ClamAV® blog: ClamAV 0.98 .6 has been released!

"Joel Esler (jesler)" <[email protected]> Tue, 27 Jan 2015 23:24:43 +0000
Newsgroups gmane.comp.security.virus.clamav.announce
Message-ID <5628150D-D51B-4B16-B5FD-0D33E8BE9180__20016.8208255947$1422401366$gmane$org@cisco.com>
--===============7402732241712451135==
Content-Language: en-US
Content-Type: multipart/alternative;
	boundary="_000_5628150DD51B4B16B5FD0D33E8BE9180ciscocom_"

--_000_5628150DD51B4B16B5FD0D33E8BE9180ciscocom_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html

ClamAV 0.98.6 is a bug fix release correcting the following:


  *   library shared object revisions.
  *   installation issues on some Mac OS X and FreeBSD platforms.
  *   includes a patch from Sebastian Andrzej Siewior making ClamAV pid fil=
es compatible with systemd.
  *   - Fix a heap out of bounds condition with crafted Yoda's crypter file=
s. This issue was discovered by Felix Groebert of the Google Security Team.
  *   - Fix a heap out of bounds condition with crafted mew packer files. T=
his issue was discovered by Felix Groebert of the Google Security Team.
  *   - Fix a heap out of bounds condition with crafted upx packer files. T=
his issue was discovered by Kevin Szkudlapski of Quarkslab.
  *   - Fix a heap out of bounds condition with crafted upack packer files.=
 This issue was discovered by Sebastian Andrzej Siewior. CVE-2014-9328.
  *   - Compensate a crash due to incorrect compiler optimization when hand=
ling crafted petite packer files. This issue was discovered by Sebastian An=
drzej Siewior.

Thanks to the following ClamAV community members for code submissions
and bug reporting included in ClamAV 0.98.6:

Sebastian Andrzej Siewior
Felix Groebert
Kevin Szkudlapski
Mark Pizzolato
Daniel J. Luke

Please download the latest release of ClamAV from 0.98.6 from our download =
page<http://www.clamav.net/download.html>.

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos

--_000_5628150DD51B4B16B5FD0D33E8BE9180ciscocom_
Content-Type: text/html; charset="iso-8859-1"
Content-ID: <[email protected]>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space;" class=3D"">
<div class=3D"Apple-Mail-URLShareUserContentTopClass"><br class=3D"">
</div>
<div class=3D"Apple-Mail-URLShareWrapperClass" style=3D"position: relative =
!important;">
<blockquote type=3D"cite" style=3D"border-left-style: none; color: inherit;=
 padding: inherit; margin: inherit;" class=3D"">
<a href=3D"http://blog.clamav.net/2015/01/clamav-0986-has-been-released.htm=
l" class=3D"">http://blog.clamav.net/2015/01/clamav-0986-has-been-released.=
html</a><br class=3D"">
</blockquote>
<br class=3D"">
</div>
<div class=3D"Apple-Mail-URLShareWrapperClass" style=3D"position: relative =
!important;">
<span style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetic=
a, FreeSans, sans-serif; font-size: 13px; line-height: 18px; background-col=
or: rgb(255, 255, 255);" class=3D"">ClamAV 0.98.6 is a bug fix release corr=
ecting the following:</span><br style=3D"color: rgb(68, 68, 68); font-famil=
y: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; line-he=
ight: 18px;" class=3D"">
<br style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetica,=
 FreeSans, sans-serif; font-size: 13px; line-height: 18px;" class=3D"">
<ul style=3D"padding: 0px 2.5em; margin: 0.5em 0px; line-height: 18px; list=
-style-position: initial; list-style-image: initial; color: rgb(68, 68, 68)=
; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 1=
3px;" class=3D"">
<li style=3D"padding: 0.25em 0px; margin: 0px 0px 0.25em; border: none;" cl=
ass=3D"">library shared object revisions.</li><li style=3D"padding: 0.25em =
0px; margin: 0px 0px 0.25em; border: none;" class=3D"">installation issues =
on some Mac OS X and FreeBSD platforms.</li><li style=3D"padding: 0.25em 0p=
x; margin: 0px 0px 0.25em; border: none;" class=3D"">includes a patch from =
Sebastian Andrzej Siewior making ClamAV pid files compatible with systemd.<=
/li><li style=3D"padding: 0.25em 0px; margin: 0px 0px 0.25em; border: none;=
" class=3D"">- Fix a heap out of bounds condition with crafted Yoda's crypt=
er files. This issue was discovered by Felix Groebert of the Google Securit=
y Team.</li><li style=3D"padding: 0.25em 0px; margin: 0px 0px 0.25em; borde=
r: none;" class=3D"">- Fix a heap out of bounds condition with crafted mew =
packer files. This issue was discovered by Felix Groebert of the Google Sec=
urity Team.</li><li style=3D"padding: 0.25em 0px; margin: 0px 0px 0.25em; b=
order: none;" class=3D"">- Fix a heap out of bounds condition with crafted =
upx packer files. This issue was discovered by Kevin Szkudlapski of Quarksl=
ab.</li><li style=3D"padding: 0.25em 0px; margin: 0px 0px 0.25em; border: n=
one;" class=3D"">- Fix a heap out of bounds condition with crafted upack pa=
cker files. This issue was discovered by Sebastian Andrzej Siewior. CVE-201=
4-9328.</li><li style=3D"padding: 0.25em 0px; margin: 0px 0px 0.25em; borde=
r: none;" class=3D"">- Compensate a crash due to incorrect compiler optimiz=
ation when handling crafted petite packer files. This issue was discovered =
by Sebastian Andrzej Siewior.</li></ul>
<br style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetica,=
 FreeSans, sans-serif; font-size: 13px; line-height: 18px;" class=3D"">
<span style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetic=
a, FreeSans, sans-serif; font-size: 13px; line-height: 18px; background-col=
or: rgb(255, 255, 255);" class=3D"">Thanks to the following ClamAV communit=
y members for code submissions</span><br style=3D"color: rgb(68, 68, 68); f=
ont-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px=
; line-height: 18px;" class=3D"">
<span style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetic=
a, FreeSans, sans-serif; font-size: 13px; line-height: 18px; background-col=
or: rgb(255, 255, 255);" class=3D"">and bug reporting included in ClamAV 0.=
98.6:</span><br style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma=
, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 18px;" cla=
ss=3D"">
<br style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetica,=
 FreeSans, sans-serif; font-size: 13px; line-height: 18px;" class=3D"">
<span style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetic=
a, FreeSans, sans-serif; font-size: 13px; line-height: 18px; background-col=
or: rgb(255, 255, 255);" class=3D"">Sebastian Andrzej Siewior</span><br sty=
le=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetica, FreeSa=
ns, sans-serif; font-size: 13px; line-height: 18px;" class=3D"">
<span style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetic=
a, FreeSans, sans-serif; font-size: 13px; line-height: 18px; background-col=
or: rgb(255, 255, 255);" class=3D"">Felix Groebert</span><br style=3D"color=
: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetica, FreeSans, sans-se=
rif; font-size: 13px; line-height: 18px;" class=3D"">
<span style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetic=
a, FreeSans, sans-serif; font-size: 13px; line-height: 18px; background-col=
or: rgb(255, 255, 255);" class=3D"">Kevin Szkudlapski</span><br style=3D"co=
lor: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetica, FreeSans, sans=
-serif; font-size: 13px; line-height: 18px;" class=3D"">
<span style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetic=
a, FreeSans, sans-serif; font-size: 13px; line-height: 18px; background-col=
or: rgb(255, 255, 255);" class=3D"">Mark Pizzolato</span><br style=3D"color=
: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetica, FreeSans, sans-se=
rif; font-size: 13px; line-height: 18px;" class=3D"">
<span style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetic=
a, FreeSans, sans-serif; font-size: 13px; line-height: 18px; background-col=
or: rgb(255, 255, 255);" class=3D"">Daniel J. Luke</span><br style=3D"color=
: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetica, FreeSans, sans-se=
rif; font-size: 13px; line-height: 18px;" class=3D"">
<br style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetica,=
 FreeSans, sans-serif; font-size: 13px; line-height: 18px;" class=3D"">
<span style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetic=
a, FreeSans, sans-serif; font-size: 13px; line-height: 18px; background-col=
or: rgb(255, 255, 255);" class=3D"">Please download the latest release of C=
lamAV from 0.98.6 from our&nbsp;</span><a href=3D"http://www.clamav.net/dow=
nload.html" class=3D"">download
 page</a><span style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma,=
 Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 18px; backg=
round-color: rgb(255, 255, 255);" class=3D"">.</span></div>
<div class=3D"Apple-Mail-URLShareWrapperClass" style=3D"position: relative =
!important;">
<span style=3D"color: rgb(68, 68, 68); font-family: Arial, Tahoma, Helvetic=
a, FreeSans, sans-serif; font-size: 13px; line-height: 18px; background-col=
or: rgb(255, 255, 255);" class=3D""><br class=3D"">
</span></div>
<span style=3D"font-family: 'Lucida Grande';" class=3D"">--</span><br class=
=3D"">
<span style=3D"font-family: 'Lucida Grande';" class=3D""><b class=3D"">Joel=
 Esler</b></span><br class=3D"">
<span style=3D"font-family: 'Lucida Grande';" class=3D"">Open Source Manage=
r</span><br class=3D"">
<span style=3D"font-family: 'Lucida Grande';" class=3D"">Threat Intelligenc=
e Team Lead</span><br class=3D"">
<span style=3D"font-family: 'Lucida Grande';" class=3D"">Talos</span>
</body>
</html>

--_000_5628150DD51B4B16B5FD0D33E8BE9180ciscocom_--

--===============7402732241712451135==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-announce
http://www.clamav.net/contact.html#ml
--===============7402732241712451135==--