7aee27c2b9
Fixes the following security issues: - CVE-2021-1386: Fix for UnRAR DLL load privilege escalation. Affects 0.103.1 and prior on Windows only. - CVE-2021-1252: Fix for Excel XLM parser infinite loop. Affects 0.103.0 and 0.103.1 only. - CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. Affects 0.103.0 and 0.103.1 only. - CVE-2021-1405: Fix for mail parser NULL-dereference crash. Affects 0.103.1 and prior. - CVE-2021-27506: The ClamAV Engine (Version 0.103.1 and below) embedded in Storsmshield Network Security (1.0 to 4.1.5) is subject to DoS in case of parsing of malformed png files. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
102 lines
2.5 KiB
Makefile
102 lines
2.5 KiB
Makefile
################################################################################
|
|
#
|
|
# clamav
|
|
#
|
|
################################################################################
|
|
|
|
CLAMAV_VERSION = 0.103.2
|
|
CLAMAV_SITE = https://www.clamav.net/downloads/production
|
|
CLAMAV_LICENSE = GPL-2.0
|
|
CLAMAV_LICENSE_FILES = COPYING COPYING.bzip2 COPYING.file COPYING.getopt \
|
|
COPYING.LGPL COPYING.llvm COPYING.lzma COPYING.pcre COPYING.regex \
|
|
COPYING.unrar COPYING.zlib
|
|
CLAMAV_CPE_ID_VENDOR = clamav
|
|
CLAMAV_DEPENDENCIES = \
|
|
host-pkgconf \
|
|
libcurl \
|
|
libmspack \
|
|
openssl \
|
|
zlib \
|
|
$(TARGET_NLS_DEPENDENCIES)
|
|
|
|
# mmap cannot be detected when cross-compiling, needed for mempool support
|
|
CLAMAV_CONF_ENV = \
|
|
ac_cv_c_mmap_private=yes \
|
|
have_cv_ipv6=yes \
|
|
OBJC=$(TARGET_CC)
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_HAS_LIBATOMIC),y)
|
|
CLAMAV_LIBS += -latomic
|
|
endif
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_USES_GLIBC),)
|
|
CLAMAV_DEPENDENCIES += musl-fts
|
|
CLAMAV_LIBS += -lfts
|
|
endif
|
|
|
|
CLAMAV_CONF_ENV += LIBS="$(CLAMAV_LIBS)"
|
|
|
|
CLAMAV_CONF_OPTS = \
|
|
--with-dbdir=/var/lib/clamav \
|
|
--with-libcurl=$(STAGING_DIR)/usr \
|
|
--with-openssl=$(STAGING_DIR)/usr \
|
|
--with-system-libmspack=$(STAGING_DIR)/usr \
|
|
--with-zlib=$(STAGING_DIR)/usr \
|
|
--disable-zlib-vcheck \
|
|
--disable-rpath \
|
|
--disable-clamav \
|
|
--disable-milter \
|
|
--disable-llvm \
|
|
--disable-clamdtop \
|
|
--enable-mempool
|
|
|
|
ifeq ($(BR2_PACKAGE_BZIP2),y)
|
|
CLAMAV_DEPENDENCIES += bzip2
|
|
# autodetection gets confused if host has bzip2, so force it
|
|
CLAMAV_CONF_ENV += \
|
|
ac_cv_libbz2_libs=-lbz2 \
|
|
ac_cv_libbz2_ltlibs=-lbz2
|
|
else
|
|
CLAMAV_CONF_OPTS += --disable-bzip2
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_JSON_C),y)
|
|
CLAMAV_CONF_OPTS += --with-libjson=$(STAGING_DIR)/usr
|
|
CLAMAV_DEPENDENCIES += json-c
|
|
else
|
|
CLAMAV_CONF_OPTS += --without-libjson
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBXML2),y)
|
|
CLAMAV_CONF_OPTS += --with-xml=$(STAGING_DIR)/usr
|
|
CLAMAV_DEPENDENCIES += libxml2
|
|
else
|
|
CLAMAV_CONF_OPTS += --disable-xml
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBICONV),y)
|
|
CLAMAV_CONF_OPTS += --with-iconv
|
|
CLAMAV_DEPENDENCIES += libiconv
|
|
else
|
|
CLAMAV_CONF_OPTS += --without-iconv
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_PCRE2),y)
|
|
CLAMAV_CONF_OPTS += --with-pcre=$(STAGING_DIR)/usr
|
|
CLAMAV_DEPENDENCIES += pcre2
|
|
else ifeq ($(BR2_PACKAGE_PCRE),y)
|
|
CLAMAV_CONF_OPTS += --with-pcre=$(STAGING_DIR)/usr
|
|
CLAMAV_DEPENDENCIES += pcre
|
|
else
|
|
CLAMAV_CONF_OPTS += --without-pcre
|
|
endif
|
|
|
|
ifeq ($(BR2_INIT_SYSTEMD),y)
|
|
CLAMAV_CONF_OPTS += --with-systemdsystemunitdir=/usr/lib/systemd/system
|
|
CLAMAV_DEPENDENCIES += systemd
|
|
else
|
|
CLAMAV_CONF_OPTS += --with-systemdsystemunitdir=no
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|