Bug 2170570

Summary: Please build ClamAV 0.103.8 for EL7
Product: [Fedora] Fedora EPEL Reporter: bunkobugsy <admin>
Component: clamavAssignee: Robert Scheck <redhat-bugzilla>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: epel7CC: anon.amish, bennie.joubert, gbcox, j, lee.jnk, ondrejj, orion, pgnet.dev, redhat-bugzilla, rh-bugzilla, sergio, stefano.biagiotti, steve
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: clamav-0.103.8-1.el8 clamav-0.103.8-1.fc37 clamav-0.103.8-1.el9 clamav-0.103.8-3.fc36 clamav-0.103.8-3.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-02-19 00:41:24 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description bunkobugsy 2023-02-16 18:17:28 UTC
https://blog.clamav.net/2023/02/clamav-01038-01052-and-101-patch.html

ClamAV 0.103.8 is a critical patch release with the following fixes:

CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser. The issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. Thank you to Simon Scannell for reporting this issue.

CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser. The issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. Thank you to Simon Scannell for reporting this issue.

Thank you.

Comment 1 Fedora Update System 2023-02-17 03:48:44 UTC
FEDORA-EPEL-2023-0526248f26 has been submitted as an update to Fedora EPEL 8. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-0526248f26

Comment 2 Fedora Update System 2023-02-17 03:48:44 UTC
FEDORA-2023-d686b8d48f has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2023-d686b8d48f

Comment 3 Fedora Update System 2023-02-17 03:48:46 UTC
FEDORA-EPEL-2023-47d3bcd891 has been submitted as an update to Fedora EPEL 9. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-47d3bcd891

Comment 4 Fedora Update System 2023-02-17 03:48:46 UTC
FEDORA-EPEL-2023-ef27d9fd2b has been submitted as an update to Fedora EPEL 7. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-ef27d9fd2b

Comment 5 Fedora Update System 2023-02-17 03:48:47 UTC
FEDORA-2023-c0657c3ed0 has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2023-c0657c3ed0

Comment 6 Sergio Basto 2023-02-17 23:09:14 UTC
IMHO we should just merge branch f37 , i.e. last commit on F37 was meant to go to EPEL branches and start using pregexp v2

Comment 7 Fedora Update System 2023-02-18 01:26:20 UTC
FEDORA-EPEL-2023-47d3bcd891 has been pushed to the Fedora EPEL 9 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-47d3bcd891

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2023-02-18 01:36:32 UTC
FEDORA-EPEL-2023-0526248f26 has been pushed to the Fedora EPEL 8 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-0526248f26

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 9 Fedora Update System 2023-02-18 01:42:47 UTC
FEDORA-EPEL-2023-ef27d9fd2b has been pushed to the Fedora EPEL 7 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-ef27d9fd2b

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 10 Fedora Update System 2023-02-18 02:21:20 UTC
FEDORA-2023-c0657c3ed0 has been pushed to the Fedora 36 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-c0657c3ed0`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-c0657c3ed0

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 11 Fedora Update System 2023-02-18 02:36:58 UTC
FEDORA-2023-d686b8d48f has been pushed to the Fedora 37 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-d686b8d48f`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-d686b8d48f

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 12 Fedora Update System 2023-02-19 00:41:24 UTC
FEDORA-EPEL-2023-0526248f26 has been pushed to the Fedora EPEL 8 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 13 Fedora Update System 2023-02-19 01:36:32 UTC
FEDORA-2023-d686b8d48f has been pushed to the Fedora 37 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 14 Fedora Update System 2023-02-20 00:39:59 UTC
FEDORA-EPEL-2023-47d3bcd891 has been pushed to the Fedora EPEL 9 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 15 Orion Poplawski 2023-02-20 15:03:29 UTC
(In reply to Sergio Basto from comment #6)
> IMHO we should just merge branch f37 , i.e. last commit on F37 was meant to
> go to EPEL branches and start using pregexp v2

That seems reasonable.  I wasn't sure of the status of pregexp v2 on EL7 and just wanted to get this out.

Comment 16 Fedora Update System 2023-02-21 01:54:09 UTC
FEDORA-2023-3ba365d538 has been pushed to the Fedora 36 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 17 Fedora Update System 2023-02-21 02:06:47 UTC
FEDORA-EPEL-2023-466d8ae059 has been pushed to the Fedora EPEL 7 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-466d8ae059

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 18 Fedora Update System 2023-02-22 10:39:43 UTC
FEDORA-EPEL-2023-466d8ae059 has been pushed to the Fedora EPEL 7 stable repository.
If problem still persists, please make note of it in this bug report.