,7 +15,7 @@ set(VERSION_SUFFIX "") project( ClamAV - VERSION "0.103.5" + VERSION "0.103.6" DESCRIPTION "ClamAV open source email, web, and end-point anti-virus toolkit." ) set(CMAKE_MODULE_PATH "${CMAKE_CURRENT_SOURCE_DIR}/cmake" ${CMAKE_MODULE_PATH}) diff -Nru clamav-0.103.5+dfsg/NEWS.md clamav-0.103.6+dfsg/NEWS.md --- clamav-0.103.5+dfsg/NEWS.md 2022-01-10 23:17:45.000000000 +0000 +++ clamav-0.103.6+dfsg/NEWS.md 2022-05-02 04:46:41.000000000 +0000 @@ -3,6 +3,62 @@ Note: This file refers to the source tarball. Things described here may differ slightly from the binary packages. +## 0.103.6 + +ClamAV 0.103.6 is a critical patch release with the following fixes: + +- [CVE-2022-20770](CVE-2022-20770): Fixed a possible infinite loop vulnerability + in the CHM file parser. + Issue affects versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and + prior versions. + Thank you to Michał Dardas for reporting this issue. + +- [CVE-2022-20796](CVE-2022-20796): Fixed a possible NULL-pointer dereference + crash in the scan verdict cache check. + Issue affects versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2. + Thank you to Alexander Patrakov and Antoine Gatineau for reporting this issue. + +- [CVE-2022-20771](CVE-2022-20771): Fixed a possible infinite loop vulnerability + in the TIFF file parser. + Issue affects versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and + prior versions. + The issue only occurs if the "--alert-broken-media" ClamScan option is + enabled. For ClamD, the affected option is "AlertBrokenMedia yes", and for + libclamav it is the "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. + Thank you to Michał Dardas for reporting this issue. + +- [CVE-2022-20785](CVE-2022-20785): Fixed a possible memory leak in the + HTML file parser / Javascript normalizer. + Issue affects versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and + prior versions. + Thank you to Michał Dardas for reporting this issue. + +- [CVE-2022-20792](CVE-2022-20792): Fixed a possible multi-byte heap buffer + overflow write vulnerability in the signature database load module. + The fix was to update the vendored regex library to the latest version. + Issue affects versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and + prior versions. + Thank you to Michał Dardas for reporting this issue. + +- ClamOnAcc: Fixed a number of assorted stability issues and added niceties for + debugging ClamOnAcc. Patches courtesy of Frank Fegert. + +- Fixed an issue causing byte-compare subsignatures to cause an alert when they + match even if other conditions of the given logical signatures were not met. + +- Fix memleak when using multiple byte-compare subsignatures. + This fix was backported from 0.104.0. + Thank you to Andrea De Pasquale for contributing the fix. + +- Assorted bug fixes and improvements. + +Special thanks to the following people for code contributions and bug reports: +- Alexander Patrakov +- Andrea De Pasquale +- Antoine Gatineau +- Frank Fegert +- Michał Dardas + ## 0.103.5 ClamAV 0.103.5 is a critical patch release with the following fixes: diff -Nru clamav-0.103.5+dfsg/clamonacc/c-thread-pool/thpool.c clamav-0.103.6+dfsg/clamonacc/c-thread-pool/thpool.c --- clamav-0.103.5+dfsg/clamonacc/c-thread-pool/thpool.c 2022-01-10 23:17:45.000000000 +0000 +++ clamav-0.103.6+dfsg/clamonacc/c-thread-pool/thpool.c 2022-05-02 04:46:41.000000000 +0000 @@ -18,7 +18,9 @@ #include #if defined(__linux__) #include +#include #endif +#include "output.h" #include "thpool.h" @@ -282,7 +284,7 @@ static int thread_init (thpool_* thpool_p, struct thread** thread_p, int id){ *thread_p = (struct thread*)malloc(sizeof(struct thread)); - if (thread_p == NULL){ + if (*thread_p == NULL){ err("thread_init(): Could not allocate memory for thread\n"); return -1; } @@ -290,7 +292,7 @@ (*thread_p)->thpool_p = thpool_p; (*thread_p)->id = id; - pthread_create(&(*thread_p)->pthread, NULL, (void *)thread_do, (*thread_p)); + pthread_create(&(*thread_p)->pthread, NULL, (void * (*)(void *)) thread_do, (*thread_p)); pthread_detach((*thread_p)->pthread); return 0; } @@ -317,8 +319,8 @@ static void* thread_do(struct thread* thread_p){ /* Set thread name for profiling and debuging */ - char thread_name[128] = {0}; - sprintf(thread_name, "thread-pool-%d", thread_p->id); + char thread_name[32] = {0}; + snprintf(thread_name, 32, "thread-pool-%d", thread_p->id); #if defined(__linux__) /* Use prctl instead to prevent using _GNU_SOURCE flag and implicit declaration */ @@ -456,11 +458,7 @@ /* Get first job from queue(removes it from queue) -<<<<<<< HEAD - * * Notice: Caller MUST hold a mutex -======= ->>>>>>> da2c0fe45e43ce0937f272c8cd2704bdc0afb490 */ static struct job* jobqueue_pull(jobqueue* jobqueue_p){ @@ -473,12 +471,14 @@ break; case 1: /* if one job in queue */ + logg("*jobqueue_pull: Thread %d pulled last job from queue.\n", syscall(SYS_gettid)); jobqueue_p->front = NULL; jobqueue_p->rear = NULL; jobqueue_p->len = 0; break; default: /* if >1 jobs in queue */ + logg("*jobqueue_pull: Thread %d pulled a job from queue.\n", syscall(SYS_gettid)); jobqueue_p->front = job_p->prev; jobqueue_p->len--; /* more than one job in queue -> post it */ diff -Nru clamav-0.103.5+dfsg/clamonacc/c-thread-pool/thpool.h clamav-0.103.6+dfsg/clamonacc/c-thread-pool/thpool.h --- clamav-0.103.5+dfsg/clamonacc/c-thread-pool/thpool.h 2022-01-10 23:17:45.000000000 +0000 +++ clamav-0.103.6+dfsg/clamonacc/c-thread-pool/thpool.h 2022-05-02 04:46:41.000000000 +0000 @@ -20,7 +20,7 @@ /** * @brief Initialize threadpool * - * Initializes a threadpool. This function will not return untill all + * Initializes a threadpool. This function will not return until all * threads have initialized successfully. * * @example @@ -62,7 +62,7 @@ * @param threadpool threadpool to which the work will be added * @param function_p pointer to function to add as work * @param arg_p pointer to an argument - * @return 0 on successs, -1 otherwise. + * @return 0 on success, -1 otherwise. */ int thpool_add_work(threadpool, void (*function_p)(void*), void* arg_p); @@ -77,7 +77,7 @@ * Smart polling is used in wait. The polling is initially 0 - meaning that * there is virtually no polling at all. If after 1 seconds the threads * haven't finished, the polling interval starts growing exponentially - * untill it reaches max_secs seconds. Then it jumps down to a maximum polling + * until it reaches max_secs seconds. Then it jumps down to a maximum polling * interval assuming that heavy processing is being used in the threadpool. * * @example diff -Nru clamav-0.103.5+dfsg/clamonacc/clamav-clamonacc.service.in clamav-0.103.6+dfsg/clamonacc/clamav-clamonacc.service.in --- clamav-0.103.5+dfsg/clamonacc/clamav-clamonacc.service.in 2022-01-10 23:17:45.000000000 +0000 +++ clamav-0.103.6+dfsg/clamonacc/clamav-clamonacc.service.in 2022-05-02 04:46:41.000000000 +0000 @@ -11,7 +11,7 @@ Type=simple User=root ExecStartPre=/bin/bash -c "while [ ! -S /run/clamav/clamd.ctl ]; do sleep 1; done" -ExecStart=@prefix@/sbin/clamonacc -F --config-file=@APP_CONFIG_DIRECTORY@/clamd.conf --log=/var/log/clamav/clamonacc.log --move=/root/quarantine +ExecStart=@prefix@/sbin/clamonacc -F --log=/var/log/clamav/clamonacc.log --move=/root/quarantine [Install] WantedBy=multi-user.target diff -Nru clamav-0.103.5+dfsg/clamonacc/inotif/inotif.c clamav-0.103.6+dfsg/clamonacc/inotif/inotif.c --- clamav-0.103.5+dfsg/clamonacc/inotif/inotif.c 2022-01-10 23:17:45.000000000 +0000 +++ clamav-0.103.6+dfsg/clamonacc/inotif/inotif.c 2022-05-02 04:46:41.000000000 +0000 @@ -30,6 +30,9 @@ #include #include #include +#if defined(__linux__) +#include +#endif #include #include #include @@ -293,7 +296,7 @@ if (type & ONAS_IN) { wd = hnode->wd; - if (!inotify_rm_watch(fd, wd)) return CL_EARG; + if (!inotify_rm_watch(fd, wd) && errno != ENOENT) return CL_EARG; /* Unlink the hash node from the watch descriptor lookup table */ hnode->wd = 0; @@ -359,6 +362,18 @@ void *onas_ddd_th(void *arg) { + /* Set thread name for profiling and debuging */ + const char thread_name[] = "clamonacc-ddd"; + +#if defined(__linux__) + /* Use prctl instead to prevent using _GNU_SOURCE flag and implicit declaration */ + prctl(PR_SET_NAME, thread_name); +#elif defined(__APPLE__) && defined(__MACH__) + pthread_setname_np(thread_name); +#else + logg("^ClamInotif: Setting of the thread name is currently not supported on this system\n"); +#endif + struct onas_context *ctx = (struct onas_context *)arg; sigset_t sigset; const struct optstruct *pt; @@ -381,14 +396,16 @@ sigdelset(&sigset, SIGUSR1); sigdelset(&sigset, SIGUSR2); /* The behavior of a process is undefined after it ignores a - * SIGFPE, SIGILL, SIGSEGV, or SIGBUS signal */ + * SIGFPE, SIGILL, SIGSEGV, or SIGBUS signal */ sigdelset(&sigset, SIGFPE); sigdelset(&sigset, SIGILL); + sigdelset(&sigset, SIGSEGV); sigdelset(&sigset, SIGTERM); sigdelset(&sigset, SIGINT); #ifdef SIGBUS sigdelset(&sigset, SIGBUS); #endif + pthread_sigmask(SIG_SETMASK, &sigset, NULL); logg("*ClamInotif: starting inotify event loop ...\n"); @@ -629,46 +646,57 @@ event = (const struct inotify_event *)p; wd = event->wd; - path = wdlt[wd]; + if (wd >= 0) + path = wdlt[wd]; + else + path = NULL; child = event->name; if (path == NULL) { - logg("*ClamInotif: watch descriptor not found in lookup table ... skipping\n"); + logg("*ClamInotif: watch descriptor (wd:%d) not found in lookup table ... skipping\n", wd); continue; } - len = strlen(path); - size_t size = strlen(child) + len + 2; - char *child_path = (char *)cli_malloc(size); - if (child_path == NULL) { - logg("*ClamInotif: could not allocate space for child path ... aborting\n"); - return NULL; - } - - if (path[len - 1] == '/') { - snprintf(child_path, --size, "%s%s", path, child); + if (event->mask & IN_UNMOUNT) { + logg("!ClamInotif: inofify event IN_UNMOUNT (mask:%d) occured, clamonacc should be restartet because a filesystem monitored by inotify was umounted.\n", event->mask); + } else if (event->mask & IN_Q_OVERFLOW) { + logg("!ClamInotif: inotify event IN_Q_OVERFLOW (mask:%d) occured, clamonacc should be restartet because a inotify events were dropped by the kernel and the internal clamonacc inotify data structures are likely invalid.\n", event->mask); + } else if (event->mask & IN_IGNORED) { + // Ignore for debugging purposes } else { - snprintf(child_path, size, "%s/%s", path, child); - } + len = strlen(path); + size_t size = strlen(child) + len + 2; + char *child_path = (char *)cli_malloc(size); + if (child_path == NULL) { + logg("*ClamInotif: could not allocate space for child path ... aborting\n"); + return NULL; + } - if (event->mask & IN_DELETE) { - onas_ddd_handle_in_delete(ctx, path, child_path, event, wd); + if (path[len - 1] == '/') { + snprintf(child_path, --size, "%s%s", path, child); + } else { + snprintf(child_path, size, "%s/%s", path, child); + } - } else if (event->mask & IN_MOVED_FROM) { - onas_ddd_handle_in_moved_from(ctx, path, child_path, event, wd); + if (event->mask & IN_DELETE) { + onas_ddd_handle_in_delete(ctx, path, child_path, event, wd); - } else if (event->mask & IN_CREATE) { - onas_ddd_handle_in_create(ctx, path, child_path, event, wd, in_mask); + } else if (event->mask & IN_MOVED_FROM) { + onas_ddd_handle_in_moved_from(ctx, path, child_path, event, wd); - } else if (event->mask & IN_CLOSE_WRITE) { - onas_ddd_handle_in_close_write(ctx, child_path); + } else if (event->mask & IN_CREATE) { + onas_ddd_handle_in_create(ctx, path, child_path, event, wd, in_mask); - } else if (event->mask & IN_MOVED_TO) { - onas_ddd_handle_in_moved_to(ctx, path, child_path, event, wd, in_mask); - } + } else if (event->mask & IN_CLOSE_WRITE) { + onas_ddd_handle_in_close_write(ctx, child_path); - free(child_path); - child_path = NULL; + } else if (event->mask & IN_MOVED_TO) { + onas_ddd_handle_in_moved_to(ctx, path, child_path, event, wd, in_mask); + } + + free(child_path); + child_path = NULL; + } } } } diff -Nru clamav-0.103.5+dfsg/clamonacc/scan/onas_queue.c clamav-0.103.6+dfsg/clamonacc/scan/onas_queue.c --- clamav-0.103.5+dfsg/clamonacc/scan/onas_queue.c 2022-01-10 23:17:45.000000000 +0000 +++ clamav-0.103.6+dfsg/clamonacc/scan/onas_queue.c 2022-05-02 04:46:41.000000000 +0000 @@ -30,6 +30,9 @@ #include #include #include +#if defined(__linux__) +#include +#endif #include // libclamav @@ -142,6 +145,17 @@ void *onas_scan_queue_th(void *arg) { + /* Set thread name for profiling and debuging */ + const char thread_name[] = "clamonacc-sq"; + +#if defined(__linux__) + /* Use prctl instead to prevent using _GNU_SOURCE flag and implicit declaration */ + prctl(PR_SET_NAME, thread_name); +#elif defined(__APPLE__) && defined(__MACH__) + pthread_setname_np(thread_name); +#else + logg("^ClamScanQueue: Setting of the thread name is currently not supported on this system\n"); +#endif /* not a ton of use for context right now, but perhaps in the future we can pass in more options */ struct onas_context *ctx = (struct onas_context *)arg; @@ -152,7 +166,7 @@ sigfillset(&sigset); sigdelset(&sigset, SIGUSR2); /* The behavior of a process is undefined after it ignores a - * SIGFPE, SIGILL, SIGSEGV, or SIGBUS signal */ + * SIGFPE, SIGILL, SIGSEGV, or SIGBUS signal */ sigdelset(&sigset, SIGFPE); sigdelset(&sigset, SIGILL); sigdelset(&sigset, SIGSEGV); @@ -161,6 +175,7 @@ #ifdef SIGBUS sigdelset(&sigset, SIGBUS); #endif + pthread_sigmask(SIG_SETMASK, &sigset, NULL); logg("*ClamScanQueue: initializing event queue consumer ... (%d) threads in thread pool\n", ctx->maxthreads); onas_init_event_queue(); diff -Nru clamav-0.103.5+dfsg/configure clamav-0.103.6+dfsg/configure --- clamav-0.103.5+dfsg/configure 2022-01-10 23:18:10.000000000 +0000 +++ clamav-0.103.6+dfsg/configure 2022-05-02 04:47:06.000000000 +0000 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.69 for ClamAV 0.103.5. +# Generated by GNU Autoconf 2.69 for ClamAV 0.103.6. # # Report bugs to . # @@ -592,8 +592,8 @@ # Identity of this package. PACKAGE_NAME='ClamAV' PACKAGE_TARNAME='clamav' -PACKAGE_VERSION='0.103.5' -PACKAGE_STRING='ClamAV 0.103.5' +PACKAGE_VERSION='0.103.6' +PACKAGE_STRING='ClamAV 0.103.6' PACKAGE_BUGREPORT='https://github.com/Cisco-Talos/clamav/issues' PACKAGE_URL='https://www.clamav.net/' @@ -1606,7 +1606,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures ClamAV 0.103.5 to adapt to many kinds of systems. +\`configure' configures ClamAV 0.103.6 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1687,7 +1687,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of ClamAV 0.103.5:";; + short | recursive ) echo "Configuration of ClamAV 0.103.6:";; esac cat <<\_ACEOF --enable-dependency-tracking @@ -1922,7 +1922,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -ClamAV configure 0.103.5 +ClamAV configure 0.103.6 generated by GNU Autoconf 2.69 Copyright (C) 2012 Free Software Foundation, Inc. @@ -2550,7 +2550,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by ClamAV $as_me 0.103.5, which was +It was created by ClamAV $as_me 0.103.6, which was generated by GNU Autoconf 2.69. Invocation command line was $ $0 $@ @@ -4308,7 +4308,7 @@ # Define the identity of the package. PACKAGE='clamav' - VERSION='0.103.5' + VERSION='0.103.6' # Some tools Automake needs. @@ -6036,7 +6036,7 @@ $as_echo "#define PACKAGE PACKAGE_NAME" >>confdefs.h -VERSION="0.103.5" +VERSION="0.103.6" major=`echo $PACKAGE_VERSION |cut -d. -f1 | sed -e "s/^0-9//g"` minor=`echo $PACKAGE_VERSION |cut -d. -f2 | sed -e "s/^0-9//g"` @@ -31896,7 +31896,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by ClamAV $as_me 0.103.5, which was +This file was extended by ClamAV $as_me 0.103.6, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -31963,7 +31963,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -ClamAV config.status 0.103.5 +ClamAV config.status 0.103.6 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" @@ -34813,7 +34813,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by ClamAV $as_me 0.103.5, which was +This file was extended by ClamAV $as_me 0.103.6, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -34880,7 +34880,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -ClamAV config.status 0.103.5 +ClamAV config.status 0.103.6 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" diff -Nru clamav-0.103.5+dfsg/configure.ac clamav-0.103.6+dfsg/configure.ac --- clamav-0.103.5+dfsg/configure.ac 2022-01-12 19:53:22.000000000 +0000 +++ clamav-0.103.6+dfsg/configure.ac 2022-05-12 16:34:19.000000000 +0000 @@ -22,7 +22,7 @@ dnl For a release change [devel] to the real version [0.xy] dnl also change VERSION below -AC_INIT([ClamAV], [0.103.5], [https://github.com/Cisco-Talos/clamav/issues], [clamav], [https://www.clamav.net/]) +AC_INIT([ClamAV], [0.103.6], [https://github.com/Cisco-Talos/clamav/issues], [clamav], [https://www.clamav.net/]) dnl put configure auxiliary into config AC_CONFIG_AUX_DIR([config]) diff -Nru clamav-0.103.5+dfsg/debian/.git-dpm clamav-0.103.6+dfsg/debian/.git-dpm --- clamav-0.103.5+dfsg/debian/.git-dpm 2022-01-13 20:51:03.000000000 +0000 +++ clamav-0.103.6+dfsg/debian/.git-dpm 2022-05-26 08:18:08.000000000 +0000 @@ -1,8 +1,8 @@ # see git-dpm(1) from git-dpm package -d06a6fa976e864503061203b84b498ce46b9513d -d06a6fa976e864503061203b84b498ce46b9513d -857db6f7fe6291d39090c77afdefa94d97161cb2 -857db6f7fe6291d39090c77afdefa94d97161cb2 -clamav_0.103.5+dfsg.orig.tar.xz -6b767150c6b8cb9c8c6b11a2ae3df961fd65533f -7121136 +1db21df237c75b67094efd64dea59f4f528c36ba +1db21df237c75b67094efd64dea59f4f528c36ba +75754d0f4c00d0ac0864e2a506bfc1d977d55d00 +75754d0f4c00d0ac0864e2a506bfc1d977d55d00 +clamav_0.103.6+dfsg.orig.tar.xz +6212705bf2cb168a55f76ae4cab31fa40909aed8 +7135300 diff -Nru clamav-0.103.5+dfsg/debian/changelog clamav-0.103.6+dfsg/debian/changelog --- clamav-0.103.5+dfsg/debian/changelog 2022-01-13 20:51:03.000000000 +0000 +++ clamav-0.103.6+dfsg/debian/changelog 2022-05-26 08:19:13.000000000 +0000 @@ -1,3 +1,20 @@ +clamav (0.103.6+dfsg-0+deb10u1) buster; urgency=medium + + * Import 0.103.6 + - CVE-2022-20770 (Possible infinite loop vulnerability in the CHM file + parser). + - CVE-2022-20796 (Possible NULL-pointer dereference crash in the scan + verdict cache check). + - CVE-2022-20771 (Possible infinite loop vulnerability in the TIFF file + parser). + - CVE-2022-20785 (Possible memory leak in the HTML file parser/ + Javascript normalizer). + - CVE-2022-20792 (Possible multi-byte heap buffer overflow write + vulnerability in the signature database load module. + - Update symbol file. + + -- Sebastian Andrzej Siewior Thu, 26 May 2022 10:19:13 +0200 + clamav (0.103.5+dfsg-0+deb10u1) buster; urgency=medium * Import 0.103.5 diff -Nru clamav-0.103.5+dfsg/debian/libclamav9.symbols clamav-0.103.6+dfsg/debian/libclamav9.symbols --- clamav-0.103.5+dfsg/debian/libclamav9.symbols 2022-01-13 20:50:52.000000000 +0000 +++ clamav-0.103.6+dfsg/debian/libclamav9.symbols 2022-05-26 08:18:59.000000000 +0000 @@ -1,20 +1,20 @@ libclamav.so.9 libclamav9 #MINVER# * Build-Depends-Package: libclamav-dev - CLAMAV_PRIVATE@CLAMAV_PRIVATE 0.103.5 + CLAMAV_PRIVATE@CLAMAV_PRIVATE 0.103.6 CLAMAV_PUBLIC@CLAMAV_PUBLIC 0.101.0 - __cli_strcasestr@CLAMAV_PRIVATE 0.103.5 - __cli_strndup@CLAMAV_PRIVATE 0.103.5 - __cli_strnlen@CLAMAV_PRIVATE 0.103.5 - __cli_strnstr@CLAMAV_PRIVATE 0.103.5 - base64Flush@CLAMAV_PRIVATE 0.103.5 - blobAddData@CLAMAV_PRIVATE 0.103.5 - blobCreate@CLAMAV_PRIVATE 0.103.5 - blobDestroy@CLAMAV_PRIVATE 0.103.5 - cl_ASN1_GetTimeT@CLAMAV_PRIVATE 0.103.5 + __cli_strcasestr@CLAMAV_PRIVATE 0.103.6 + __cli_strndup@CLAMAV_PRIVATE 0.103.6 + __cli_strnlen@CLAMAV_PRIVATE 0.103.6 + __cli_strnstr@CLAMAV_PRIVATE 0.103.6 + base64Flush@CLAMAV_PRIVATE 0.103.6 + blobAddData@CLAMAV_PRIVATE 0.103.6 + blobCreate@CLAMAV_PRIVATE 0.103.6 + blobDestroy@CLAMAV_PRIVATE 0.103.6 + cl_ASN1_GetTimeT@CLAMAV_PRIVATE 0.103.6 cl_always_gen_section_hash@CLAMAV_PUBLIC 0.101.0 - cl_base64_decode@CLAMAV_PRIVATE 0.103.5 - cl_base64_encode@CLAMAV_PRIVATE 0.103.5 - cl_cleanup_crypto@CLAMAV_PRIVATE 0.103.5 + cl_base64_decode@CLAMAV_PRIVATE 0.103.6 + cl_base64_encode@CLAMAV_PRIVATE 0.103.6 + cl_cleanup_crypto@CLAMAV_PRIVATE 0.103.6 cl_countsigs@CLAMAV_PUBLIC 0.101.0 cl_cvdfree@CLAMAV_PUBLIC 0.101.0 cl_cvdhead@CLAMAV_PUBLIC 0.101.0 @@ -54,21 +54,21 @@ cl_fmap_close@CLAMAV_PUBLIC 0.101.0 cl_fmap_open_handle@CLAMAV_PUBLIC 0.101.0 cl_fmap_open_memory@CLAMAV_PUBLIC 0.101.0 - cl_get_pkey_file@CLAMAV_PRIVATE 0.103.5 - cl_get_x509_from_mem@CLAMAV_PRIVATE 0.103.5 - cl_hash_data@CLAMAV_PRIVATE 0.103.5 + cl_get_pkey_file@CLAMAV_PRIVATE 0.103.6 + cl_get_x509_from_mem@CLAMAV_PRIVATE 0.103.6 + cl_hash_data@CLAMAV_PRIVATE 0.103.6 cl_hash_destroy@CLAMAV_PUBLIC 0.101.0 - cl_hash_file_fd@CLAMAV_PRIVATE 0.103.5 - cl_hash_file_fd_ctx@CLAMAV_PRIVATE 0.103.5 - cl_hash_file_fp@CLAMAV_PRIVATE 0.103.5 + cl_hash_file_fd@CLAMAV_PRIVATE 0.103.6 + cl_hash_file_fd_ctx@CLAMAV_PRIVATE 0.103.6 + cl_hash_file_fp@CLAMAV_PRIVATE 0.103.6 cl_hash_init@CLAMAV_PUBLIC 0.101.0 cl_init@CLAMAV_PUBLIC 0.101.0 - cl_initialize_crypto@CLAMAV_PRIVATE 0.103.5 + cl_initialize_crypto@CLAMAV_PRIVATE 0.103.6 cl_load@CLAMAV_PUBLIC 0.101.0 - cl_load_cert@CLAMAV_PRIVATE 0.103.5 - cl_load_crl@CLAMAV_PRIVATE 0.103.5 + cl_load_cert@CLAMAV_PRIVATE 0.103.6 + cl_load_crl@CLAMAV_PRIVATE 0.103.6 cl_retdbdir@CLAMAV_PUBLIC 0.101.0 - cl_retflevel@CLAMAV_PUBLIC 0.103.5 + cl_retflevel@CLAMAV_PUBLIC 0.103.6 cl_retver@CLAMAV_PUBLIC 0.101.0 cl_scandesc@CLAMAV_PUBLIC 0.101.0 cl_scandesc_callback@CLAMAV_PUBLIC 0.101.0 @@ -76,196 +76,196 @@ cl_scanfile_callback@CLAMAV_PUBLIC 0.101.0 cl_scanmap_callback@CLAMAV_PUBLIC 0.101.0 cl_set_clcb_msg@CLAMAV_PUBLIC 0.101.0 - cl_sha1@CLAMAV_PRIVATE 0.103.5 - cl_sha256@CLAMAV_PRIVATE 0.103.5 - cl_sign_data@CLAMAV_PRIVATE 0.103.5 - cl_sign_data_keyfile@CLAMAV_PRIVATE 0.103.5 - cl_sign_file_fd@CLAMAV_PRIVATE 0.103.5 - cl_sign_file_fp@CLAMAV_PRIVATE 0.103.5 + cl_sha1@CLAMAV_PRIVATE 0.103.6 + cl_sha256@CLAMAV_PRIVATE 0.103.6 + cl_sign_data@CLAMAV_PRIVATE 0.103.6 + cl_sign_data_keyfile@CLAMAV_PRIVATE 0.103.6 + cl_sign_file_fd@CLAMAV_PRIVATE 0.103.6 + cl_sign_file_fp@CLAMAV_PRIVATE 0.103.6 cl_statchkdir@CLAMAV_PUBLIC 0.101.0 cl_statfree@CLAMAV_PUBLIC 0.101.0 cl_statinidir@CLAMAV_PUBLIC 0.101.0 cl_strerror@CLAMAV_PUBLIC 0.101.0 cl_update_hash@CLAMAV_PUBLIC 0.101.0 - cl_validate_certificate_chain@CLAMAV_PRIVATE 0.103.5 - cl_validate_certificate_chain_ts_dir@CLAMAV_PRIVATE 0.103.5 - cl_verify_signature@CLAMAV_PRIVATE 0.103.5 - cl_verify_signature_fd@CLAMAV_PRIVATE 0.103.5 - cl_verify_signature_fd_x509@CLAMAV_PRIVATE 0.103.5 - cl_verify_signature_fd_x509_keyfile@CLAMAV_PRIVATE 0.103.5 - cl_verify_signature_hash@CLAMAV_PRIVATE 0.103.5 - cl_verify_signature_hash_x509@CLAMAV_PRIVATE 0.103.5 - cl_verify_signature_hash_x509_keyfile@CLAMAV_PRIVATE 0.103.5 - cl_verify_signature_x509@CLAMAV_PRIVATE 0.103.5 - cl_verify_signature_x509_keyfile@CLAMAV_PRIVATE 0.103.5 - cli_ac_buildtrie@CLAMAV_PRIVATE 0.103.5 - cli_ac_chklsig@CLAMAV_PRIVATE 0.103.5 - cli_ac_free@CLAMAV_PRIVATE 0.103.5 - cli_ac_freedata@CLAMAV_PRIVATE 0.103.5 - cli_ac_init@CLAMAV_PRIVATE 0.103.5 - cli_ac_initdata@CLAMAV_PRIVATE 0.103.5 - cli_ac_scanbuff@CLAMAV_PRIVATE 0.103.5 - cli_basename@CLAMAV_PRIVATE 0.103.5 - cli_bm_free@CLAMAV_PRIVATE 0.103.5 - cli_bm_init@CLAMAV_PRIVATE 0.103.5 - cli_bm_scanbuff@CLAMAV_PRIVATE 0.103.5 - cli_build_regex_list@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_context_alloc@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_context_clear@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_context_destroy@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_context_getresult_int@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_context_set_trace@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_context_setfile@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_context_setfuncid@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_context_setparam_int@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_context_setparam_ptr@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_debug@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_debug_printsrc@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_describe@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_destroy@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_done@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_init@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_load@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_prepare2@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_printversion@CLAMAV_PRIVATE 0.103.5 - cli_bytecode_run@CLAMAV_PRIVATE 0.103.5 - cli_bytefunc_describe@CLAMAV_PRIVATE 0.103.5 - cli_byteinst_describe@CLAMAV_PRIVATE 0.103.5 - cli_bytetype_describe@CLAMAV_PRIVATE 0.103.5 - cli_bytevalue_describe@CLAMAV_PRIVATE 0.103.5 - cli_calloc@CLAMAV_PRIVATE 0.103.5 - cli_check_auth_header@CLAMAV_PRIVATE 0.103.5 - cli_chomp@CLAMAV_PRIVATE 0.103.5 - cli_codepage_to_utf8@CLAMAV_PRIVATE 0.103.5 - cli_ctime@CLAMAV_PRIVATE 0.103.5 - cli_cvdunpack@CLAMAV_PRIVATE 0.103.5 - cli_dbgmsg_internal@CLAMAV_PRIVATE 0.103.5 - cli_dconf_init@CLAMAV_PRIVATE 0.103.5 - cli_debug_flag@CLAMAV_PRIVATE 0.103.5 - cli_detect_environment@CLAMAV_PRIVATE 0.103.5 - cli_disasm_one@CLAMAV_PRIVATE 0.103.5 - cli_errmsg@CLAMAV_PRIVATE 0.103.5 - cli_filecopy@CLAMAV_PRIVATE 0.103.5 - cli_free_vba_project@CLAMAV_PRIVATE 0.103.5 - cli_ftw@CLAMAV_PRIVATE 0.103.5 - cli_genhash_pe@CLAMAV_PRIVATE 0.103.5 - cli_gentemp@CLAMAV_PRIVATE 0.103.5 - cli_gentemp_with_prefix@CLAMAV_PRIVATE 0.103.5 - cli_gentempfd@CLAMAV_PRIVATE 0.103.5 - cli_get_filepath_from_filedesc@CLAMAV_PRIVATE 0.103.5 - cli_gettmpdir@CLAMAV_PRIVATE 0.103.5 - cli_hashfile@CLAMAV_PRIVATE 0.103.5 - cli_hashset_destroy@CLAMAV_PRIVATE 0.103.5 - cli_hashstream@CLAMAV_PRIVATE 0.103.5 - cli_hex2str@CLAMAV_PRIVATE 0.103.5 - cli_hex2ui@CLAMAV_PRIVATE 0.103.5 - cli_initroots@CLAMAV_PRIVATE 0.103.5 - cli_isnumber@CLAMAV_PRIVATE 0.103.5 - cli_js_destroy@CLAMAV_PRIVATE 0.103.5 - cli_js_init@CLAMAV_PRIVATE 0.103.5 - cli_js_output@CLAMAV_PRIVATE 0.103.5 - cli_js_parse_done@CLAMAV_PRIVATE 0.103.5 - cli_js_process_buffer@CLAMAV_PRIVATE 0.103.5 - cli_ldbtokenize@CLAMAV_PRIVATE 0.103.5 - cli_malloc@CLAMAV_PRIVATE 0.103.5 - cli_memstr@CLAMAV_PRIVATE 0.103.5 - cli_ole2_extract@CLAMAV_PRIVATE 0.103.5 - cli_parse_add@CLAMAV_PRIVATE 0.103.5 - cli_pcre_build@CLAMAV_PRIVATE 0.103.5 - cli_pcre_freeoff@CLAMAV_PRIVATE 0.103.5 - cli_pcre_init@CLAMAV_PRIVATE 0.103.5 - cli_pcre_perf_events_destroy@CLAMAV_PRIVATE 0.103.5 - cli_pcre_perf_print@CLAMAV_PRIVATE 0.103.5 - cli_pcre_recaloff@CLAMAV_PRIVATE 0.103.5 - cli_pcre_scanbuf@CLAMAV_PRIVATE 0.103.5 - cli_ppt_vba_read@CLAMAV_PRIVATE 0.103.5 - cli_printcxxver@CLAMAV_PRIVATE 0.103.5 - cli_readn@CLAMAV_PRIVATE 0.103.5 - cli_realloc@CLAMAV_PRIVATE 0.103.5 - cli_realpath@CLAMAV_PRIVATE 0.103.5 - cli_regcomp@CLAMAV_PRIVATE 0.103.5 - cli_regex2suffix@CLAMAV_PRIVATE 0.103.5 - cli_regexec@CLAMAV_PRIVATE 0.103.5 - cli_regfree@CLAMAV_PRIVATE 0.103.5 - cli_rmdirs@CLAMAV_PRIVATE 0.103.5 - cli_rndnum@CLAMAV_PRIVATE 0.103.5 - cli_sanitize_filepath@CLAMAV_PRIVATE 0.103.5 - cli_scan_buff@CLAMAV_PRIVATE 0.103.5 - cli_scan_fmap@CLAMAV_PRIVATE 0.103.5 - cli_sigopts_handler@CLAMAV_PRIVATE 0.103.5 - cli_sigperf_events_destroy@CLAMAV_PRIVATE 0.103.5 - cli_sigperf_print@CLAMAV_PRIVATE 0.103.5 - cli_str2hex@CLAMAV_PRIVATE 0.103.5 - cli_strbcasestr@CLAMAV_PRIVATE 0.103.5 - cli_strdup@CLAMAV_PRIVATE 0.103.5 - cli_strerror@CLAMAV_PRIVATE 0.103.5 - cli_strlcat@CLAMAV_PRIVATE 0.103.5 - cli_strlcpy@CLAMAV_PRIVATE 0.103.5 - cli_strntoul@CLAMAV_PRIVATE 0.103.5 - cli_strrcpy@CLAMAV_PRIVATE 0.103.5 - cli_strtok@CLAMAV_PRIVATE 0.103.5 - cli_strtokbuf@CLAMAV_PRIVATE 0.103.5 - cli_strtokenize@CLAMAV_PRIVATE 0.103.5 - cli_textbuffer_append_normalize@CLAMAV_PRIVATE 0.103.5 - cli_unescape@CLAMAV_PRIVATE 0.103.5 - cli_unlink@CLAMAV_PRIVATE 0.103.5 - cli_url_canon@CLAMAV_PRIVATE 0.103.5 - cli_utf16_to_utf8@CLAMAV_PRIVATE 0.103.5 - cli_utf16toascii@CLAMAV_PRIVATE 0.103.5 - cli_vba_inflate@CLAMAV_PRIVATE 0.103.5 - cli_vba_readdir@CLAMAV_PRIVATE 0.103.5 - cli_versig2@CLAMAV_PRIVATE 0.103.5 - cli_versig@CLAMAV_PRIVATE 0.103.5 - cli_warnmsg@CLAMAV_PRIVATE 0.103.5 - cli_wm_decrypt_macro@CLAMAV_PRIVATE 0.103.5 - cli_wm_readdir@CLAMAV_PRIVATE 0.103.5 - cli_writen@CLAMAV_PRIVATE 0.103.5 - decodeLine@CLAMAV_PRIVATE 0.103.5 - disasmbuf@CLAMAV_PRIVATE 0.103.5 - fmap@CLAMAV_PRIVATE 0.103.5 - fmap_dump_to_file@CLAMAV_PRIVATE 0.103.5 - fmap_duplicate@CLAMAV_PRIVATE 0.103.5 - free_duplicate_fmap@CLAMAV_PRIVATE 0.103.5 - get_fpu_endian@CLAMAV_PRIVATE 0.103.5 - have_clamjit@CLAMAV_PRIVATE 0.103.5 - have_rar@CLAMAV_PRIVATE 0.103.5 - html_normalise_map@CLAMAV_PRIVATE 0.103.5 - html_normalise_mem@CLAMAV_PRIVATE 0.103.5 - html_screnc_decode@CLAMAV_PRIVATE 0.103.5 - html_tag_arg_free@CLAMAV_PRIVATE 0.103.5 - init_domainlist@CLAMAV_PRIVATE 0.103.5 - init_regex_list@CLAMAV_PRIVATE 0.103.5 - init_whitelist@CLAMAV_PRIVATE 0.103.5 - is_regex_ok@CLAMAV_PRIVATE 0.103.5 - load_regex_matcher@CLAMAV_PRIVATE 0.103.5 + cl_validate_certificate_chain@CLAMAV_PRIVATE 0.103.6 + cl_validate_certificate_chain_ts_dir@CLAMAV_PRIVATE 0.103.6 + cl_verify_signature@CLAMAV_PRIVATE 0.103.6 + cl_verify_signature_fd@CLAMAV_PRIVATE 0.103.6 + cl_verify_signature_fd_x509@CLAMAV_PRIVATE 0.103.6 + cl_verify_signature_fd_x509_keyfile@CLAMAV_PRIVATE 0.103.6 + cl_verify_signature_hash@CLAMAV_PRIVATE 0.103.6 + cl_verify_signature_hash_x509@CLAMAV_PRIVATE 0.103.6 + cl_verify_signature_hash_x509_keyfile@CLAMAV_PRIVATE 0.103.6 + cl_verify_signature_x509@CLAMAV_PRIVATE 0.103.6 + cl_verify_signature_x509_keyfile@CLAMAV_PRIVATE 0.103.6 + cli_ac_buildtrie@CLAMAV_PRIVATE 0.103.6 + cli_ac_chklsig@CLAMAV_PRIVATE 0.103.6 + cli_ac_free@CLAMAV_PRIVATE 0.103.6 + cli_ac_freedata@CLAMAV_PRIVATE 0.103.6 + cli_ac_init@CLAMAV_PRIVATE 0.103.6 + cli_ac_initdata@CLAMAV_PRIVATE 0.103.6 + cli_ac_scanbuff@CLAMAV_PRIVATE 0.103.6 + cli_basename@CLAMAV_PRIVATE 0.103.6 + cli_bm_free@CLAMAV_PRIVATE 0.103.6 + cli_bm_init@CLAMAV_PRIVATE 0.103.6 + cli_bm_scanbuff@CLAMAV_PRIVATE 0.103.6 + cli_build_regex_list@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_context_alloc@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_context_clear@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_context_destroy@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_context_getresult_int@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_context_set_trace@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_context_setfile@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_context_setfuncid@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_context_setparam_int@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_context_setparam_ptr@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_debug@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_debug_printsrc@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_describe@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_destroy@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_done@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_init@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_load@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_prepare2@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_printversion@CLAMAV_PRIVATE 0.103.6 + cli_bytecode_run@CLAMAV_PRIVATE 0.103.6 + cli_bytefunc_describe@CLAMAV_PRIVATE 0.103.6 + cli_byteinst_describe@CLAMAV_PRIVATE 0.103.6 + cli_bytetype_describe@CLAMAV_PRIVATE 0.103.6 + cli_bytevalue_describe@CLAMAV_PRIVATE 0.103.6 + cli_calloc@CLAMAV_PRIVATE 0.103.6 + cli_check_auth_header@CLAMAV_PRIVATE 0.103.6 + cli_chomp@CLAMAV_PRIVATE 0.103.6 + cli_codepage_to_utf8@CLAMAV_PRIVATE 0.103.6 + cli_ctime@CLAMAV_PRIVATE 0.103.6 + cli_cvdunpack@CLAMAV_PRIVATE 0.103.6 + cli_dbgmsg_internal@CLAMAV_PRIVATE 0.103.6 + cli_dconf_init@CLAMAV_PRIVATE 0.103.6 + cli_debug_flag@CLAMAV_PRIVATE 0.103.6 + cli_detect_environment@CLAMAV_PRIVATE 0.103.6 + cli_disasm_one@CLAMAV_PRIVATE 0.103.6 + cli_errmsg@CLAMAV_PRIVATE 0.103.6 + cli_filecopy@CLAMAV_PRIVATE 0.103.6 + cli_free_vba_project@CLAMAV_PRIVATE 0.103.6 + cli_ftw@CLAMAV_PRIVATE 0.103.6 + cli_genhash_pe@CLAMAV_PRIVATE 0.103.6 + cli_gentemp@CLAMAV_PRIVATE 0.103.6 + cli_gentemp_with_prefix@CLAMAV_PRIVATE 0.103.6 + cli_gentempfd@CLAMAV_PRIVATE 0.103.6 + cli_get_filepath_from_filedesc@CLAMAV_PRIVATE 0.103.6 + cli_gettmpdir@CLAMAV_PRIVATE 0.103.6 + cli_hashfile@CLAMAV_PRIVATE 0.103.6 + cli_hashset_destroy@CLAMAV_PRIVATE 0.103.6 + cli_hashstream@CLAMAV_PRIVATE 0.103.6 + cli_hex2str@CLAMAV_PRIVATE 0.103.6 + cli_hex2ui@CLAMAV_PRIVATE 0.103.6 + cli_initroots@CLAMAV_PRIVATE 0.103.6 + cli_isnumber@CLAMAV_PRIVATE 0.103.6 + cli_js_destroy@CLAMAV_PRIVATE 0.103.6 + cli_js_init@CLAMAV_PRIVATE 0.103.6 + cli_js_output@CLAMAV_PRIVATE 0.103.6 + cli_js_parse_done@CLAMAV_PRIVATE 0.103.6 + cli_js_process_buffer@CLAMAV_PRIVATE 0.103.6 + cli_ldbtokenize@CLAMAV_PRIVATE 0.103.6 + cli_malloc@CLAMAV_PRIVATE 0.103.6 + cli_memstr@CLAMAV_PRIVATE 0.103.6 + cli_ole2_extract@CLAMAV_PRIVATE 0.103.6 + cli_parse_add@CLAMAV_PRIVATE 0.103.6 + cli_pcre_build@CLAMAV_PRIVATE 0.103.6 + cli_pcre_freeoff@CLAMAV_PRIVATE 0.103.6 + cli_pcre_init@CLAMAV_PRIVATE 0.103.6 + cli_pcre_perf_events_destroy@CLAMAV_PRIVATE 0.103.6 + cli_pcre_perf_print@CLAMAV_PRIVATE 0.103.6 + cli_pcre_recaloff@CLAMAV_PRIVATE 0.103.6 + cli_pcre_scanbuf@CLAMAV_PRIVATE 0.103.6 + cli_ppt_vba_read@CLAMAV_PRIVATE 0.103.6 + cli_printcxxver@CLAMAV_PRIVATE 0.103.6 + cli_readn@CLAMAV_PRIVATE 0.103.6 + cli_realloc@CLAMAV_PRIVATE 0.103.6 + cli_realpath@CLAMAV_PRIVATE 0.103.6 + cli_regcomp@CLAMAV_PRIVATE 0.103.6 + cli_regex2suffix@CLAMAV_PRIVATE 0.103.6 + cli_regexec@CLAMAV_PRIVATE 0.103.6 + cli_regfree@CLAMAV_PRIVATE 0.103.6 + cli_rmdirs@CLAMAV_PRIVATE 0.103.6 + cli_rndnum@CLAMAV_PRIVATE 0.103.6 + cli_sanitize_filepath@CLAMAV_PRIVATE 0.103.6 + cli_scan_buff@CLAMAV_PRIVATE 0.103.6 + cli_scan_fmap@CLAMAV_PRIVATE 0.103.6 + cli_sigopts_handler@CLAMAV_PRIVATE 0.103.6 + cli_sigperf_events_destroy@CLAMAV_PRIVATE 0.103.6 + cli_sigperf_print@CLAMAV_PRIVATE 0.103.6 + cli_str2hex@CLAMAV_PRIVATE 0.103.6 + cli_strbcasestr@CLAMAV_PRIVATE 0.103.6 + cli_strdup@CLAMAV_PRIVATE 0.103.6 + cli_strerror@CLAMAV_PRIVATE 0.103.6 + cli_strlcat@CLAMAV_PRIVATE 0.103.6 + cli_strlcpy@CLAMAV_PRIVATE 0.103.6 + cli_strntoul@CLAMAV_PRIVATE 0.103.6 + cli_strrcpy@CLAMAV_PRIVATE 0.103.6 + cli_strtok@CLAMAV_PRIVATE 0.103.6 + cli_strtokbuf@CLAMAV_PRIVATE 0.103.6 + cli_strtokenize@CLAMAV_PRIVATE 0.103.6 + cli_textbuffer_append_normalize@CLAMAV_PRIVATE 0.103.6 + cli_unescape@CLAMAV_PRIVATE 0.103.6 + cli_unlink@CLAMAV_PRIVATE 0.103.6 + cli_url_canon@CLAMAV_PRIVATE 0.103.6 + cli_utf16_to_utf8@CLAMAV_PRIVATE 0.103.6 + cli_utf16toascii@CLAMAV_PRIVATE 0.103.6 + cli_vba_inflate@CLAMAV_PRIVATE 0.103.6 + cli_vba_readdir@CLAMAV_PRIVATE 0.103.6 + cli_versig2@CLAMAV_PRIVATE 0.103.6 + cli_versig@CLAMAV_PRIVATE 0.103.6 + cli_warnmsg@CLAMAV_PRIVATE 0.103.6 + cli_wm_decrypt_macro@CLAMAV_PRIVATE 0.103.6 + cli_wm_readdir@CLAMAV_PRIVATE 0.103.6 + cli_writen@CLAMAV_PRIVATE 0.103.6 + decodeLine@CLAMAV_PRIVATE 0.103.6 + disasmbuf@CLAMAV_PRIVATE 0.103.6 + fmap@CLAMAV_PRIVATE 0.103.6 + fmap_dump_to_file@CLAMAV_PRIVATE 0.103.6 + fmap_duplicate@CLAMAV_PRIVATE 0.103.6 + free_duplicate_fmap@CLAMAV_PRIVATE 0.103.6 + get_fpu_endian@CLAMAV_PRIVATE 0.103.6 + have_clamjit@CLAMAV_PRIVATE 0.103.6 + have_rar@CLAMAV_PRIVATE 0.103.6 + html_normalise_map@CLAMAV_PRIVATE 0.103.6 + html_normalise_mem@CLAMAV_PRIVATE 0.103.6 + html_screnc_decode@CLAMAV_PRIVATE 0.103.6 + html_tag_arg_free@CLAMAV_PRIVATE 0.103.6 + init_domainlist@CLAMAV_PRIVATE 0.103.6 + init_regex_list@CLAMAV_PRIVATE 0.103.6 + init_whitelist@CLAMAV_PRIVATE 0.103.6 + is_regex_ok@CLAMAV_PRIVATE 0.103.6 + load_regex_matcher@CLAMAV_PRIVATE 0.103.6 lsig_sub_matched@CLAMAV_PUBLIC 0.101.0 - messageCreate@CLAMAV_PRIVATE 0.103.5 - messageDestroy@CLAMAV_PRIVATE 0.103.5 - mpool_calloc@CLAMAV_PRIVATE 0.103.5 - mpool_create@CLAMAV_PRIVATE 0.103.5 - mpool_destroy@CLAMAV_PRIVATE 0.103.5 - mpool_free@CLAMAV_PRIVATE 0.103.5 - mpool_getstats@CLAMAV_PRIVATE 0.103.5 - phishingScan@CLAMAV_PRIVATE 0.103.5 - phishing_done@CLAMAV_PRIVATE 0.103.5 - phishing_init@CLAMAV_PRIVATE 0.103.5 - regex_list_add_pattern@CLAMAV_PRIVATE 0.103.5 - regex_list_done@CLAMAV_PRIVATE 0.103.5 - regex_list_match@CLAMAV_PRIVATE 0.103.5 - tableCreate@CLAMAV_PRIVATE 0.103.5 - tableDestroy@CLAMAV_PRIVATE 0.103.5 - tableFind@CLAMAV_PRIVATE 0.103.5 - tableInsert@CLAMAV_PRIVATE 0.103.5 - tableIterate@CLAMAV_PRIVATE 0.103.5 - tableRemove@CLAMAV_PRIVATE 0.103.5 - tableUpdate@CLAMAV_PRIVATE 0.103.5 - text_normalize_init@CLAMAV_PRIVATE 0.103.5 - text_normalize_map@CLAMAV_PRIVATE 0.103.5 - text_normalize_reset@CLAMAV_PRIVATE 0.103.5 - uniq_add@CLAMAV_PRIVATE 0.103.5 - uniq_free@CLAMAV_PRIVATE 0.103.5 - uniq_get@CLAMAV_PRIVATE 0.103.5 - uniq_init@CLAMAV_PRIVATE 0.103.5 + messageCreate@CLAMAV_PRIVATE 0.103.6 + messageDestroy@CLAMAV_PRIVATE 0.103.6 + mpool_calloc@CLAMAV_PRIVATE 0.103.6 + mpool_create@CLAMAV_PRIVATE 0.103.6 + mpool_destroy@CLAMAV_PRIVATE 0.103.6 + mpool_free@CLAMAV_PRIVATE 0.103.6 + mpool_getstats@CLAMAV_PRIVATE 0.103.6 + phishingScan@CLAMAV_PRIVATE 0.103.6 + phishing_done@CLAMAV_PRIVATE 0.103.6 + phishing_init@CLAMAV_PRIVATE 0.103.6 + regex_list_add_pattern@CLAMAV_PRIVATE 0.103.6 + regex_list_done@CLAMAV_PRIVATE 0.103.6 + regex_list_match@CLAMAV_PRIVATE 0.103.6 + tableCreate@CLAMAV_PRIVATE 0.103.6 + tableDestroy@CLAMAV_PRIVATE 0.103.6 + tableFind@CLAMAV_PRIVATE 0.103.6 + tableInsert@CLAMAV_PRIVATE 0.103.6 + tableIterate@CLAMAV_PRIVATE 0.103.6 + tableRemove@CLAMAV_PRIVATE 0.103.6 + tableUpdate@CLAMAV_PRIVATE 0.103.6 + text_normalize_init@CLAMAV_PRIVATE 0.103.6 + text_normalize_map@CLAMAV_PRIVATE 0.103.6 + text_normalize_reset@CLAMAV_PRIVATE 0.103.6 + uniq_add@CLAMAV_PRIVATE 0.103.6 + uniq_free@CLAMAV_PRIVATE 0.103.6 + uniq_get@CLAMAV_PRIVATE 0.103.6 + uniq_init@CLAMAV_PRIVATE 0.103.6 libfreshclam.so.2 libclamav9 #MINVER# FRESHCLAM_PRIVATE@FRESHCLAM_PRIVATE 0.103.0 FRESHCLAM_PUBLIC@FRESHCLAM_PUBLIC 0.102.1 diff -Nru clamav-0.103.5+dfsg/debian/patches/0007-unit-tests-Fix-ck_assert_msg-call.patch clamav-0.103.6+dfsg/debian/patches/0007-unit-tests-Fix-ck_assert_msg-call.patch --- clamav-0.103.5+dfsg/debian/patches/0007-unit-tests-Fix-ck_assert_msg-call.patch 2022-01-13 20:51:03.000000000 +0000 +++ clamav-0.103.6+dfsg/debian/patches/0007-unit-tests-Fix-ck_assert_msg-call.patch 1970-01-01 00:00:00.000000000 +0000 @@ -1,23 +0,0 @@ -From d06a6fa976e864503061203b84b498ce46b9513d Mon Sep 17 00:00:00 2001 -From: Orion Poplawski -Date: Thu, 17 Sep 2020 22:26:04 -0600 -Subject: unit tests: Fix ck_assert_msg() call - -The first argument to ck_assert_msg() should be a logical condition. ---- - unit_tests/check_jsnorm.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/unit_tests/check_jsnorm.c b/unit_tests/check_jsnorm.c -index 114f052..9b2f4eb 100644 ---- a/unit_tests/check_jsnorm.c -+++ b/unit_tests/check_jsnorm.c -@@ -247,7 +247,7 @@ static void tokenizer_test(const char *in, const char *expected, int split) - fd = open(filename, O_RDONLY); - if (fd < 0) { - jstest_teardown(); -- ck_assert_msg("failed to open output file: %s", filename); -+ ck_assert_msg(0, "failed to open output file: %s", filename); - } - - diff_file_mem(fd, expected, len); diff -Nru clamav-0.103.5+dfsg/debian/patches/Add-support-for-LLVM-3.7.patch clamav-0.103.6+dfsg/debian/patches/Add-support-for-LLVM-3.7.patch --- clamav-0.103.5+dfsg/debian/patches/Add-support-for-LLVM-3.7.patch 2022-01-13 20:51:03.000000000 +0000 +++ clamav-0.103.6+dfsg/debian/patches/Add-support-for-LLVM-3.7.patch 2022-05-26 08:18:08.000000000 +0000 @@ -1,4 +1,4 @@ -From 88884a35a51e7608487861a22c1f84607881d602 Mon Sep 17 00:00:00 2001 +From 53d032a0271872040714fbd1c898c467edbc8f20 Mon Sep 17 00:00:00 2001 From: Andreas Cadhalpun Date: Fri, 14 Oct 2016 20:24:39 +0200 Subject: Add support for LLVM 3.7 diff -Nru clamav-0.103.5+dfsg/debian/patches/Add-support-for-LLVM-3.8.patch clamav-0.103.6+dfsg/debian/patches/Add-support-for-LLVM-3.8.patch --- clamav-0.103.5+dfsg/debian/patches/Add-support-for-LLVM-3.8.patch 2022-01-13 20:51:03.000000000 +0000 +++ clamav-0.103.6+dfsg/debian/patches/Add-support-for-LLVM-3.8.patch 2022-05-26 08:18:08.000000000 +0000 @@ -1,4 +1,4 @@ -From a0338383b7e774b08f4d1da4b8723eac4bb121aa Mon Sep 17 00:00:00 2001 +From 51ada80f2fc04ae3f9ba897768e6c2b50b9d6ab4 Mon Sep 17 00:00:00 2001 From: Andreas Cadhalpun Date: Fri, 14 Oct 2016 20:24:48 +0200 Subject: Add support for LLVM 3.8 diff -Nru clamav-0.103.5+dfsg/debian/patches/Add-support-for-LLVM-3.9.patch clamav-0.103.6+dfsg/debian/patches/Add-support-for-LLVM-3.9.patch --- clamav-0.103.5+dfsg/debian/patches/Add-support-for-LLVM-3.9.patch 2022-01-13 20:51:03.000000000 +0000 +++ clamav-0.103.6+dfsg/debian/patches/Add-support-for-LLVM-3.9.patch 2022-05-26 08:18:08.000000000 +0000 @@ -1,4 +1,4 @@ -From 1defede3bfee9ba6a1e6ca01a6e2df4871a99ac1 Mon Sep 17 00:00:00 2001 +From 1db21df237c75b67094efd64dea59f4f528c36ba Mon Sep 17 00:00:00 2001 From: Andreas Cadhalpun Date: Fri, 14 Oct 2016 20:24:56 +0200 Subject: Add support for LLVM 3.9 diff -Nru clamav-0.103.5+dfsg/debian/patches/Change-paths-in-sample-conf-file-to-match-Debian.patch clamav-0.103.6+dfsg/debian/patches/Change-paths-in-sample-conf-file-to-match-Debian.patch --- clamav-0.103.5+dfsg/debian/patches/Change-paths-in-sample-conf-file-to-match-Debian.patch 2022-01-13 20:51:03.000000000 +0000 +++ clamav-0.103.6+dfsg/debian/patches/Change-paths-in-sample-conf-file-to-match-Debian.patch 2022-05-26 08:18:08.000000000 +0000 @@ -1,4 +1,4 @@ -From 04a427b8608baa316013b20fc4a2984c36cb89d4 Mon Sep 17 00:00:00 2001 +From d63a102147bb062871c410e708a42a2cfbe4525e Mon Sep 17 00:00:00 2001 From: Scott Kitterman Date: Mon, 10 Mar 2014 19:20:18 -0400 Subject: Change paths in sample conf file to match Debian diff -Nru clamav-0.103.5+dfsg/debian/patches/add-support-for-system-tomsfastmath.patch clamav-0.103.6+dfsg/debian/patches/add-support-for-system-tomsfastmath.patch --- clamav-0.103.5+dfsg/debian/patches/add-support-for-system-tomsfastmath.patch 2022-01-13 20:51:03.000000000 +0000 +++ clamav-0.103.6+dfsg/debian/patches/add-support-for-system-tomsfastmath.patch 2022-05-26 08:18:08.000000000 +0000 @@ -1,4 +1,4 @@ -From 5bd06ab70e059be340e2dd2c5ae0a8a76ff82e45 Mon Sep 17 00:00:00 2001 +From 58a4334ff7abab95f07e6dec7a964c3584a7d8ba Mon Sep 17 00:00:00 2001 From: Andreas Cadhalpun Date: Wed, 11 Mar 2015 20:03:15 +0100 Subject: add support for system tomsfastmath @@ -14,7 +14,7 @@ create mode 100644 m4/reorganization/libs/tomsfastmath.m4 diff --git a/configure.ac b/configure.ac -index 514a967..32be9e5 100644 +index d418ee9..9829ea3 100644 --- a/configure.ac +++ b/configure.ac @@ -98,6 +98,7 @@ m4_include([m4/reorganization/libs/libmspack.m4]) diff -Nru clamav-0.103.5+dfsg/debian/patches/clamd_dont_depend_on_clamav_demon_socket.patch clamav-0.103.6+dfsg/debian/patches/clamd_dont_depend_on_clamav_demon_socket.patch --- clamav-0.103.5+dfsg/debian/patches/clamd_dont_depend_on_clamav_demon_socket.patch 2022-01-13 20:51:03.000000000 +0000 +++ clamav-0.103.6+dfsg/debian/patches/clamd_dont_depend_on_clamav_demon_socket.patch 2022-05-26 08:18:08.000000000 +0000 @@ -1,4 +1,4 @@ -From db637151af45858b691556c923236043c2f75030 Mon Sep 17 00:00:00 2001 +From cba6763af18e7d64c5ca1182272e7bd0cf67df28 Mon Sep 17 00:00:00 2001 From: Sebastian Andrzej Siewior Date: Thu, 11 Aug 2016 21:54:10 +0200 Subject: clamd: don't depend on clamav-demon.socket diff -Nru clamav-0.103.5+dfsg/debian/patches/series clamav-0.103.6+dfsg/debian/patches/series --- clamav-0.103.5+dfsg/debian/patches/series 2022-01-13 20:51:03.000000000 +0000 +++ clamav-0.103.6+dfsg/debian/patches/series 2022-05-26 08:14:43.000000000 +0000 @@ -4,4 +4,3 @@ Add-support-for-LLVM-3.7.patch Add-support-for-LLVM-3.8.patch Add-support-for-LLVM-3.9.patch -0007-unit-tests-Fix-ck_assert_msg-call.patch diff -Nru clamav-0.103.5+dfsg/debian/rules clamav-0.103.6+dfsg/debian/rules --- clamav-0.103.5+dfsg/debian/rules 2022-01-13 20:51:03.000000000 +0000 +++ clamav-0.103.6+dfsg/debian/rules 2022-05-26 08:18:59.000000000 +0000 @@ -88,7 +88,7 @@ fi;\ done; \ # Check for library features which may have been upgraded. - if ! grep -q "CL_FLEVEL 126" libclamav/others.h ; then \ + if ! grep -q "CL_FLEVEL 127" libclamav/others.h ; then \ echo "cl_retflevel needs boosting in symbol file"; \ touch debian/exit; \ fi; diff -Nru clamav-0.103.5+dfsg/docs/html/404.html clamav-0.103.6+dfsg/docs/html/404.html --- clamav-0.103.5+dfsg/docs/html/404.html 2022-01-10 23:17:46.000000000 +0000 +++ clamav-0.103.6+dfsg/docs/html/404.html 2022-05-02 04:46:42.000000000 +0000 @@ -3,12 +3,12 @@ - + Page not found - ClamAV Documentation - + @@ -83,7 +83,7 @@ @@ -91,7 +91,7 @@
- +