22:52 Yasuhiro Kimura (yasu) 

security/clamav: Update to 0.104.0

* Upstream changed build tool from GNU Autotools to CMake
* Set TEST_TARGET
* Add pre-test-TESTS-off target to display message that TESTS option
  needs to be enabled to execute `make test`
* Switch to use pkg-messge instead of pkg-deinstall to display message
  for those who removes ClamAV permanently from you system
* Stop checking in rc scripts if /var/run/clamav exists
* Pet portclippy
* Reformat Makefile with portfmt

Release Notes:	https://blog.clamav.net/2021/09/clamav-01040-released.html
PR:		258565
Differential Revision:	https://reviews.freebsd.org/D32354

    11ce5b3

14:31 Mathieu Arnold (mat) 

all: Remove all other $FreeBSD keywords.

    135fdee

22:25 ler 

security/clamav: handle memfs/tmpfs /var/run.

PR:		224728
Submitted by:	O. Harmann <ohartmann@walstatt.org>

 

14:38 feld 

rc script spring cleaning -- now passes rclint

Previously it would try to launch even if there were no rc.conf entries

Reviewed by:	garga
Sponsored by:	SupraNet Communications, Inc

 

20:40 garga 

Fix error message that is showing a wrong dir

Reported by:	Will McCutcheon <will@toyingwithfate.com>

 

08:57 dougb 

In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.

00:15 dougb 

Begin the process of deprecating sysutils/rc_subr by
s#. %%RC_SUBR%%#. /etc/rc.subr#

16:56 dougb 

Fix a few "bad example" problems in the rc.d scripts that have been
propogated by copy and paste.

1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).

No PORTREVISION bumps because all of these changes are noops.

13:43 garga 

- Add reload option to startup script, it calls clamdscan --reload, a faster
  way to reload clam data without need restart
- Bump PORTREVISION

PR:             ports/133868
Submitted by:   Michael Scheidell <scheidell@secnap.net>

11:52 garga 

- Update to 0.95

11:20 garga 

- Fix checking of database viruses at startup script that i broke on last
  commit
- Bump PORTREVISION again

Submitted by:   George L. Yermulnik <yz@iptcom.net>
Pointyhat to:   me

19:28 garga 

- Fix clamd startup script to support cld containers for virus databases
- Bump PORTREVISION

Reported by:    Robert Huff <roberthuff@rcn.com>

16:05 garga 

- Update to 0.93

This version fixes lock problem reported at ports/122534

Most important changes:
 *libclamav:
   - New logic in scan limits: provides much more efficient protection against
     DoS attacks but also results in different command line and config options
     to clamscan and clamd (see below)
   - New/improved modules: unzip, SIS, cabinet, CHM, SZDD, text normalisator,
     entity converter
   - Improved filetype detection; filetype definitions can be remotely updated
   - Support for .cld containers (which replace .inc directories)
   - Improved pattern matcher and signature formats
   - More efficient scanning of HTML files
   - Many other improvements

 * clamd:
   - NEW CONFIG FILE OPTIONS: MaxScanSize, MaxFileSize, MaxRecursion, MaxFiles
   - ** THE FOLLOWING OPTIONS ARE NO LONGER SUPPORTED **: MailMaxRecursion,
     ArchiveMaxFileSize, ArchiveMaxRecursion, ArchiveMaxFiles,
     ArchiveMaxCompressionRatio, ArchiveBlockMax

 * clamscan:
   - NEW CMDLINE OPTIONS: --max-filesize, --max-scansize
   - REMOVED OPTIONS: --block-max, --max-space, --max-ratio

 * freshclam:
   - NEW CONFIG OPTION CompressLocalDatabase
   - NEW CMDLINE SWITCH --no-warnings
   - main.inc and daily.inc directories are no longer used by ClamAV; please
     remove them manually from your database directory

PR:             ports/122770 [1] (based on)
                ports/122534 [2]
Submitted by:   Michael Scheidell <scheidell@secnap.net> [1]
                Sebastian Inacker <inacker@fmsweb.de> [2]
Security:       http://secunia.com/advisories/29000

15:20 garga 

- Update to 0.88.1 -- Fix multiple vulnerabilities
 * CVE-2006-1614
    Damian Put discovered an integer overflow in the PE header parser.
    This is only exploitable if the ArchiveMaxFileSize option is disabled.
 * CVE-2006-1615
    Format string vulnerabilities in the logging code have been discovered,
    which might lead to the execution of arbitrary code.
 * CVE-2006-1630
    David Luyer discovered, that ClamAV can be tricked into an invalid
    memory access in the cli_bitset_set() function, which may lead to
    a denial of service.

- Use USE_RC_SUBR=script

PR:             ports/95403
Submitted by:   garga
Approved by:    maintainer timeout (mnag on behalf of secteam)
Security:       VuXML 6a5174bd-c580-11da-9110-00123ffe8333