From: Ivan Rako <Ivan.Rako@CARNet.hr>
Date: Wed, 19 Mar 2008 17:01:18 +0000 (+0100)
Subject: Uvoz u git: clamav-cn 3:0.92.1-1
X-Git-Tag: debian/0.97-1~24
X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?p=clamav-cn.git;a=commitdiff_plain;h=ecbb68c462b873939ded49cd9b0aae58190b03e7;ds=sidebyside

Uvoz u git: clamav-cn 3:0.92.1-1

* Ovisnost o najnovijoj verziji koja ispravlja nekoliko sigurnosnih
  propusta:
  - [2007-6595]: libclamav/others.c: symlink vulnerability
    cli_gentempfd now calls open with O_EXCL (closes: #458532)
  - [CVE-2008-0318]: libclamav/pe.c: possible integer overflow
  - libclamav/mew.c: possible heap corruption
---

diff --git a/debian/changelog b/debian/changelog
index 33d5a64..dbf9fde 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,14 @@
+clamav-cn (3:0.92.1-1) stable; urgency=high
+
+  * Ovisnost o najnovijoj verziji koja ispravlja nekoliko sigurnosnih
+    propusta:
+    - [2007-6595]: libclamav/others.c: symlink vulnerability
+      cli_gentempfd now calls open with O_EXCL (closes: #458532)
+    - [CVE-2008-0318]: libclamav/pe.c: possible integer overflow
+    - libclamav/mew.c: possible heap corruption
+
+ -- Ivan Rako <Ivan.Rako@CARNet.hr>  Thu, 21 Feb 2008 19:32:05 +0100
+
 clamav-cn (3:0.90.1-1) stable; urgency=medium
 
   * izdanje paketa za Etch
diff --git a/debian/control b/debian/control
index 506cef5..ad7b447 100644
--- a/debian/control
+++ b/debian/control
@@ -8,7 +8,7 @@ Standards-Version: 3.6.1
 Package: clamav-cn
 Architecture: all
 Depends: carnet-tools-cn (>= 2.3)
-Pre-Depends: clamav-daemon (>= 0.90.1), clamav-freshclam (>= 0.90.1), clamav (>= 0.90.1)
+Pre-Depends: clamav-daemon (>= 0.92.1~dfsg-1volatile1), clamav-freshclam (>= 0.92.1~dfsg-1volatile1), clamav (>= 0.92.1~dfsg-1volatile1)
 Conflicts: amavisd-cn (<< 2:20030616p5-0)
 Description: antivirus scanner for Unix
  Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this
diff --git a/debian/postinst b/debian/postinst
index d40791d..50a2959 100755
--- a/debian/postinst
+++ b/debian/postinst
@@ -6,7 +6,7 @@ set -e
 [ "$DEBIAN_SCRIPT_DEBUG" ] && set -vx
 
 # Load CARNet functions
-#. /usr/share/carnet-tools/functions.sh
+. /usr/share/carnet-tools/functions.sh
 
 #if dpkg --compare-versions "$2" lt 2:0.91.1-1 ; then
 #  cp_backup_conffile /etc/clamav/clamd.conf
@@ -22,6 +22,15 @@ set -e
 #  restart="yes"
 #fi
 
+cp_check_and_sed "^AllowSupplementaryGroups false" \
+                 "s/AllowSupplementaryGroups false/AllowSupplementaryGroups true/g" \
+                 /etc/clamav/clamd.conf && restart="yes" || true
+
+if ! grep -q ^AllowSupplementaryGroups /etc/clamav/clamd.conf; then
+  echo "AllowSupplementaryGroups true" >> /etc/clamav/clamd.conf
+  reload="yes"
+fi
+
 chown -R clamav:clamav /var/run/clamav /var/lib/clamav /var/log/clamav
 
 # dodaj korisnika clamav u grupu amavis (ako postoji...)