Skip to content

ClamOnAcc: Fix infinite loop when OnAccessIncludePath doesn't exist (1.0.8)#1426

Merged
val-ms merged 2 commits into
Cisco-Talos:dev/1.0.8from
val-ms:CLAM-2216-ClamOnAccLoop-1.0.8
Jan 13, 2025
Merged

ClamOnAcc: Fix infinite loop when OnAccessIncludePath doesn't exist (1.0.8)#1426
val-ms merged 2 commits into
Cisco-Talos:dev/1.0.8from
val-ms:CLAM-2216-ClamOnAccLoop-1.0.8

Conversation

@val-ms
Copy link
Copy Markdown
Contributor

@val-ms val-ms commented Dec 23, 2024

Backport of #1047 for 1.0.8

@val-ms
Copy link
Copy Markdown
Contributor Author

val-ms commented Dec 23, 2024

@opoplawski
Copy link
Copy Markdown
Contributor

Thank you! Any ETA for a 1.0.8 release?

@val-ms
Copy link
Copy Markdown
Contributor Author

val-ms commented Dec 23, 2024

January 22.

@rsundriyal rsundriyal self-requested a review January 10, 2025 15:45
rsundriyal
rsundriyal previously approved these changes Jan 10, 2025
Upgrade macOS OpenSSL dependency to use 3 instead of 1.1.

Python's pip from Homebrew now refuses to isntall globally:

error: externally-managed-environment

× This environment is externally managed
╰─> To install Python packages system-wide, try brew install
    xyz, where xyz is the package you are trying to
    install.

    If you wish to install a Python library that isn't in Homebrew,
    use a virtual environment:

    python3 -m venv path/to/venv
    source path/to/venv/bin/activate
    python3 -m pip install xyz

    If you wish to install a Python application that isn't in Homebrew,
    it may be easiest to use 'pipx install xyz', which will manage a
    virtual environment for you. You can install pipx with

    brew install pipx

    You may restore the old behavior of pip by passing
    the '--break-system-packages' flag to pip, or by adding
    'break-system-packages = true' to your pip.conf file. The latter
    will permanently disable this error.

    If you disable this error, we STRONGLY recommend that you additionally
    pass the '--user' flag to pip, or set 'user = true' in your pip.conf
    file. Failure to do this can result in a broken Homebrew installation.

    Read more about this behavior here: <https://peps.python.org/pep-0668/>

Using Pipx instead. Making the same change for Ubuntu just in case.
@val-ms
Copy link
Copy Markdown
Contributor Author

val-ms commented Jan 12, 2025

Added a cherry-pick of fa10d0c to fix the failed mac CI build.

@rsundriyal rsundriyal self-requested a review January 13, 2025 13:33
@val-ms val-ms merged commit 8b02662 into Cisco-Talos:dev/1.0.8 Jan 13, 2025
@val-ms val-ms deleted the CLAM-2216-ClamOnAccLoop-1.0.8 branch January 13, 2025 18:56
@Mywork444
Copy link
Copy Markdown

Is there any information available like why I cant install 1.0.7 or 1.0.8 in el7 machines

@Mywork444
Copy link
Copy Markdown

Any workaround for current vulnerabilities available for el7 1.0.6 clam av version as I am not able to update to 1.0.7 or 1.0.8 in el7 machines.

@opoplawski
Copy link
Copy Markdown
Contributor

el7 is end of life. You need to update your machines to a supported version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment