rpms/clamav/F-9 clamav-0.93.3-pid.patch, NONE, 1.1 .cvsignore, 1.12, 1.13 clamav.spec, 1.73, 1.74 lastver, 1.5, 1.6 sources, 1.38, 1.39

[Enrico Scholz (ensc)]

Author: ensc

Update of /cvs/extras/rpms/clamav/F-9
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv20985

Modified Files:
	.cvsignore clamav.spec lastver sources 
Added Files:
	clamav-0.93.3-pid.patch 
Log Message:
merged with devel

clamav-0.93.3-pid.patch:

--- NEW FILE clamav-0.93.3-pid.patch ---
Try to fix https://bugzilla.redhat.com/show_bug.cgi?id=452359; RH/Fedora
initscripts do not support killing of whole processgroups. Hence, disable
feature which posts negative pgrp into pidfile and use plain pid instead
of.

diff -up clamav-0.93.3/clamav-milter/clamav-milter.c.~1~ clamav-0.93.3/clamav-milter/clamav-milter.c
--- clamav-0.93.3/clamav-milter/clamav-milter.c.~1~	2008-07-07 20:02:10.000000000 +0200
+++ clamav-0.93.3/clamav-milter/clamav-milter.c	2008-07-13 20:15:12.000000000 +0200
@@ -1985,7 +1985,7 @@ main(int argc, char **argv)
 			logg(_("!Can't save PID in file %s\n"), pidfile);
 			return EX_CONFIG;
 		}
-#ifdef	C_LINUX
+#if defined(C_LINUX) && 0
 		/* Ensure that all threads are kill()ed */
 		fprintf(fd, "-%d\n", (int)getpgrp());
 #else


Index: .cvsignore
===================================================================
RCS file: /cvs/extras/rpms/clamav/F-9/.cvsignore,v
retrieving revision 1.12
retrieving revision 1.13
diff -u -r1.12 -r1.13
--- .cvsignore	17 Jun 2008 19:57:54 -0000	1.12
+++ .cvsignore	13 Jul 2008 19:27:56 -0000	1.13
@@ -1 +1 @@
-clamav-0.93.1-norar.tar.bz2
+clamav-0.93.3-norar.tar.bz2


Index: clamav.spec
===================================================================
RCS file: /cvs/extras/rpms/clamav/F-9/clamav.spec,v
retrieving revision 1.73
retrieving revision 1.74
diff -u -r1.73 -r1.74
--- clamav.spec	21 Jun 2008 14:54:24 -0000	1.73
+++ clamav.spec	13 Jul 2008 19:27:56 -0000	1.74
@@ -18,7 +18,7 @@
 
 Summary:	End-user tools for the Clam Antivirus scanner
 Name:		clamav
-Version:	0.93.1
+Version:	0.93.3
 Release:	%release_func 1%{?snapshot:.%snapshot}
 
 License:	%{?with_unrar:proprietary}%{!?with_unrar:GPLv2}
@@ -45,6 +45,7 @@
 Patch22:	clamav-0.80-initoff.patch
 Patch24:	clamav-0.92-private.patch
 Patch25:	clamav-0.92-open.patch
+Patch26:	clamav-0.93.3-pid.patch
 BuildRoot:	%_tmppath/%name-%version-%release-root
 Requires:	clamav-lib = %version-%release
 Requires:	data(clamav)
@@ -256,6 +257,7 @@
 %patch22 -p1 -b .initoff
 %patch24 -p1 -b .private
 %patch25 -p1 -b .open
+%patch26 -p1 -b .pid
 
 install -p -m0644 %SOURCE300 clamav-milter/
 
@@ -546,6 +548,11 @@
 
 
 %changelog
+* Sun Jul 13 2008 Enrico Scholz <enrico.scholz at informatik.tu-chemnitz.de> - 0.93.3-1
+- updated to 0.93.3; another fix for CVE-2008-2713 (out-of-bounds read
+  on petite files)
+- put pid instead of pgrp into pidfile of clamav-milter (bz #452359)
+
 * Tue Jun 17 2008 Enrico Scholz <enrico.scholz at informatik.tu-chemnitz.de> - 0.93.1-1
 - updated to 0.93.1
 - rediffed -path patch


Index: lastver
===================================================================
RCS file: /cvs/extras/rpms/clamav/F-9/lastver,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- lastver	17 Jun 2008 19:57:54 -0000	1.5
+++ lastver	13 Jul 2008 19:27:56 -0000	1.6
@@ -1 +1 @@
-0.93.1
+0.93.3


Index: sources
===================================================================
RCS file: /cvs/extras/rpms/clamav/F-9/sources,v
retrieving revision 1.38
retrieving revision 1.39
diff -u -r1.38 -r1.39
--- sources	17 Jun 2008 19:57:54 -0000	1.38
+++ sources	13 Jul 2008 19:27:56 -0000	1.39
@@ -1 +1 @@
-c9eca40bd39cc049b3b2b424879fa06e  clamav-0.93.1-norar.tar.bz2
+53d288ddafd9cc198eeb69ffe8c83d02  clamav-0.93.3-norar.tar.bz2