Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Update from version 1.3.0 to 1.3.1 - Update of rootfile not required - As we can not upgrade currently to version 1.4.0 due to the rust/ruby issue we need to update to 1.3.1 as it has a CVE fix in it. - There are three rust dependencies that have been updated but all have a rust-1.57 requirement so have no problem with our current rust-1.67.0 version - Changelog 1.3.1 This is a critical patch release with the following fixes: - [CVE-2024-20380](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20380): Fixed a possible crash in the HTML file parser that could cause a denial-of-service (DoS) condition. This issue affects version 1.3.0 only and does not affect prior versions. - [GitHub pull request](Cisco-Talos/clamav#1242) - Updated select Rust dependencies to the latest versions. This resolved Cargo audit complaints and included PNG parser bug fixes. - [GitHub pull request](Cisco-Talos/clamav#1227) - Fixed a bug causing some text to be truncated when converting from UTF-16. - [GitHub pull request](Cisco-Talos/clamav#1230) - Fixed assorted complaints identified by Coverity static analysis. - [GitHub pull request](Cisco-Talos/clamav#1235) - Fixed a bug causing CVDs downloaded by the `DatabaseCustomURL` Freshclam config option to be pruned and then re-downloaded with every update. - [GitHub pull request](Cisco-Talos/clamav#1238) - Added the new 'valhalla' database name to the list of optional databases in preparation for future work. - [GitHub pull request](Cisco-Talos/clamav#1238) - Added symbols to the `libclamav.map` file to enable additional build configurations. - [GitHub pull request](Cisco-Talos/clamav#1244) Signed-off-by: Adolf Belka <[email protected]> Signed-off-by: Michael Tremer <[email protected]>
- Loading branch information