Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package clamav for openSUSE:Factory checked in at 2021-11-05 22:58:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/clamav (Old) and /work/SRC/openSUSE:Factory/.clamav.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "clamav" Fri Nov 5 22:58:21 2021 rev:115 rq:929611 version:0.103.4 Changes: -------- --- /work/SRC/openSUSE:Factory/clamav/clamav.changes 2021-11-04 16:42:21.762024511 +0100 +++ /work/SRC/openSUSE:Factory/.clamav.new.1890/clamav.changes 2021-11-05 22:58:26.832275340 +0100 @@ -4 +4 @@ -- Update to 0.103.4 +- bsc#1192346: Update to 0.103.4 @@ -64,0 +65,7 @@ +Wed Jun 30 12:17:30 UTC 2021 - Marcus Meissner <[email protected]> + +- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages, + document that files over a certain size by default will silently not be + scanned and how this can be adjusted (bsc#1187509) + +------------------------------------------------------------------- @@ -67 +74 @@ -- Update to 0.103.3 +- bsc#1188284: Update to 0.103.3 New: ---- clamav-document-maxsize.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ clamav.spec ++++++ --- /var/tmp/diff_new_pack.ebHelc/_old 2021-11-05 22:58:28.324276259 +0100 +++ /var/tmp/diff_new_pack.ebHelc/_new 2021-11-05 22:58:28.328276261 +0100 @@ -40,6 +40,8 @@ Patch6: clamav-disable-yara.patch Patch12: clamav-fips.patch Patch13: clamav-ck_assert_msg.patch +Patch14: clamav-document-maxsize.patch + BuildRequires: autoconf BuildRequires: automake BuildRequires: gcc-c++ @@ -147,6 +149,7 @@ %patch6 %patch12 %patch13 -p1 +%patch14 -p1 %build %if 0%{?suse_version} <= 1500 ++++++ clamav-document-maxsize.patch ++++++ Index: clamav-0.103.2/docs/man/clamscan.1.in =================================================================== --- clamav-0.103.2.orig/docs/man/clamscan.1.in +++ clamav-0.103.2/docs/man/clamscan.1.in @@ -8,6 +8,18 @@ clamscan [options] [file/directory/\-] .SH "DESCRIPTION" .LP clamscan is a command line anti\-virus scanner. +.SH "NOTE" +.LP +If a file or an archive is larger than the default or configured size (see \-\-max\-filesize and \-\-max-scansize options) scanning will abort at the limit, and the file will be marked as "OK". +.TP +The archive scan limits are currently set to 25MB or 100MB respectively. +.TP +There are more options that limit scanning, please check all the \-\-max\-something options. +.TP +To report files that are exceeding these limits, you need to specify \-\-alert\-exceeds\-max=yes option. This will then report a "Heuristics.Limits.Exceeded FOUND" for such files. + +.TP +Please note that such a FOUND message does not imply infection, and your tooling should be able to handle this. .SH "OPTIONS" .LP Most of the options are simple switches which enable or disable some features. Options marked with [=yes/no(*)] can be optionally followed by =yes/=no; if they get called without the boolean argument the scanner will assume 'yes'. The asterisk marks the default internal setting for a given option. Index: clamav-0.103.2/docs/man/clamdscan.1.in =================================================================== --- clamav-0.103.2.orig/docs/man/clamdscan.1.in +++ clamav-0.103.2/docs/man/clamdscan.1.in @@ -8,6 +8,17 @@ clamdscan [options] [file/directory] .SH "DESCRIPTION" .LP clamdscan is a clamd client which may be used as a clamscan replacement. It accepts all the options implemented in clamscan but most of them will be ignored because its scanning abilities only depend on clamd. +.SH "NOTE" +.LP +If a file or an archive is larger than the default or configured size (see MaxFileSize and MaxScanSize options in clamd.conf) scanning will abort at the limit, and the file will be marked as "OK". +.TP +The archive scan limits are currently set to 25MB or 100MB respectively. +.TP +There are more options that limit scanning, please check all the MaxSomething options in clamd.conf. +.TP +To report files that are exceeding these limits, you need to specify AlertExceedsMax TRUE in clamd.conf. This will then report a "Heuristics.Limits.Exceeded FOUND" for such files. +.TP +Please note that such a FOUND message does not imply infection, and your tooling should be able to handle this. .SH "OPTIONS" .LP
