From unknown Fri Aug 15 16:19:08 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#55437 <55437@debbugs.gnu.org> To: bug#55437 <55437@debbugs.gnu.org> Subject: Status: [PATCH] gnu: clamav: Update to 0.103.6 [fixes CVE-2022-{20803,20770,20796,20771,20785,20792}]. Reply-To: bug#55437 <55437@debbugs.gnu.org> Date: Fri, 15 Aug 2025 23:19:08 +0000 retitle 55437 [PATCH] gnu: clamav: Update to 0.103.6 [fixes CVE-2022-{20803= ,20770,20796,20771,20785,20792}]. reassign 55437 guix-patches submitter 55437 kiasoc5@disroot.org severity 55437 normal tag 55437 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Sun May 15 18:16:23 2022 Received: (at submit) by debbugs.gnu.org; 15 May 2022 22:16:23 +0000 Received: from localhost ([127.0.0.1]:50948 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nqMXG-0007xk-St for submit@debbugs.gnu.org; Sun, 15 May 2022 18:16:23 -0400 Received: from lists.gnu.org ([209.51.188.17]:57942) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nqKbd-0002iC-Bq for submit@debbugs.gnu.org; Sun, 15 May 2022 16:12:45 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:58280) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nqKbd-00057i-4o for guix-patches@gnu.org; Sun, 15 May 2022 16:12:45 -0400 Received: from knopi.disroot.org ([178.21.23.139]:54318) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nqKba-0003MH-Rr for guix-patches@gnu.org; Sun, 15 May 2022 16:12:44 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 83D5942DDA for ; Sun, 15 May 2022 22:12:39 +0200 (CEST) X-Virus-Scanned: SPAM Filter at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3ozYnwjxgDdZ for ; Sun, 15 May 2022 22:12:38 +0200 (CEST) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1652645558; bh=3+2NuKI/p6eByubAcCgKNlxAty6pU2jnkBqMuN2+Nr4=; h=Date:From:Subject:To:References; b=hDOOhdmtX7oROfiOqyN89Acjklnwm6shgTfqNAsxqUFD8jSFr3izXoMKkIO2zYn+9 Ubgt5mGmkffOPz6J6b1Y5iFOXQgfvqxsWYlLy8gyxu3r55vVRogREwBe79JFAmTWAe /Eidc9GT+hoRgh2bOJBeo88cmotmnERgjbyjDLuCY0/VYkbA472SnwYMdklJQAzTZ6 5TB4VmGXoGEwevzIZ00ZtNBzhiqwbfMbAwyriwv/DJouaS01GQCR6UMaC7uAkTKyxf HoE2+w3/p/37Z94qfVkOiVULfqlrZNnd9/vO7ThESayDF7PjLFukdg4ElOxzPupLi/ CIxOS4PLEXuqg== Date: Sun, 15 May 2022 20:12:37 +0000 Content-Type: multipart/mixed; boundary="a485ee64-58f4-4e88-b4c1-56227f79ed1a-1" From: kiasoc5@disroot.org Message-ID: Subject: [PATCH] gnu: clamav: Update to 0.103.6 [fixes CVE-2022-{20803,20770,20796,20771,20785,20792}]. To: guix-patches@gnu.org References: undefined undefined Received-SPF: pass client-ip=178.21.23.139; envelope-from=kiasoc5@disroot.org; helo=knopi.disroot.org X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Sun, 15 May 2022 18:16:22 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --a485ee64-58f4-4e88-b4c1-56227f79ed1a-1 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable This patch updates clamav to the latest LTS version. Per the release notes [1], a future update of clamav to 0.105+ will take = some effort: 1. 0.105+ needs Rust 1.57+ to build. 2. The build should switch from tarball to git to avoid vendored crates. 3. 0.105+ works with llvm 8-12 (no more llvm 3.7). I suggest we keep clamav on the LTS version until we update Rust. PS: As you can see from the email address, I am migrating from Tutanota t= o Disroot. [1] https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.htm= l#more --a485ee64-58f4-4e88-b4c1-56227f79ed1a-1 Content-Type: application/octet-stream; name="0001-gnu-clamav-Update-to-0.103.6-fixes-CVE-2022-20803-20.patch" Content-Disposition: attachment; filename="0001-gnu-clamav-Update-to-0.103.6-fixes-CVE-2022-20803-20.patch" Content-Transfer-Encoding: base64 RnJvbSBjNDUzMDA4ZDA1ZjRiYzg5N2VlY2Q2ZjI1NDVmZjgwNDdkYzRlMWZkIE1vbiBTZXAg MTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBraWFzb2M1IDxraWFzb2M1QGRpc3Jvb3Qub3JnPgpE YXRlOiBTdW4sIDE1IE1heSAyMDIyIDAzOjM3OjU4IC0wNDAwClN1YmplY3Q6IFtQQVRDSF0g Z251OiBjbGFtYXY6IFVwZGF0ZSB0byAwLjEwMy42IFtmaXhlcwogQ1ZFLTIwMjItezIwODAz LDIwNzcwLDIwNzk2LDIwNzcxLDIwNzg1LDIwNzkyfV0uCgoqIGdudS9wYWNrYWdlcy9hbnRp dmlydXMuc2NtIChjbGFtYXYpOiBVcGRhdGUgdG8gMC4xMDMuNi4KLS0tCiBnbnUvcGFja2Fn ZXMvYW50aXZpcnVzLnNjbSB8IDQgKystLQogMSBmaWxlIGNoYW5nZWQsIDIgaW5zZXJ0aW9u cygrKSwgMiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS9nbnUvcGFja2FnZXMvYW50aXZp cnVzLnNjbSBiL2dudS9wYWNrYWdlcy9hbnRpdmlydXMuc2NtCmluZGV4IDgwMTI2YTViNTku LjRhNWY5OTVlNDIgMTAwNjQ0Ci0tLSBhL2dudS9wYWNrYWdlcy9hbnRpdmlydXMuc2NtCisr KyBiL2dudS9wYWNrYWdlcy9hbnRpdmlydXMuc2NtCkBAIC00NCwxNCArNDQsMTQgQEAgKGRl ZmluZS1tb2R1bGUgKGdudSBwYWNrYWdlcyBhbnRpdmlydXMpCiAoZGVmaW5lLXB1YmxpYyBj bGFtYXYKICAgKHBhY2thZ2UKICAgICAobmFtZSAiY2xhbWF2IikKLSAgICAodmVyc2lvbiAi MC4xMDMuMyIpCisgICAgKHZlcnNpb24gIjAuMTAzLjYiKQogICAgIChzb3VyY2UgKG9yaWdp bgogICAgICAgICAgICAgICAobWV0aG9kIHVybC1mZXRjaCkKICAgICAgICAgICAgICAgKHVy aSAoc3RyaW5nLWFwcGVuZCAiaHR0cHM6Ly93d3cuY2xhbWF2Lm5ldC9kb3dubG9hZHMvcHJv ZHVjdGlvbi8iCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgImNsYW1hdi0i IHZlcnNpb24gIi50YXIuZ3oiKSkKICAgICAgICAgICAgICAgKHNoYTI1NgogICAgICAgICAg ICAgICAgKGJhc2UzMgotICAgICAgICAgICAgICAgICIxc2JhNHpjY2d3anFrMjliNXFrZ2Zj OWdtNzk0aG1rNmo3YnBqOHdpbGdjejhoYzNzdmx6IikpCisgICAgICAgICAgICAgICAgIjBj eHN2NW05cHF4eGI1NnFkN2hsajExcHdtZGdtMDdzM21zaDNoeGs0N2N6cTR5ang4ZGEiKSkK ICAgICAgICAgICAgICAgKG1vZHVsZXMgJygoZ3VpeCBidWlsZCB1dGlscykpKQogICAgICAg ICAgICAgICAoc25pcHBldAogICAgICAgICAgICAgICAgJyhiZWdpbgotLSAKMi4zNi4xCgo= --a485ee64-58f4-4e88-b4c1-56227f79ed1a-1-- From debbugs-submit-bounces@debbugs.gnu.org Mon May 16 11:25:20 2022 Received: (at 55437) by debbugs.gnu.org; 16 May 2022 15:25:21 +0000 Received: from localhost ([127.0.0.1]:54801 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nqcb2-0003DK-Ei for submit@debbugs.gnu.org; Mon, 16 May 2022 11:25:20 -0400 Received: from knopi.disroot.org ([178.21.23.139]:49176) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nqcPf-0002tF-2u for 55437@debbugs.gnu.org; Mon, 16 May 2022 11:13:50 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 87A91436C5 for <55437@debbugs.gnu.org>; Mon, 16 May 2022 17:13:33 +0200 (CEST) X-Virus-Scanned: SPAM Filter at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with UTF8SMTP id F-EEbHNIvhyg for <55437@debbugs.gnu.org>; Mon, 16 May 2022 17:13:32 +0200 (CEST) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1652713173; bh=QFHTd52dx9xFo51ii1WE1AYMNBWD7xgGjcIttxttLBw=; h=Date:From:Subject:To; b=RfO1r1I1SDKckA84gyBshqJ3JzpzW+MPRj84lNW5YdiTiwr/0BfFwjxgSFEwXNYrP npkhrqIWzIpWQbgOHy96hNsx5wA08wK3gLtWKC2REe1FkcEzIbH8eQxX6dnFYH1Y8E E60weala0P7QWbsY0Z1zr1JExmlcDFEpmkpwHUbqEuXekDh+4wGArHTZQmS8BiCIUq jbgYRkU1dTq54t33tKu/vuktjeBBlG6WXNlDt2X+FV1qdhANU8BHjqScUIz7/rofTo CnNQGQIctVxjSqf9fqLVRw316K5KNvVcKeIBA+khsq+LIXIymI4PzZzJao2FBgRnwU YyOq9JQ98MY9A== Date: Mon, 16 May 2022 14:59:33 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: kiasoc5@disroot.org Message-ID: <27a9400c19672948e7e9624f547d05cd23738344@disroot.org> Subject: re: [PATCH] gnu: clamav: Update to 0.103.6 [fixes CVE-2022-{20803,20770,20796,20771,20785,20792}]. To: 55437@debbugs.gnu.org X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 55437 X-Mailman-Approved-At: Mon, 16 May 2022 11:25:19 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Mumi is not showing the patch, sending it inline. >From c453008d05f4bc897eecd6f2545ff8047dc4e1fd Mon Sep 17 00:00:00 2001 From: kiasoc5 Date: Sun, 15 May 2022 03:37:58 -0400 Subject: [PATCH] gnu: clamav: Update to 0.103.6 [fixes CVE-2022-{20803,20770,20796,20771,20785,20792}]. * gnu/packages/antivirus.scm (clamav): Update to 0.103.6. --- gnu/packages/antivirus.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/antivirus.scm b/gnu/packages/antivirus.scm index 80126a5b59..4a5f995e42 100644 --- a/gnu/packages/antivirus.scm +++ b/gnu/packages/antivirus.scm @@ -44,14 +44,14 @@ (define-module (gnu packages antivirus) (define-public clamav (package (name "clamav") - (version "0.103.3") + (version "0.103.6") (source (origin (method url-fetch) (uri (string-append "https://www.clamav.net/downloads/production/" "clamav-" version ".tar.gz")) (sha256 (base32 - "1sba4zccgwjqk29b5qkgfc9gm794hmk6j7bpj8wilgcz8hc3svlz")) + "0cxsv5m9pqxxb56qd7hlj11pwmdgm07s3msh3hxk47czq4yjx8da")) (modules '((guix build utils))) (snippet '(begin --=20 2.36.1 From debbugs-submit-bounces@debbugs.gnu.org Wed May 18 00:37:10 2022 Received: (at 55437) by debbugs.gnu.org; 18 May 2022 04:37:10 +0000 Received: from localhost ([127.0.0.1]:58595 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nrBQs-0004Ma-IC for submit@debbugs.gnu.org; Wed, 18 May 2022 00:37:10 -0400 Received: from mail-qv1-f44.google.com ([209.85.219.44]:41866) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nrBQq-0004MK-D2 for 55437@debbugs.gnu.org; Wed, 18 May 2022 00:37:09 -0400 Received: by mail-qv1-f44.google.com with SMTP id c9so40391qvx.8 for <55437@debbugs.gnu.org>; Tue, 17 May 2022 21:37:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=Np8IkJfD0PvVxiH9TbVFCPpAxDHRwJD5xukjDXXP1is=; b=edU4xMuR9T1xBDoiWh3jatgnOkDyqTRapAdq/HTlOBrcgw5XhWBTEmwGBbR8RiyjyY 8zMCCzuTyHSqfVQ2ipEeScdJXKYuNfkkUVhe95oo+ZYZ2FKvwA9MV/DXBlndFhAi2J5h /3ORa5eul/n8GYkQbjKZ/iaoHTMlrp0M5q73y53Bfjeg7n4vObmO+Ay8UawKFgj3Nzsy SHFiTXiY5VsGvUZPqDHoJ6BMyZbeBRtlsA5eWOp8RF0XdN0ntsXshNO5ycSu3n4R9eTV aA4KLjM4laa1m2y+tiy4bS31rJC9VHhffQxXXFHTgKCVHpDax5t4lc2aNIhIJXjq2mOF Dbcw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=Np8IkJfD0PvVxiH9TbVFCPpAxDHRwJD5xukjDXXP1is=; b=Wk1e7FXPmlNHkztxN5O2UfwapNLef7S6/MAWc9dF9rSrF81B1gCZf3Vl9KcpBKdxKW CyeLPYq9hV5x63sA1MRfp9G2MghnyEXlen3v9x/6GOEXDbgpqS+rODZnNMxcANgCZvve Y4ZOmdZuuoIkwBhxHNcfhjXTsaC8BIt72G50T9SxatVb1Fy/x6r5B0ndt+17iicX9FvG MTEB35HlZaa80r4PCKK4HygLcPLaQqiSqwauxr1SBLY1+MiDGUM9lKs0qhMEeEUSKZ4U Lt2Jgt/owPEtFRBnktY+s3oTHJbW5eOwB5LFWe+bH6xwaXpEPt+GnvVUsm8SHIIISXz4 GASg== X-Gm-Message-State: AOAM533ot3zUeZHs5lyLpdy57TpquOOLlmfoDL/lZGQNJr9XrBOWOOTh OTvvYNxoig3u7/n+QD3nTVrtcOODs9FZ49NZ X-Google-Smtp-Source: ABdhPJybJlGFacfST+L4wRDXT/NTZYXiJ2zp2HkQQHWBRuwJQN3YUXysIp+LghCI59nrBkRzGxFo+w== X-Received: by 2002:a05:6214:1c43:b0:45b:b4:3e18 with SMTP id if3-20020a0562141c4300b0045b00b43e18mr23507725qvb.56.1652848622750; Tue, 17 May 2022 21:37:02 -0700 (PDT) Received: from hurd (dsl-205-233-124-104.b2b2c.ca. [205.233.124.104]) by smtp.gmail.com with ESMTPSA id n64-20020a37bd43000000b0069fdbe43a5asm869180qkf.41.2022.05.17.21.37.01 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 17 May 2022 21:37:02 -0700 (PDT) From: Maxim Cournoyer To: kiasoc5@disroot.org Subject: Re: bug#55437: [PATCH] gnu: clamav: Update to 0.103.6 [fixes CVE-2022-{20803,20770,20796,20771,20785,20792}]. References: Date: Wed, 18 May 2022 00:37:01 -0400 In-Reply-To: (kiasoc5@disroot.org's message of "Sun, 15 May 2022 20:12:37 +0000") Message-ID: <87mtff1moi.fsf_-_@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 55437 Cc: 55437@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, kiasoc5@disroot.org writes: > This patch updates clamav to the latest LTS version. > Per the release notes [1], a future update of clamav to 0.105+ will take some effort: > > 1. 0.105+ needs Rust 1.57+ to build. > 2. The build should switch from tarball to git to avoid vendored crates. > 3. 0.105+ works with llvm 8-12 (no more llvm 3.7). > > I suggest we keep clamav on the LTS version until we update Rust. Sounds like a fine plan. > PS: As you can see from the email address, I am migrating from Tutanota to Disroot. > > [1] https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html#more I see the following guix lint warnings: --8<---------------cut here---------------start------------->8--- clamav@0.103.6: label 'libcurl' does not match package name 'curl' clamav@0.103.6: label 'libjson' does not match package name 'json-c' clamav@0.103.6: label 'openssl' does not match package name 'libressl' clamav@0.103.6: label 'sasl' does not match package name 'cyrus-sasl' clamav@0.103.6: label 'xml' does not match package name 'libxml2' clamav@0.103.6: updater 'generic-html' failed to find upstream releases --8<---------------cut here---------------end--------------->8--- I'm not sure about the last one, but the other ones could be fixed simply by updating to the new style (list input1 input2 ...) instead of `(("input1" ,input1) ("input2" ,input2) ...). Would you mind updating the patch with such changes? Thanks! Maxim From debbugs-submit-bounces@debbugs.gnu.org Wed May 18 23:05:14 2022 Received: (at 55437) by debbugs.gnu.org; 19 May 2022 03:05:14 +0000 Received: from localhost ([127.0.0.1]:34057 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nrWTS-0005D5-0T for submit@debbugs.gnu.org; Wed, 18 May 2022 23:05:14 -0400 Received: from knopi.disroot.org ([178.21.23.139]:46402) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nrWTP-0005Cu-UU for 55437@debbugs.gnu.org; Wed, 18 May 2022 23:05:13 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id A9D3F43751; Thu, 19 May 2022 05:05:10 +0200 (CEST) X-Virus-Scanned: SPAM Filter at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b53TyU_OzRwA; Thu, 19 May 2022 05:05:09 +0200 (CEST) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1652929509; bh=0SPVn3F+delij1gTQQRvetyM0PiJplZ7AfBiWp7uFD4=; h=Date:From:Subject:To:Cc:References; b=VvKKLEJ7ymS+CDoOt1k5GxSTog6y2kjqpaCpbBuJCQTYmE5kbsXx/yyNmgwlt+qMt Cb9sQJxdkFTE7CqE4QwjI5XGnSvBJtxoYDU5m1AVkt4LQx2/BzxTuHIUxNc4msq/r0 2CIhC5CcKQ1/E93bji6F6qeQtVRBF1MPLGyZW6EDiLFPO31AwB7JPtSu2upDkTi03+ DJenNnewrfNg+pYm1te81UxhL1Wt/gn6U9IiRMHZ5EGckoeM0VZC/m+emQxEzEmAJF OT4XetrQTeRp2nB2UzXl8qa0JvcDgkfMUQkpWCpqJ+uQ2ywCcUkC6Fse8yyNrxipGI gdv0xYU0rVmqA== Date: Thu, 19 May 2022 03:05:08 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: kiasoc5@disroot.org Message-ID: <5a8edd0b540303d9ebd42880ad38d249d74a5457@disroot.org> Subject: Re: bug#55437: [PATCH] gnu: clamav: Update to 0.103.6 [fixes CVE-2022-{20803,20770,20796,20771,20785,20792}]. To: "Maxim Cournoyer" References: undefined X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 55437 Cc: 55437@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) >From 151cbfbefd039ce28d38109493bf8b49f19a2edc Mon Sep 17 00:00:00 2001 From: kiasoc5 Date: Wed, 18 May 2022 22:51:14 -0400 Subject: [PATCH 2/2] gnu: clamav: Use new style and G-expressions. * gnu/packages/antivirus.scm (clamav)[source]: Remove trailing #t from sn= ippet. [inputs]: Use new input style. [arguments]: Use G-expressions. Remove trailing #t from phases [configure-flags]: Adjust to new input style. --- gnu/packages/antivirus.scm | 128 ++++++++++++++++++------------------- 1 file changed, 64 insertions(+), 64 deletions(-) diff --git a/gnu/packages/antivirus.scm b/gnu/packages/antivirus.scm index 4a5f995e42..cda3fc942b 100644 --- a/gnu/packages/antivirus.scm +++ b/gnu/packages/antivirus.scm @@ -21,6 +21,7 @@ (define-module (gnu packages antivirus) #:use-module ((guix licenses) #:prefix license:) #:use-module (guix build-system gnu) + #:use-module (guix gexp) #:use-module (guix packages) #:use-module (guix download) #:use-module (guix utils) @@ -59,8 +60,7 @@ (define-public clamav '("win32" ; unnecessary "libclamav/c++/llvm" ; use system llvm "libclamav/tomsfastmath" ; use system toms= fastmath - "libclamunrar")) ; non-free licens= e - #t)) + "libclamunrar")))) ; non-free licens= e (patches (search-patches "clamav-system-tomsfastmath.patch" "clamav-config-llvm-libs.patch")))) @@ -72,70 +72,70 @@ (define-public clamav libtool pkg-config)) (inputs - `(("bzip2" ,bzip2) - ("libcurl" ,curl) - ("libjson" ,json-c) - ("libltdl" ,libltdl) - ("libmspack" ,libmspack) - ("llvm" ,llvm-3.6) ; requires <3.7, for JIT/verifie= r - ("ncurses" ,ncurses) - ("openssl" ,libressl) - ("pcre2" ,pcre2) - ("sasl" ,cyrus-sasl) ; for linking curl with libtool - ("tomsfastmath" ,tomsfastmath) - ("xml" ,libxml2) - ("zlib" ,zlib))) + (list bzip2 + curl + json-c + libltdl + libmspack + llvm-3.6 ; requires <3.7, for JIT/verifier + ncurses + libressl + pcre2 + cyrus-sasl ; for linking curl with libtool + tomsfastmath + libxml2 + zlib)) (arguments - `(#:configure-flags - (let-syntax ((with (syntax-rules () - ((_ name) + (list #:configure-flags + #~(let-syntax ((with (syntax-rules () + ((_ name use) (string-append "--with-" name "=3D" - (assoc-ref %build-inputs nam= e)))))) - (list "--disable-unrar" - "--enable-llvm" - "--with-system-llvm" - "--with-system-libmspack" - "--without-included-ltdl" - (with "xml") - (with "openssl") - (with "libjson") - (with "pcre2") - (with "zlib") - (with "libcurl") - ;; For sanity, specifying --enable-* flags turns - ;; "support unavailable" warnings into errors. - "--enable-bzip2" - "--enable-check" - "--sysconfdir=3D/etc/clamav" - ;; Default database directory needs to be writeable - "--with-dbdir=3D/var/db/clamav")) - ;; install sample .conf files to %output/etc rather than /etc/cla= mav - #:make-flags (list (string-append "sysconfdir=3D" %output "/etc")= ) - #:phases (modify-phases %standard-phases - ;; Regenerate configure script. Without this we don't= get - ;; the correct value for LLVM linker variables. - (add-after 'unpack 'reconf - (lambda _ (invoke "autoreconf" "-vfi"))) - (add-before 'configure 'patch-llvm-config - (lambda _ - (substitute* '("libclamav/c++/detect.cpp" - "libclamav/c++/ClamBCRTChecks.cpp" - "libclamav/c++/bytecode2llvm.cpp") - (("llvm/Config/config.h") "llvm/Config/llvm-conf= ig.h")) - ;; `llvm-config --libfiles` inappropriately lists = lib*.a - ;; libraries, rather than the lib*.so's that our l= lvm - ;; contains. They're used only for listing extra = build - ;; dependencies, so ignore them until that's fixed= . - (substitute* "libclamav/c++/Makefile.in" - (("@LLVMCONFIG_LIBFILES@") "")) - #t)) - (add-before 'check 'skip-clamd-tests - ;; XXX: The check?_clamd tests fail inside the build - ;; chroot, but pass outside. - (lambda _ - (substitute* "unit_tests/Makefile" - (("check2_clamd.sh.*check4_clamd.sh") "")) - #t))))) + (assoc-ref %build-inputs use= )))))) + (list "--disable-unrar" + "--enable-llvm" + "--with-system-llvm" + "--with-system-libmspack" + "--without-included-ltdl" + (with "xml" "libxml2") + (with "openssl" "libressl") + (with "libjson" "json-c") + (with "pcre2" "pcre2") + (with "zlib" "zlib") + (with "libcurl" "curl") + ;; For sanity, specifying --enable-* flags turns + ;; "support unavailable" warnings into errors. + "--enable-bzip2" + "--enable-check" + "--sysconfdir=3D/etc/clamav" + ;; Default database directory needs to be writeable + "--with-dbdir=3D/var/db/clamav")) + ;; install sample .conf files to %output/etc rather than /et= c/clamav + #:make-flags + #~(list (string-append "sysconfdir=3D" %output "/etc")) + #:phases + #~(modify-phases %standard-phases + ;; Regenerate configure script. Without this we don't g= et + ;; the correct value for LLVM linker variables. + (add-after 'unpack 'reconf + (lambda _ (invoke "autoreconf" "-vfi"))) + (add-before 'configure 'patch-llvm-config + (lambda _ + (substitute* '("libclamav/c++/detect.cpp" + "libclamav/c++/ClamBCRTChecks.cpp" + "libclamav/c++/bytecode2llvm.cpp") + (("llvm/Config/config.h") "llvm/Config/llvm-config= .h")) + ;; `llvm-config --libfiles` inappropriately lists li= b*.a + ;; libraries, rather than the lib*.so's that our llv= m + ;; contains. They're used only for listing extra bu= ild + ;; dependencies, so ignore them until that's fixed. + (substitute* "libclamav/c++/Makefile.in" + (("@LLVMCONFIG_LIBFILES@") "")))) + (add-before 'check 'skip-clamd-tests + ;; XXX: The check?_clamd tests fail inside the build + ;; chroot, but pass outside. + (lambda _ + (substitute* "unit_tests/Makefile" + (("check2_clamd.sh.*check4_clamd.sh") ""))))))) (home-page "https://www.clamav.net") (synopsis "Antivirus engine") (description --=20 2.36.1 From debbugs-submit-bounces@debbugs.gnu.org Fri May 20 18:01:58 2022 Received: (at 55437-done) by debbugs.gnu.org; 20 May 2022 22:01:58 +0000 Received: from localhost ([127.0.0.1]:40276 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nsAh2-000697-64 for submit@debbugs.gnu.org; Fri, 20 May 2022 18:01:58 -0400 Received: from eggs.gnu.org ([209.51.188.92]:52720) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nsAgp-00068i-64 for 55437-done@debbugs.gnu.org; Fri, 20 May 2022 18:01:55 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:38388) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nsAgj-0004Ta-H8; Fri, 20 May 2022 18:01:37 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=FQ1JflpCsS6BKQ46oOTRLnViaIvBuDmRtkLlQOA/rKc=; b=VKobWrG0xtBeYPKlXyKL wuNGDhmNb16kSSyhNUhhAvUj/TTev1XvQAggtGpp2Ufp41s/jKVWVbFs3CVx2CExafJs/tRmTQBQn /aZIiGI+QweUeQzruWNp35zU+YN0Mq7zolmIiW+b1oRC8AmErkUn+5KPqtjpPk1W/RrInhYYUJE4u kX0fHLHvFG0Sc3qO7qQDfAYzLSg+rOniGbIUMrL09QlQuYBRUHrO0ViiBAN0LbmEosTyN7oif+2zv uHKzvvRJi9h/w6YJ4af6TBz4Vy4CFD6d8UC8jLVn2Pwt0+eA2qMA8oB3swOLHyxrAXBHXLkWk0o8j dj7Nj0RafIhMRg==; Received: from 91-160-117-201.subs.proxad.net ([91.160.117.201]:56605 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nsAgj-0007Z5-45; Fri, 20 May 2022 18:01:37 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: kiasoc5@disroot.org Subject: Re: bug#55437: [PATCH] gnu: clamav: Update to 0.103.6 [fixes CVE-2022-{20803,20770,20796,20771,20785,20792}]. References: Date: Sat, 21 May 2022 00:01:34 +0200 In-Reply-To: (kiasoc5@disroot.org's message of "Sun, 15 May 2022 20:12:37 +0000") Message-ID: <87y1yvvp6p.fsf_-_@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 55437-done Cc: 55437-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi, kiasoc5@disroot.org skribis: > From c453008d05f4bc897eecd6f2545ff8047dc4e1fd Mon Sep 17 00:00:00 2001 > From: kiasoc5 > Date: Sun, 15 May 2022 03:37:58 -0400 > Subject: [PATCH] gnu: clamav: Update to 0.103.6 [fixes > CVE-2022-{20803,20770,20796,20771,20785,20792}]. > > * gnu/packages/antivirus.scm (clamav): Update to 0.103.6. [...] >>>From 151cbfbefd039ce28d38109493bf8b49f19a2edc Mon Sep 17 00:00:00 2001 > From: kiasoc5 > Date: Wed, 18 May 2022 22:51:14 -0400 > Subject: [PATCH 2/2] gnu: clamav: Use new style and G-expressions. > > * gnu/packages/antivirus.scm (clamav)[source]: Remove trailing #t from sn= ippet. > [inputs]: Use new input style. > [arguments]: Use G-expressions. Remove trailing #t from phases > [configure-flags]: Adjust to new input style. Applied, thanks! Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Tue May 31 17:06:27 2022 Received: (at 55437) by debbugs.gnu.org; 31 May 2022 21:06:27 +0000 Received: from localhost ([127.0.0.1]:49028 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nw94N-0002Ix-11 for submit@debbugs.gnu.org; Tue, 31 May 2022 17:06:27 -0400 Received: from mout.web.de ([212.227.15.4]:40609) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nw94L-0002Im-DB for 55437@debbugs.gnu.org; Tue, 31 May 2022 17:06:25 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=web.de; s=dbaedf251592; t=1654031179; bh=G+KuKTcN1mbDBG/m/3sGReTNGxfWVzkL48puFYpqpn8=; h=X-UI-Sender-Class:Date:To:Subject:From; b=nAkwKyZ8/m7IUOU5cacN2RduGsNcQrhD8/bbamLblX+UvpHYfXqYYMfFczQim0Q77 JX/ygv3Tzolti/popVDKkb9F/m2mwUm+qfXFojOMllOaM6IM5/mmTV78UaUtSv4o5V +tS7qyniffyop50jXCon85YNS9CFT5co4TFs2pns= X-UI-Sender-Class: c548c8c5-30a9-4db5-a2e7-cb6cb037b8f9 Received: from [192.168.178.23] ([77.181.23.155]) by smtp.web.de (mrweb006 [213.165.67.108]) with ESMTPSA (Nemesis) id 1MGQC9-1o1z2E21oj-00GkAh for <55437@debbugs.gnu.org>; Tue, 31 May 2022 23:06:19 +0200 Message-ID: Date: Tue, 31 May 2022 23:06:18 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.9.0 To: 55437@debbugs.gnu.org Subject: [PATCH] gnu: clamav: Update to 0.103.6 [fixes CVE-2022-{20803,20770,20796,20771,20785,20792}]. Content-Language: en-US From: Jonathan Brielmaier Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable X-Provags-ID: V03:K1:HMZ9OJDKnFMamPRmQd2wMgmWjVCoIT5TKQYTXqMIlNP09HhXTgJ M4HMnsrEhRQqhIHzPqV8WQvXIekp6yaXAEvoiLANcBZuF/JEQoYvKrIEtTHcsz0T3cX8z9t csw/77JS0GBDhyovTX/djxhj+AQZ5NIxLMUfvm/UqCdRAhmO+aMVFyHlbLoVpzT9a5cRV0N JeuhbpOPZNsiR35SVFk3A== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:wOmDFQN7bEU=:WLx4IZV7PI5b3rKHSKUaJP lnIa7jC8HhO3cY1bO/bwP0w+IA+i1GCY71VO+BIO9IQDftmBnML7YKQOPB/I4EJfMj0cwmIR1 jjXSiD0BHWhZCEmKbM6ZbJUpxeAqHVVApJsD92P0ghQD6PwKT4osWapUPb8rnwCU2pnS4Nm9O B3Mu93QfqCX8JCPnTLlyCZyGl/87l7lcwVcoNxdNZEdt/U4VypECZePqjdeX6egwt7a1XbJeK QnKpNO9FQ8JZr3o48NDNO+VqRx8R7Bkz2ChljaELsvRiXre7niHpsgFogf+kNUMozgwZH7fCX X7dN5lB6ss/DyaTpSf3bp6ec42D21gSPjfAkoG7yztUCLHoXv5HrylSUgiwKjpf1JQMmo9aPl zss7AH9YNT1gq0g9ehlbpeRYCMh1SDemInw6LASwtK7vKxHSzBqaI461ACWQBp9Sy0zdMzAgh kfiYzPU8av/MIUnmMSOCiUXiWiKDZyVpLgumisrD1YQjHgrYpK7rLGBLDpa76qFXp3tMz2YQg npTILS0en98ipVG8+M3nkfjTLwhgcsvQgi02LoWDCPmtNy6770f9AyoA9Ld075S5k/yfU2ptl c7SoDx7134IBBOSJsOiGntoUVXpzygMEYhQx8Eqx5Jd+9q2RXyBeFvD9WNtoUfOi+xhPonKN2 U07q6aAa6KojMQQ6Lq40lAOlWUiBxWrQ11V+en3axCBKBROFihRifK4CraknP2kHcsnzUiQlz ++vn+GFuWeoi6aqoCmzSkri0nu+mSyycPI5Dlpi2Ypjslja5S3/Y0li3H5xa2LU6tAP/G2/Zh icY988fHncIu4hJfAf5JcsSn8FuAIWekSqS8Rrux+/DcLbCsX24YSUs3XkPStCfkk601WWHJh q8ZrcbkgH2DXqwAYBET5KLnsN6Ni6U4VcfQ949yZa/X8ANnjqMOCmRFIHjomZQd3FLKT7EqtC uEd4a7yT93icdgz3rOEZN82UDdE/re7v+h8MTVYjlIRqzOZqY5Qo8+JDzeM7WA1WlMXZDflTR 4RS8Erwm32RFJV/+zC0YI2BOF6aBH/eCFOFP28mejtx6bTZDd8csAfpSvS0TQ8Zp3EQspaqnc n+8YrvLJm+btokjs6Y9bRRiGBUqCfIrVzNj5b9Ks+rDM3yfSXj798kchw== X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 55437 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) Hm, our rust is already at 1.57.0. So this requirement shouldn't be a problem. From unknown Fri Aug 15 16:19:08 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Wed, 29 Jun 2022 11:24:06 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator