ports/88525: Security patch for security/clamav

[Cristiano Deana]

>Number:         88525
>Category:       ports
>Synopsis:       Security patch for security/clamav
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Nov 05 15:00:15 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Cristiano Deana
>Release:        FreeBSD 6.0-STABLE
>Organization:
GUFI - FreeBSD Italian User Group
>Environment:
FreeBSD casa.deana.it 6.0-STABLE FreeBSD 6.0-STABLE #3: Sat Nov  5 13:33:04 CET 2005     root at casa.deana.it:/usr/obj/usr/src/sys/CASA  i386   
>Description:
clamav 0.87 ha a serious bug allowing remote code execution, MUST upgrade to 0.87.1
              
>How-To-Repeat:
              
>Fix:
      --- Makefile.orig       Fri Oct 14 15:40:26 2005
+++ Makefile    Sat Nov  5 15:31:57 2005
@@ -7,6 +7,5 @@

 PORTNAME=      clamav
-PORTVERSION=   0.87
-PORTREVISION=  2
+PORTVERSION=   0.87.1
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE_EXTENDED}
--- distinfo.orig       Tue Sep 20 10:09:03 2005
+++ distinfo    Sat Nov  5 15:32:21 2005
@@ -1,2 +1,2 @@
-MD5 (clamav-0.87.tar.gz) = dd0a12deb4f48f760fa1fcd378ae7c24
-SIZE (clamav-0.87.tar.gz) = 4273714
+MD5 (clamav-0.87.1.tar.gz) = bf9f038edf0b6d5f76552e1b8d014b81 SIZE
+(clamav-0.87.1.tar.gz) = 4468992
--- files/patch-clamav-milter_clamav-milter.c.orig      Tue Sep 20 21:03:51 2005
+++ files/patch-clamav-milter_clamav-milter.c   Thu Jan  1 01:00:00 1970
@@ -1,16 +0,0 @@
-
-$FreeBSD: ports/security/clamav/files/patch-clamav-milter_clamav-milter.c,v 1.3 2005/09/20 19:03:51 simon Exp $
-
---- clamav-milter/clamav-milter.c.orig
-+++ clamav-milter/clamav-milter.c
-@@ -3439,9 +3439,9 @@
- {
-       fd_set rfds;
-       struct timeval tv;
-+      int ret;
-
-       assert(sock >= 0);
--      int ret;
-
-       if(readTimeout == 0) {
-               do
        
>Release-Note:
>Audit-Trail:
>Unformatted: