| Commit message (Collapse) | Author | Age | Files |
| |
|
|
|
| |
Bug: https://bugs.gentoo.org/980609
Signed-off-by: Michael Orlitzky <mjo@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Backport the latest round of security patches that affect the 0.103.x
series. In addition,
* The "STATS" command is now disabled (sorry). These were too hard to
backport. As a result, clamdtop is disabled.
* One fix for Windows network paths was skipped.
Bug: https://bugs.gentoo.org/980609
Signed-off-by: Michael Orlitzky <mjo@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Sam James <sam@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Sam James <sam@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Matt Jolly <kangie@gentoo.org>
|
| |
|
|
|
| |
Bug: https://bugs.gentoo.org/978443
Signed-off-by: Matt Jolly <kangie@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Michael Orlitzky <mjo@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Long list, all but one of which has been backported:
https://lists.clamav.net/pipermail/clamav-users/2026-July/014539.html
The TOCTOU quarantine hardening refers to the fact that e.g.
$ clamscan --remove foo/
can detect malware in foo/bar/baz, and then later (when the scan is
finished) attempt to remove foo/bar/baz by name. If a bad guy can write
to foo/, he can e.g. replace foo/bar with a symlink between the virus
scan and the removal.
The thing is... if you are scanning inside a directory that a bad guy
can write to, you already have problems. Obviously it's better to make
these actions as bullet-proof as possible, but naming a few of those
problems does not constitute a fatal flaw. Scanning your own files is
easy to do safely, so the primary affected use case that I am aware of
is the antipattern of scanning everyone else's files as root. Don't do
that :)
Nevertheless, users deserve to be made aware. The man pages have been
updated to say that --copy, --move, and --remove are unsafe if the
target is writable by anyone else, and the executables now emit a
similar warning.
Signed-off-by: Michael Orlitzky <mjo@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
|
| |
Closes: https://bugs.gentoo.org/973723
Signed-off-by: Pacho Ramos <pacho@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Conrad Kostecki <conikost@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
|
| |
|
|
|
|
|
| |
Closes: https://bugs.gentoo.org/787233
Closes: https://bugs.gentoo.org/966587
Bug: https://bugs.gentoo.org/971014
Signed-off-by: Matt Jolly <kangie@gentoo.org>
|
| |
|
|
|
|
|
| |
Bug: https://bugs.gentoo.org/787233
Bug: https://bugs.gentoo.org/966587
Bug: https://bugs.gentoo.org/971014
Signed-off-by: Matt Jolly <kangie@gentoo.org>
|
| |
|
|
|
|
|
|
|
|
| |
1. Backport upstream pointer alignment patch
2. Fix the C23 build by renaming an internal "alignof"
3. Bump the impersonated freshclam version to latest
4. No version bound is needed on dev-libs/libpcre
5. The ipv6 ./configure check had an implicit function decl
Signed-off-by: Michael Orlitzky <mjo@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Michael Orlitzky <mjo@gentoo.org>
|
| |
|
|
|
|
| |
Bug: https://bugs.gentoo.org/473598
Bug: https://bugs.gentoo.org/720224
Signed-off-by: Fabian Groffen <grobian@gentoo.org>
|
| |
|
|
|
|
| |
The arch and OS that matches it are obsolete.
Signed-off-by: Fabian Groffen <grobian@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Sam James <sam@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Thomas Raschbacher <lordvan@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Update done using:
```
git grep -l zlib app-* | xargs sed -i -e s@sys-libs/zlib@virtual/zlib@g
git diff --name-only | xargs copybump
git diff --name-only | xargs grep -l PYTHON_COMPAT | xargs gpy-impl -@dead
pkgcheck scan --commits -c VisibilityCheck --exit error
```
Signed-off-by: Michał Górny <mgorny@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Sam James <sam@gentoo.org>
|
| |
|
|
|
|
|
|
| |
Closes: https://bugs.gentoo.org/964661
Signed-off-by: Fco Javier Felix <ffelix@inode64.com>
Part-of: https://github.com/gentoo/gentoo/pull/44324
Closes: https://github.com/gentoo/gentoo/pull/44324
Signed-off-by: Sam James <sam@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Sam James <sam@gentoo.org>
|
| |
|
|
|
|
|
| |
Signed-off-by: Fco Javier Felix <ffelix@inode64.com>
Part-of: https://github.com/gentoo/gentoo/pull/44154
Closes: https://github.com/gentoo/gentoo/pull/44154
Signed-off-by: Sam James <sam@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
| |
|
|
| |
Signed-off-by: Sam James <sam@gentoo.org>
|