CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2024/09/05 07:18:27
Modified files:
security/clamav: Tag: OPENBSD_7_5 Makefile distinfo
security/clamav/pkg: Tag: OPENBSD_7_5 PLIST
Log message:
update to clamav-1.3.2
CVE-2024-20506: Changed the logging module to disable following symlinks
on Linux and Unix systems so as to prevent an attacker with existing
access to the 'clamd' or 'freshclam' services from using a symlink to
corrupt system files.
CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF file
parser that could cause a denial-of-service condition.