<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>213762</bug_id>
          <alias>CVE-2008-0314</alias>
          <creation_ts>2008-03-18 01:40 0000</creation_ts>
          <short_desc>app-antivirus/clamav &lt;0.93 Multiple issues (CVE-2008-{0314,1100,1387,1833,1835,1836,1837})</short_desc>
          <delta_ts>2008-08-05 21:29:52 0000</delta_ts>
          
          
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Security</product>
          <component>Vulnerabilities</component>
          <version>unspecified</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          <bug_file_loc>http://secunia.com/secunia_research/2008-11/advisory/</bug_file_loc>
          <status_whiteboard>B1 [glsa]</status_whiteboard>
          
          <priority>P2</priority>
          <bug_severity>major</bug_severity>
          <target_milestone>---</target_milestone>
          <dependson>221715</dependson>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>rbu@gentoo.org</reporter>
          <assigned_to>security@gentoo.org</assigned_to>
          <cc>antivirus@gentoo.org</cc>
    
    <cc>craig@gentoo.org</cc>
    
    <cc>eero.volotinen@iki.fi</cc>
    
    <cc>hanno@gentoo.org</cc>
    
    <cc>jer@gentoo.org</cc>
    
    <cc>martin.holzer@wienerlinien.at</cc>
    
    <cc>net-mail@gentoo.org</cc>
    
    <cc>ole+gentoo@ans.pl</cc>
    
    <cc>spam@lutel.pl</cc>
    
    <cc>svrmarty@gmx.net</cc>
    
    <cc>teidakankan@gmail.com</cc>
    
    <cc>ticho@gentoo.org</cc>

      

      
          <long_desc isprivate="0">
            <who>rbu@gentoo.org</who>
            <bug_when>2008-03-18 01:40:01 0000</bug_when>
            <thetext>Secunia:
The vulnerability is caused due to a boundary error within the
&quot;cli_scanpe()&quot; function in libclamav/pe.c. This can be exploited to
cause a heap-based buffer overflow via a specially crafted &quot;Upack&quot;
executable.

ClamAV upstream will not fix this vulnerability in their 0.92 branch, but *after* 0.93 has been released, soon in one of their updates.

No patches are available at this time, scanning using this module has been disabled. Embargo date is currently 2008-04-09.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>vorlon@gentoo.org</who>
            <bug_when>2008-04-12 13:48:54 0000</bug_when>
            <thetext>any update on the timeline, since the embargo date has passed?</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ticho@gentoo.org</who>
            <bug_when>2008-04-13 21:15:49 0000</bug_when>
            <thetext>Can&apos;t see any 0.93 release yet...</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>vorlon@gentoo.org</who>
            <bug_when>2008-04-14 14:01:45 0000</bug_when>
            <thetext>The issue is now public, new version should be out soon hopefully

http://secunia.com/secunia_research/2008-11/advisory/</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>vorlon@gentoo.org</who>
            <bug_when>2008-04-14 14:38:59 0000</bug_when>
            <thetext>CC&apos;ing infra, since clamav is also used here iirc
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>craig@gentoo.org</who>
            <bug_when>2008-04-14 21:14:08 0000</bug_when>
            <thetext>0.93 is out!
http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.93.tar.gz</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2008-04-15 09:49:05 0000</bug_when>
            <thetext>*** Bug 217771 has been marked as a duplicate of this bug. ***</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2008-04-15 09:51:42 0000</bug_when>
            <thetext>There are hangs and crashes too.

http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog

Mon Apr 14 21:35:11 CEST 2008 (tk)
----------------------------------
  * Check in 0.93 patches:
    - libclamunrar: bb#541 (RAR - Version required to extract - Evasion)
    - libclamav/spin.c: bb#876 (PeSpin Heap Overflow Vulnerability)
    - libclamav/pe.c: bb#878 (Upack Buffer Overflow Vulnerability)
    - libclamav/message.c: bb#881 (message.c: read beyond allocated region)
    - libclamav/unarj.c: bb#897 (ARJ: Sample from CERT-FI hangs clamav)
    - libclamunrar: bb#898 (RAR crashes on some fuzzed files from CERT-FI)</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2008-04-15 14:00:03 0000</bug_when>
            <thetext>I pushed 0.93 in portage. I had to use AT_M4DIR=&quot;m4&quot;, see www.gossamer-threads.com/lists/clamav/devel/37726


Hi arches, please test clamav-0.93 and mark stable if OK.

</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jer@gentoo.org</who>
            <bug_when>2008-04-15 15:14:35 0000</bug_when>
            <thetext>That&apos;s odd. Right after installation I get this:
# clamd
clamd: error while loading shared libraries: libclamunrar_iface.so.3: cannot open shared object file: No such file or directory
# ldd `which clamd`|less
        libclamav.so.4 =&gt; /usr/lib/libclamav.so.4 (0x4048d000)
        libz.so.1 =&gt; /lib/libz.so.1 (0x40364000)
        libbz2.so.1 =&gt; /lib/libbz2.so.1 (0x4008d000)
        libgmp.so.3 =&gt; /usr/lib/libgmp.so.3 (0x400e1000)
        libclamunrar_iface.so.4 =&gt; /usr/lib/libclamunrar_iface.so.4 (0x4088f000)
        libclamunrar.so.4 =&gt; /usr/lib/libclamunrar.so.4 (0x4026f000)
        libpthread.so.0 =&gt; /lib/libpthread.so.0 (0x402e4000)
        libc.so.6 =&gt; /lib/libc.so.6 (0x40609000)
        /lib/ld.so.1 (0x400a1000)
        libclamunrar_iface.so.3 =&gt; not found

It&apos;s linked to both libclamunrar_iface.so.3 and libclamunrar_iface.so.4? Should be easy to fix...</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>craig@gentoo.org</who>
            <bug_when>2008-04-15 15:48:55 0000</bug_when>
            <thetext>same bug over here!</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ssuominen@gentoo.org</who>
            <bug_when>2008-04-15 15:53:20 0000</bug_when>
            <thetext>*** Bug 217809 has been marked as a duplicate of this bug. ***</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ticho@gentoo.org</who>
            <bug_when>2008-04-15 16:20:04 0000</bug_when>
            <thetext>(In reply to comment #8)
&gt; I pushed 0.93 in portage. I had to use AT_M4DIR=&quot;m4&quot;, see
&gt; www.gossamer-threads.com/lists/clamav/devel/37726
&gt; 
&gt; 
&gt; Hi arches, please test clamav-0.93 and mark stable if OK.
&gt; 

No, the current ebuild is not ready for general consumption. I came across this libunrar weirdness last night, but it was getting late, so I plan to work on it today. BTW, it builds just fine when no clamav is installed, so there might be some glitch in the build system - using libclamunrar_iface.so installed on system if it exists (e.g. if clamav-0.92.1 is installed, which had libclamunrar_iface.so.3).

Also, iconv configure option has been added, and some other minor stuff. I will let you know when an ebuild is ready. Masked it for now.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2008-04-15 16:48:33 0000</bug_when>
            <thetext>OK, back to [ebuild] status.

I can&apos;t reproduce that behaviour while upgrading frop 0.92.1 to 0.93. Everything was fine on two different boxes. I also tried upgrading from 0.92.1-r1 to 0.93.

[falco:/usr/local/portage/app-antivirus]130# /usr/bin/ldd /usr/sbin/clamd
	linux-gate.so.1 =&gt;  (0xb7f05000)
	libclamav.so.4 =&gt; /usr/lib/libclamav.so.4 (0xb7e7c000)
	libz.so.1 =&gt; /lib/libz.so.1 (0xb7e6b000)
	libgmp.so.3 =&gt; /usr/lib/libgmp.so.3 (0xb7e3c000)
	libclamunrar_iface.so.4 =&gt; /usr/lib/libclamunrar_iface.so.4 (0xb7e38000)
	libclamunrar.so.4 =&gt; /usr/lib/libclamunrar.so.4 (0xb7e2e000)
	libpthread.so.0 =&gt; /lib/libpthread.so.0 (0xb7e17000)
	libc.so.6 =&gt; /lib/libc.so.6 (0xb7ce6000)
	/lib/ld-linux.so.2 (0xb7f06000)


If that upgrade is really a problem then we will backport the patch on 0.92.1. i&apos;m attaching it.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2008-04-15 16:49:54 0000</bug_when>
            <thetext>Created an attachment (id=149826)
patch from svn, revision 3788

</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jer@gentoo.org</who>
            <bug_when>2008-04-15 18:47:43 0000</bug_when>
            <thetext>(In reply to comment #12)
&gt; BTW, it builds just fine when no clamav is installed, so there might be
&gt; some glitch in the build system - using libclamunrar_iface.so installed on
&gt; system if it exists (e.g. if clamav-0.92.1 is installed, which had
&gt; libclamunrar_iface.so.3).

It also builds fine when the same version is already installed. And yes, it certainly is a build system issue (libtool?).</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ticho@gentoo.org</who>
            <bug_when>2008-04-16 18:08:48 0000</bug_when>
            <thetext>OK, this is a bit too complicated for me. For some reason, libclamav links to libclamunrar and libclamunrar_iface libraries which are installed on system (/usr/lib), in addition to freshly compiled ones in working dir.

Thing is, I have no idea why, or how to fix it. Can anyone bit better skilled with libtool lend a hand here? Otherwise, I&apos;m just going to wait for maintainer or $someone to fix it, before I can add an ebuild do the tree...</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2008-04-17 15:09:09 0000</bug_when>
            <thetext>(In reply to comment #16)
&gt; OK, this is a bit too complicated for me. For some reason, libclamav links to
&gt; libclamunrar and libclamunrar_iface libraries which are installed on system
&gt; (/usr/lib), in addition to freshly compiled ones in working dir.

Which is weird is that i can&apos;t reproduce that behaviour... even from 0.92.1, even from 0.92.1-rc1...

What i can do is to (try to) backport the patches for 0.92.1

... i finally managed to find a way to reproduce the bug: by using bash instead of zsh. I&apos;m investigating.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2008-04-17 15:50:27 0000</bug_when>
            <thetext>During the &quot;install&quot; phase, a command introduces a ./work/clamav-0.93/libclamav/.libs/libclamav.so.4.0.1T file that contains a reference to the old libclamunrar_iface.so.3.

The command that introduces this reference is:

(cd /data/var/tmp/portage/app-antivirus/clamav-0.93/work/clamav-0.93/libclamav; /bin/sh ../libtool  --tag=CC --mode=relink i686-pc-linux-gnu-gcc -O2 -march=pentium4 -fomit-frame-pointer -thread-safe -version-info 4:1:0 -no-undefined -Wl,--version-script,../libclamav/libclamav.map -o libclamav.la -rpath /usr/lib matcher-ac.lo matcher-bm.lo matcher.lo md5.lo others.lo readdb.lo cvd.lo dsig.lo str.lo scanners.lo textdet.lo filetypes.lo rtf.lo blob.lo mbox.lo message.lo table.lo text.lo ole2_extract.lo vba_extract.lo msexpand.lo pe.lo upx.lo htmlnorm.lo chmunpack.lo rebuildpe.lo petite.lo wwunpack.lo unsp.lo aspack.lo packlibs.lo fsg.lo mew.lo upack.lo line.lo untar.lo unzip.lo inflate64.lo special.lo binhex.lo is_tar.lo tnef.lo autoit.lo strlcpy.lo regcomp.lo regerror.lo regexec.lo regfree.lo unarj.lo bzlib.lo nulsft.lo infblock.lo pdf.lo spin.lo yc.lo elf.lo sis.lo uuencode.lo phishcheck.lo phish_domaincheck_db.lo phish_whitelist.lo regex_list.lo mspack.lo cab.lo entconv.lo hashtab.lo dconf.lo lzma_iface.lo explode.lo textnorm.lo -lz -L/usr/lib -lbz2 -L/usr/lib -lgmp -lpthread lzma/liblzma.la ../libclamunrar_iface/libclamunrar_iface.la -inst-prefix-dir /data/var/tmp/portage/app-antivirus/clamav-0.93/image/) 

I&apos;m not sure, but note the double &quot;-L/usr/lib&quot;

After that command, i have a new libclamav.so.4.0.1T :
$ find -name &quot;libclamav.so*&quot; -type f
./work/clamav-0.93/libclamav/.libs/libclamav.so.4.0.1
./work/clamav-0.93/libclamav/.libs/libclamav.so.4.0.1T

which contains the evil:

$ strings ./work/clamav-0.93/libclamav/.libs/libclamav.so.4.0.1T|grep iface
libclamunrar_iface.so.3
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2008-04-17 16:51:36 0000</bug_when>
            <thetext>Created an attachment (id=150084)
Fix against 0.93 compilations issues wrt unrar_iface.so.3

I removed these extra -L/usr/lib. That works very fine, but that&apos;s dirty. See the patch and comment...</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ticho@gentoo.org</who>
            <bug_when>2008-04-17 20:14:46 0000</bug_when>
            <thetext>Dirty, but works. updated 0.93 ebuild committed and unmasked.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2008-04-17 20:44:29 0000</bug_when>
            <thetext>Okay, let&apos;s try again, dear arches!

target: 
clamav-0.93 alpha amd64 hppa ia64 ppc ppc64 sparc x86</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ticho@gentoo.org</who>
            <bug_when>2008-04-17 21:06:00 0000</bug_when>
            <thetext>What should be tried is emerging 0.93 while having 0.92.1 (or its -r1, doesn&apos;t matter) installed, and then checking dynamic linking. Stuff from comment #9 must not happen.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>maekke@gentoo.org</who>
            <bug_when>2008-04-17 21:29:47 0000</bug_when>
            <thetext>This will break klamav. Maybe other reverse deps won&apos;t work, too - I only tested klamav. Happens on amd64/x86.

make[3]: Leaving directory `/var/tmp/portage/app-antivirus/klamav-0.42/work/klamav-0.42-source/klamav-0.42/src/sqlite&apos;
Making all in klammail
make[3]: Entering directory `/var/tmp/portage/app-antivirus/klamav-0.42/work/klamav-0.42-source/klamav-0.42/src/klammail&apos;
i686-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I/usr/kde/3.5/include -I/usr/qt/3/include -I.  -I/usr/kde/3.5/include  -DQT_THREAD_SUPPORT  -D_REENTRANT  -DNDEBUG -O2  -O2 -march=i686 -pipe -c clamdmail.c
clamdmail.c: In function &apos;clamdscan&apos;:
clamdmail.c:210: error: &apos;struct cl_limits&apos; has no member named &apos;maxmailrec&apos;
clamdmail.c:211: error: &apos;struct cl_limits&apos; has no member named &apos;maxratio&apos;
make[3]: *** [clamdmail.o] Error 1
make[3]: Leaving directory `/var/tmp/portage/app-antivirus/klamav-0.42/work/klamav-0.42-source/klamav-0.42/src/klammail&apos;
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/var/tmp/portage/app-antivirus/klamav-0.42/work/klamav-0.42-source/klamav-0.42/src&apos;
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/var/tmp/portage/app-antivirus/klamav-0.42/work/klamav-0.42-source/klamav-0.42&apos;
make: *** [all] Error 2
 * 
 * ERROR: app-antivirus/klamav-0.42 failed.
 * Call stack:
 *               ebuild.sh, line   49:  Called src_compile
 *             environment, line 4137:  Called kde_src_compile
 *             environment, line 2858:  Called kde_src_compile &apos;src_compile&apos;
 *             environment, line 2978:  Called kde_src_compile &apos;src_compile&apos; &apos;all&apos; &apos;myconf&apos;
 *             environment, line 2974:  Called die
 * The specific snippet of code:
 *                   emake || die &quot;died running emake, $FUNCNAME:make&quot;
 *  The die message:
 *   died running emake, kde_src_compile:make
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jer@gentoo.org</who>
            <bug_when>2008-04-18 04:01:32 0000</bug_when>
            <thetext>(In reply to comment #22)
&gt; What should be tried is emerging 0.93 while having 0.92.1 (or its -r1, doesn&apos;t
&gt; matter) installed, and then checking dynamic linking. Stuff from comment #9
&gt; must not happen.

It&apos;s still happening with CVS revision 1.2:
elmer ~ # qlop -lu clamav | tail -n 2
Thu Apr 17 22:13:41 2008 &gt;&gt;&gt; app-antivirus/clamav-0.92.1
Fri Apr 18 05:58:55 2008 &gt;&gt;&gt; app-antivirus/clamav-0.93
elmer ~ # ldd `which clamd`
        libclamav.so.4 =&gt; /usr/lib/libclamav.so.4 (0x40213000)
        libz.so.1 =&gt; /lib/libz.so.1 (0x40364000)
        libbz2.so.1 =&gt; /lib/libbz2.so.1 (0x4008d000)
        libgmp.so.3 =&gt; /usr/lib/libgmp.so.3 (0x400e1000)
        libclamunrar_iface.so.4 =&gt; /usr/lib/libclamunrar_iface.so.4 (0x4061f000)
        libclamunrar.so.4 =&gt; /usr/lib/libclamunrar.so.4 (0x4033d000)
        libpthread.so.0 =&gt; /lib/libpthread.so.0 (0x402e4000)
        libc.so.6 =&gt; /lib/libc.so.6 (0x40a09000)
        /lib/ld.so.1 (0x400a1000)
        libclamunrar_iface.so.3 =&gt; not found
elmer ~ # qfile `which clamd`
app-antivirus/clamav (/usr/sbin/clamd)</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2008-04-19 14:33:08 0000</bug_when>
            <thetext>(In reply to comment #24)

&gt; 
&gt; It&apos;s still happening with CVS revision 1.2:
&gt; elmer ~ # qlop -lu clamav | tail -n 2
&gt; Thu Apr 17 22:13:41 2008 &gt;&gt;&gt; app-antivirus/clamav-0.92.1
&gt; Fri Apr 18 05:58:55 2008 &gt;&gt;&gt; app-antivirus/clamav-0.93
&gt; elmer ~ # ldd `which clamd`
&gt;         libclamav.so.4 =&gt; /usr/lib/libclamav.so.4 (0x40213000)
&gt;         libz.so.1 =&gt; /lib/libz.so.1 (0x40364000)
&gt;         libbz2.so.1 =&gt; /lib/libbz2.so.1 (0x4008d000)
&gt;         libgmp.so.3 =&gt; /usr/lib/libgmp.so.3 (0x400e1000)
&gt;         libclamunrar_iface.so.4 =&gt; /usr/lib/libclamunrar_iface.so.4
&gt; (0x4061f000)
&gt;         libclamunrar.so.4 =&gt; /usr/lib/libclamunrar.so.4 (0x4033d000)
&gt;         libpthread.so.0 =&gt; /lib/libpthread.so.0 (0x402e4000)
&gt;         libc.so.6 =&gt; /lib/libc.so.6 (0x40a09000)
&gt;         /lib/ld.so.1 (0x400a1000)
&gt;         libclamunrar_iface.so.3 =&gt; not found
&gt; elmer ~ # qfile `which clamd`
&gt; app-antivirus/clamav (/usr/sbin/clamd)
&gt; 

Can you post somewhere the output of the install phase, please. Or just the &quot;libtool ... -o libclamav.la ...&quot; line.

Is someone else able to trigger that stuff?</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>craig@gentoo.org</who>
            <bug_when>2008-04-20 23:26:09 0000</bug_when>
            <thetext>Works for me now, thanks. :)</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2008-04-21 09:03:58 0000</bug_when>
            <thetext>(In reply to comment #25)
&gt; (In reply to comment #24)
&gt; 
&gt; &gt; 
&gt; &gt; It&apos;s still happening with CVS revision 1.2:
&gt; &gt; elmer ~ # qlop -lu clamav | tail -n 2
&gt; &gt; Thu Apr 17 22:13:41 2008 &gt;&gt;&gt; app-antivirus/clamav-0.92.1
&gt; &gt; Fri Apr 18 05:58:55 2008 &gt;&gt;&gt; app-antivirus/clamav-0.93
&gt; &gt; elmer ~ # ldd `which clamd`
&gt; &gt;         libclamav.so.4 =&gt; /usr/lib/libclamav.so.4 (0x40213000)
&gt; &gt;         libz.so.1 =&gt; /lib/libz.so.1 (0x40364000)
&gt; &gt;         libbz2.so.1 =&gt; /lib/libbz2.so.1 (0x4008d000)
&gt; &gt;         libgmp.so.3 =&gt; /usr/lib/libgmp.so.3 (0x400e1000)
&gt; &gt;         libclamunrar_iface.so.4 =&gt; /usr/lib/libclamunrar_iface.so.4
&gt; &gt; (0x4061f000)
&gt; &gt;         libclamunrar.so.4 =&gt; /usr/lib/libclamunrar.so.4 (0x4033d000)
&gt; &gt;         libpthread.so.0 =&gt; /lib/libpthread.so.0 (0x402e4000)
&gt; &gt;         libc.so.6 =&gt; /lib/libc.so.6 (0x40a09000)
&gt; &gt;         /lib/ld.so.1 (0x400a1000)
&gt; &gt;         libclamunrar_iface.so.3 =&gt; not found
&gt; &gt; elmer ~ # qfile `which clamd`
&gt; &gt; app-antivirus/clamav (/usr/sbin/clamd)
&gt; &gt; 
&gt; 
&gt; Can you post somewhere the output of the install phase, please. Or just the
&gt; &quot;libtool ... -o libclamav.la ...&quot; line.
&gt; 
&gt; Is someone else able to trigger that stuff?
&gt; 


Reping Jeroen, can you reproduce it while emerging from 0.92.1?
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jer@gentoo.org</who>
            <bug_when>2008-04-21 12:54:54 0000</bug_when>
            <thetext>(In reply to comment #27)
&gt; Reping Jeroen, can you reproduce it while emerging from 0.92.1?

Going from 0.92.1 to 0.93 seems alright. I&apos;ll test once more and stabilise for HPPA when I&apos;m satisfied.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jer@gentoo.org</who>
            <bug_when>2008-04-21 16:10:43 0000</bug_when>
            <thetext>Stable for HPPA.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>armin76@gentoo.org</who>
            <bug_when>2008-04-21 17:56:44 0000</bug_when>
            <thetext>alpha/ia64/sparc/x86 stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>maekke@gentoo.org</who>
            <bug_when>2008-04-21 19:11:26 0000</bug_when>
            <thetext>amd64 stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>spam@lutel.pl</who>
            <bug_when>2008-04-22 06:50:30 0000</bug_when>
            <thetext>This one breaks dansguardian:

x86_64-pc-linux-gnu-g++ -DHAVE_CONFIG_H -I. -I..   -I/usr/include -I/usr/include -fexceptions -O2 -mtune=opteron -march=opteron -fomit-frame-pointer -pipe  -MT clamdscan.o -MD -MP -MF .deps/clamdscan.Tpo -c -o clamdscan.o `test -f &apos;contentscanners/clamdscan.cpp&apos; || echo &apos;./&apos;`contentscanners/clamdscan.cpp
contentscanners/clamav.cpp: In member function ‘virtual int clamavinstance::init(void*)’:
contentscanners/clamav.cpp:265: error: ‘struct cl_limits’ has no member named ‘maxratio’
contentscanners/clamav.cpp:266: error: ‘struct cl_limits’ has no member named ‘maxratio’
contentscanners/clamav.cpp:267: error: ‘struct cl_limits’ has no member named ‘maxratio’
make[2]: *** [clamav.o] Error 1
make[2]: *** Waiting for unfinished jobs....
mv -f .deps/dansguardian.Tpo .deps/dansguardian.Po
mv -f .deps/clamdscan.Tpo .deps/clamdscan.Po
mv -f .deps/FOptionContainer.Tpo .deps/FOptionContainer.Po
mv -f .deps/OptionContainer.Tpo .deps/OptionContainer.Po
make[2]: Leaving directory `/tmp/portage/net-proxy/dansguardian-2.9.9.3_beta/work/dansguardian-2.9.9.3/src&apos;
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/tmp/portage/net-proxy/dansguardian-2.9.9.3_beta/work/dansguardian-2.9.9.3&apos;
make: *** [all] Error 2
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>martin.holzer@wienerlinien.at</who>
            <bug_when>2008-04-22 07:19:19 0000</bug_when>
            <thetext>did you see the warning during configure ?

config.status: creating docs/man/clamd.conf.5
config.status: creating docs/man/clamdscan.1
config.status: creating docs/man/clamscan.1
config.status: creating docs/man/freshclam.1
config.status: creating docs/man/freshclam.conf.5
config.status: creating docs/man/sigtool.1
config.status: creating clamav-config.h
config.status: executing depfiles commands        
configure: WARNING:
****** WARNING:
****** You are either cross compiling to a different host or
****** you have manually disabled important configure checks.
****** Please be aware that this build may be badly broken.
****** DO NOT REPORT BUGS BASED ON THIS BUILD !!!

make  all-recursive
make[1]: Entering directory `/var/tmp/portage/app-antivirus/clamav-0.93/work/clamav-0.93&apos;
Making all in libclamunrar</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>martin.holzer@wienerlinien.at</who>
            <bug_when>2008-04-22 07:23:46 0000</bug_when>
            <thetext>0.93 breaks bug #218510</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>corsair@gentoo.org</who>
            <bug_when>2008-04-24 18:47:54 0000</bug_when>
            <thetext>Should we wait till compile errors with klamav and Mail-ClamAV are fixed?</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ticho@gentoo.org</who>
            <bug_when>2008-05-04 14:39:53 0000</bug_when>
            <thetext>(In reply to comment #35)
&gt; Should we wait till compile errors with klamav and Mail-ClamAV are fixed?
&gt; 

That&apos;s up to the respective maintainers for these packages to decide. Klamav has a new version since Apr 30th, and there is a patch for Mail-ClamAV available on abovementioned bug.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>wolf31o2@gentoo.org</who>
            <bug_when>2008-05-07 07:14:33 0000</bug_when>
            <thetext>Do compile issues in dependent packages warrant holding off on a security issue?  I don&apos;t think so, but I leave that up to you guys.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>rbu@gentoo.org</who>
            <bug_when>2008-05-07 07:57:28 0000</bug_when>
            <thetext>(In reply to comment #35)
&gt; Should we wait till compile errors with klamav and Mail-ClamAV are fixed?

Please mark 0.93 stable for ppc and ppc64. When other packages are broken due to the upgrade, and there is a fix available, please mark the corresponding bugs as blockers of this bug and we will go through a fast stabling of those packages.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>corsair@gentoo.org</who>
            <bug_when>2008-05-07 18:43:27 0000</bug_when>
            <thetext>(In reply to comment #37)
&gt; Do compile issues in dependent packages warrant holding off on a security
&gt; issue?  I don&apos;t think so [...]

How comes I never had to dicide; now it&apos;s clear: Priority(Security) &gt; Priority(No Breakage of other packages)

ppc64 stable.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>dertobi123@gentoo.org</who>
            <bug_when>2008-05-11 11:35:11 0000</bug_when>
            <thetext>ppc stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>py@gentoo.org</who>
            <bug_when>2008-05-11 13:06:29 0000</bug_when>
            <thetext>glsa request filed.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>pva@gentoo.org</who>
            <bug_when>2008-05-11 15:29:06 0000</bug_when>
            <thetext>Fixed in release snapshot. Also fixed Mail-ClamAV and klamav.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>pva@gentoo.org</who>
            <bug_when>2008-05-11 16:11:57 0000</bug_when>
            <thetext>Uh, drop my comment about &quot;fixed Mail-ClamAV&quot;. It&apos;s not fixed. For interested parties tracker of clamav-0.93 breakages was created in bug #221715.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>rbu@gentoo.org</who>
            <bug_when>2008-07-21 09:05:30 0000</bug_when>
            <thetext>Arches, please test and mark stable:
=app-antivirus/clamav-0.93.3
Target keywords : &quot;alpha amd64 hppa ia64 ppc ppc64 sparc x86&quot;</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>rbu@gentoo.org</who>
            <bug_when>2008-07-21 09:07:13 0000</bug_when>
            <thetext>gah, wrong bug.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>bluebird@gentoo.org</who>
            <bug_when>2008-07-21 18:44:23 0000</bug_when>
            <thetext>(In reply to comment #45)
&gt; gah, wrong bug.

removing sparc, too</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>falco@gentoo.org</who>
            <bug_when>2008-08-05 21:29:52 0000</bug_when>
            <thetext>it was GLSA 200805-19 unless i&apos;m wrong. Closing.</thetext>
          </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>149826</attachid>
            <date>2008-04-15 16:49 0000</date>
            <desc>patch from svn, revision 3788</desc>
            <filename>patch-r3788.diff</filename>
            <type>text/plain</type>
            <data encoding="base64">SW5kZXg6IENoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09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</data>        

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>150084</attachid>
            <date>2008-04-17 16:51 0000</date>
            <desc>Fix against 0.93 compilations issues wrt unrar_iface.so.3</desc>
            <filename>clamav-0.93-libfix.patch</filename>
            <type>text/plain</type>
            <data encoding="base64">ZGlmZiAtdU5yIGNsYW1hdi0wLjkzLm9yaWcvY29uZmlndXJlLmluIGNsYW1hdi0wLjkzL2NvbmZp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</data>        

          </attachment>
    </bug>

</bugzilla>