Created attachment 211392 [details] Patch file * Update to 0.102.2 which fixes security vulnerability. * Remove MSPACK option and always use archivers/libmspack in accordance with policy about bundled library described in 6.2 of Porter's Handbook. * Remove obsolete and no-op options from CONFIGURE_ARGS. Security: CVE-2020-3123 Bug #243913 describes vulnerability fixed in this version. So please commit it together.
Build info is available at https://gitlab.com/swills/freebsd-ports/pipelines/115351888
A commit references this bug: Author: pi Date: Thu Feb 6 20:59:18 UTC 2020 New revision: 525450 URL: https://svnweb.freebsd.org/changeset/ports/525450 Log: security/clamav: upgrade 0.102.1 -> 0.102.2 - Remove MSPACK option and always use archivers/libmspack in accordance with policy about bundled library described in 6.2 of Porter's Handbook. - Remove obsolete and no-op options from CONFIGURE_ARGS. PR: 243914 Submitted by: Yasuhiro KIMURA <yasu@utahime.org> (maintainer) Relnotes: https://blog.clamav.net/2020/02/clamav-01022-security-patch-released.html Security: CVE-2020-3123 Changes: head/security/clamav/Makefile head/security/clamav/distinfo head/security/clamav/pkg-plist
A commit references this bug: Author: pi Date: Thu Feb 6 21:05:08 UTC 2020 New revision: 525452 URL: https://svnweb.freebsd.org/changeset/ports/525452 Log: MFH: r525450 security/clamav: upgrade 0.102.1 -> 0.102.2 - Remove MSPACK option and always use archivers/libmspack in accordance with policy about bundled library described in 6.2 of Porter's Handbook. - Remove obsolete and no-op options from CONFIGURE_ARGS. PR: 243914 Submitted by: Yasuhiro KIMURA <yasu@utahime.org> (maintainer) Relnotes: https://blog.clamav.net/2020/02/clamav-01022-security-patch-released.html Security: CVE-2020-3123 Approved by: portmgr (security blanket) Changes: _U branches/2020Q1/ branches/2020Q1/security/clamav/Makefile branches/2020Q1/security/clamav/distinfo branches/2020Q1/security/clamav/pkg-plist
Committed, thanks!