Skip to content

ClamOnAcc: Fix infinite loop when OnAccessIncludePath doesn't exist (1.0.8)#1426

Merged
val-ms merged 2 commits intoCisco-Talos:dev/1.0.8from
val-ms:CLAM-2216-ClamOnAccLoop-1.0.8
Jan 13, 2025
Merged

ClamOnAcc: Fix infinite loop when OnAccessIncludePath doesn't exist (1.0.8)#1426
val-ms merged 2 commits intoCisco-Talos:dev/1.0.8from
val-ms:CLAM-2216-ClamOnAccLoop-1.0.8

Conversation

@val-ms
Copy link
Contributor

@val-ms val-ms commented Dec 23, 2024

Backport of #1047 for 1.0.8

@val-ms
Copy link
Contributor Author

val-ms commented Dec 23, 2024

@opoplawski

@opoplawski
Copy link
Contributor

Thank you! Any ETA for a 1.0.8 release?

@val-ms
Copy link
Contributor Author

val-ms commented Dec 23, 2024

January 22.

@rsundriyal rsundriyal self-requested a review January 10, 2025 15:45
rsundriyal
rsundriyal previously approved these changes Jan 10, 2025
Upgrade macOS OpenSSL dependency to use 3 instead of 1.1.

Python's pip from Homebrew now refuses to isntall globally:

error: externally-managed-environment

× This environment is externally managed
╰─> To install Python packages system-wide, try brew install
    xyz, where xyz is the package you are trying to
    install.

    If you wish to install a Python library that isn't in Homebrew,
    use a virtual environment:

    python3 -m venv path/to/venv
    source path/to/venv/bin/activate
    python3 -m pip install xyz

    If you wish to install a Python application that isn't in Homebrew,
    it may be easiest to use 'pipx install xyz', which will manage a
    virtual environment for you. You can install pipx with

    brew install pipx

    You may restore the old behavior of pip by passing
    the '--break-system-packages' flag to pip, or by adding
    'break-system-packages = true' to your pip.conf file. The latter
    will permanently disable this error.

    If you disable this error, we STRONGLY recommend that you additionally
    pass the '--user' flag to pip, or set 'user = true' in your pip.conf
    file. Failure to do this can result in a broken Homebrew installation.

    Read more about this behavior here: <https://peps.python.org/pep-0668/>

Using Pipx instead. Making the same change for Ubuntu just in case.
@val-ms
Copy link
Contributor Author

val-ms commented Jan 12, 2025

Added a cherry-pick of fa10d0c to fix the failed mac CI build.

@rsundriyal rsundriyal self-requested a review January 13, 2025 13:33
@val-ms val-ms merged commit 8b02662 into Cisco-Talos:dev/1.0.8 Jan 13, 2025
22 of 23 checks passed
@val-ms val-ms deleted the CLAM-2216-ClamOnAccLoop-1.0.8 branch January 13, 2025 18:56
@Mywork444
Copy link

Is there any information available like why I cant install 1.0.7 or 1.0.8 in el7 machines

@Mywork444
Copy link

Any workaround for current vulnerabilities available for el7 1.0.6 clam av version as I am not able to update to 1.0.7 or 1.0.8 in el7 machines.

@opoplawski
Copy link
Contributor

el7 is end of life. You need to update your machines to a supported version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants