ClamAV® blog: ClamAV 0.10 1.2 and 0.100.3 patches have been released!
"Joel Esler (jesler)" <[email protected]> Fri, 29 Mar 2019 14:11:01 +0000
| Newsgroups | gmane.comp.security.virus.clamav.announce,gmane.comp.security.virus.clamav.user |
|---|---|
| Message-ID | <[email protected]> |
--===============7845138793798821116==
Content-Language: en-US
Content-Type: multipart/signed;
boundary="Apple-Mail=_AF6316AC-9055-48A1-9850-99EF7F2E335A";
protocol="application/pkcs7-signature"; micalg=sha-256
--Apple-Mail=_AF6316AC-9055-48A1-9850-99EF7F2E335A
Content-Type: multipart/alternative;
boundary="Apple-Mail=_DC51A4D4-20B8-46EC-9C27-F6EEC074C855"
--Apple-Mail=_DC51A4D4-20B8-46EC-9C27-F6EEC074C855
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
>=20
> =
https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html =
<https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html>=
>=20
> ClamAV 0.101.2 and 0.100.3 patches have been released!
>=20
> ClamAV 0.101.2
>=20
> ClamAV 0.101.2 is a patch release to address a handful of security =
related bugs.
>=20
> This patch release is being released alongside the 0.100.3 patch so =
that users
> who are unable to upgrade to 0.101 due to libclamav API changes are =
protected.
>=20
> This release includes 3 extra security related bug fixes that do not =
apply to
> prior versions. In addition, it includes a number of minor bug fixes =
and
> improvements.
>=20
> - Fixes for the following vulnerabilities affecting 0.101.1 and prior:
> - CVE-2019-1787 =
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2019-1787>:
> An out-of-bounds heap read condition may occur when scanning PDF
> documents. The defect is a failure to correctly keep track of the =
number
> of bytes remaining in a buffer when indexing file data.
> - CVE-2019-1789 =
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2019-1789>:
> An out-of-bounds heap read condition may occur when scanning PE =
files
> (i.e. Windows EXE and DLL files) that have been packed using =
Aspack as a
> result of inadequate bound-checking.
> - CVE-2019-1788 =
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2019-1788>:
> An out-of-bounds heap write condition may occur when scanning OLE2 =
files
> such as Microsoft Office 97-2003 documents. The invalid write =
happens when
> an invalid pointer is mistakenly used to initialize a 32bit =
integer to
> zero. This is likely to crash the application.
>=20
> - Fixes for the following vulnerabilities affecting 0.101.1 and =
0.101.0 only:
> - CVE-2019-1786 =
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2019-1786>:
> An out-of-bounds heap read condition may occur when scanning =
malformed PDF
> documents as a result of improper bounds-checking.
> - CVE-2019-1785 =
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2019-1785>:
> A path-traversal write condition may occur as a result of improper =
input
> validation when scanning RAR archives. Issue reported by aCaB.
> - CVE-2019-1798 =
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2019-1798>:
> A use-after-free condition may occur as a result of improper error
> handling when scanning nested RAR archives. Issue reported by =
David L.
>=20
> - Fixes for the following assorted bugs:
> - Added checks to prevent shifts from causing undefined behavior in =
HTML
> normalizer, UPX unpacker, ARJ extractor, CPIO extractor, OLE2 =
parser,
> LZW decompressor used in the PDF parser, Xz decompressor, and =
UTF-16 to
> ASCII transcoder.
> - Added checks to prevent integer overflow in UPX unpacker.
> - Fix for minor memory leak in OLE2 parser.
> - Fix to speed up PDF parser when handling truncated (or malformed) =
PDFs.
> - Fix for memory leak in ARJ decoder failure condition.
> - Fix for potential memory and file descriptor leak in HTML =
normalization code.
>=20
> - Removed use of problematic feature that converted file descriptors =
to
> file paths. The feature was intended to improve performance when =
scanning
> file types, notably RAR archives, for which the API requires a file =
path.
> This feature caused issues in environments where the ClamAV engine =
is run
> in a low-permissions or sandboxed process. RAR archives are still =
supported
> with this change, but performance may suffer slightly if the file =
path is not
> provided in calls to `cl_scandesc_callback()`.
> - Added filename and tempfile names to scandesc calls in clamd.
> - Added general scan option `CL_SCAN_GENERAL_UNPRIVILEGED` to treat =
the scan
> engine as unprivileged, meaning that the scan engine will not have =
read
> access to the file. Provided file paths are for logging purposes =
only.
> - Added ability to create a temp file when scanning RAR archives =
when the
> process does not have read access to the file path provided (i.e.
> unprivileged is set, or an access check fails).
>=20
> Thank you to the Google OSS-Fuzz project for identifying and reporting =
many of
> the bugs patched in this release.
>=20
> Additional thanks to the following community members for submitting =
bug reports:
>=20
> - aCaB
> - David L.
>=20
> ClamAV 0.100.3
>=20
> ClamAV 0.100.3 is a patch release to address a few security related =
bugs.
>=20
> This patch release is being released alongside the 0.101.2 patch so =
that users
> who are unable to upgrade to 0.101 due to libclamav API changes are =
protected.
>=20
> The bug fixes in this release are limited to security-related bugs =
only.
> Users are encouraged to upgrade to 0.101.2 for additional =
improvements.
>=20
> - Fixes for the following vulnerabilities:
> - CVE-2019-1787 =
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2019-1787>:
> An out-of-bounds heap read condition may occur when scanning PDF
> documents. The defect is a failure to correctly keep track of the =
number
> of bytes remaining in a buffer when indexing file data.
> - CVE-2019-1789 =
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2019-1789>:
> An out-of-bounds heap read condition may occur when scanning PE =
files
> (i.e. Windows EXE and DLL files) that have been packed using =
Aspack as a
> result of inadequate bound-checking.
> - CVE-2019-1788 =
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2019-1788>:
> An out-of-bounds heap write condition may occur when scanning OLE2 =
files
> such as Microsoft Office 97-2003 documents. The invalid write =
happens when
> an invalid pointer is mistakenly used to initialize a 32bit =
integer to
> zero. This is likely to crash the application.
>=20
> Thank you to the Google OSS-Fuzz project for identifying and reporting =
the bugs
> patched in this release.
>=20
> Both of these can be found on ClamAV's downloads site =
<http://www.clamav.net/downloads>, with 0.101.2 as the main release and =
0.100.3 under "Previous Stable Releases" =20
--Apple-Mail=_DC51A4D4-20B8-46EC-9C27-F6EEC074C855
Content-Transfer-Encoding: 7bit
Content-Type: text/html;
charset=us-ascii
<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"><base></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><base class=""><div class="Apple-Mail-URLShareUserContentTopClass"><br class=""></div><div class="Apple-Mail-URLShareWrapperClass"><blockquote type="cite" style="border-left-style: none; color: inherit; padding: inherit; margin: inherit;" class=""><div class=""><div class="original-url"><br class=""><a href="https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html" class="">https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html</a><br class=""><br class=""></div><div id="article" role="article" style="text-rendering: optimizeLegibility; font-family: -apple-syste
m-font; font-size: 1.2em; line-height: 1.5em; margin: 0px; padding: 0px;" class="system exported">
<!-- This node will contain a number of div.page. -->
<div class="page" style="word-wrap: break-word; max-width: 100%;"><h1 class="title" style="font-size: 1.95552em; line-height: 1.2141em; margin-top: 0px; margin-bottom: 0.5em; max-width: 100%;">ClamAV 0.101.2 and 0.100.3 patches have been released!</h1>
<h3 style="font-size: 1.25em; max-width: 100%;" class="">
ClamAV 0.101.2</h3>
ClamAV 0.101.2 is a patch release to address a handful of security related bugs.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
This patch release is being released alongside the 0.100.3 patch so that users<br style="max-width: 100%;" class="">
who are unable to upgrade to 0.101 due to libclamav API changes are protected.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
This release includes 3 extra security related bug fixes that do not apply to<br style="max-width: 100%;" class="">
prior versions. In addition, it includes a number of minor bug fixes and<br style="max-width: 100%;" class="">
improvements.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
- Fixes for the following vulnerabilities affecting 0.101.1 and prior:<br style="max-width: 100%;" class="">
- <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1787" style="color: rgb(65, 110, 210); max-width: 100%;" class="">CVE-2019-1787</a>:<br style="max-width: 100%;" class="">
An out-of-bounds heap read condition may occur when scanning PDF<br style="max-width: 100%;" class="">
documents. The defect is a failure to correctly keep track of the number<br style="max-width: 100%;" class="">
of bytes remaining in a buffer when indexing file data.<br style="max-width: 100%;" class="">
- <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1789" style="color: rgb(65, 110, 210); max-width: 100%;" class="">CVE-2019-1789</a>:<br style="max-width: 100%;" class="">
An out-of-bounds heap read condition may occur when scanning PE files<br style="max-width: 100%;" class="">
(i.e. Windows EXE and DLL files) that have been packed using Aspack as a<br style="max-width: 100%;" class="">
result of inadequate bound-checking.<br style="max-width: 100%;" class="">
- <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1788" style="color: rgb(65, 110, 210); max-width: 100%;" class="">CVE-2019-1788</a>:<br style="max-width: 100%;" class="">
An out-of-bounds heap write condition may occur when scanning OLE2 files<br style="max-width: 100%;" class="">
such as Microsoft Office 97-2003 documents. The invalid write happens when<br style="max-width: 100%;" class="">
an invalid pointer is mistakenly used to initialize a 32bit integer to<br style="max-width: 100%;" class="">
zero. This is likely to crash the application.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
- Fixes for the following vulnerabilities affecting 0.101.1 and 0.101.0 only:<br style="max-width: 100%;" class="">
- <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1786" style="color: rgb(65, 110, 210); max-width: 100%;" class="">CVE-2019-1786</a>:<br style="max-width: 100%;" class="">
An out-of-bounds heap read condition may occur when scanning malformed PDF<br style="max-width: 100%;" class="">
documents as a result of improper bounds-checking.<br style="max-width: 100%;" class="">
- <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1785" style="color: rgb(65, 110, 210); max-width: 100%;" class="">CVE-2019-1785</a>:<br style="max-width: 100%;" class="">
A path-traversal write condition may occur as a result of improper input<br style="max-width: 100%;" class="">
validation when scanning RAR archives. Issue reported by aCaB.<br style="max-width: 100%;" class="">
- <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1798" style="color: rgb(65, 110, 210); max-width: 100%;" class="">CVE-2019-1798</a>:<br style="max-width: 100%;" class="">
A use-after-free condition may occur as a result of improper error<br style="max-width: 100%;" class="">
handling when scanning nested RAR archives. Issue reported by David L.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
- Fixes for the following assorted bugs:<br style="max-width: 100%;" class="">
- Added checks to prevent shifts from causing undefined behavior in HTML<br style="max-width: 100%;" class="">
normalizer, UPX unpacker, ARJ extractor, CPIO extractor, OLE2 parser,<br style="max-width: 100%;" class="">
LZW decompressor used in the PDF parser, Xz decompressor, and UTF-16 to<br style="max-width: 100%;" class="">
ASCII transcoder.<br style="max-width: 100%;" class="">
- Added checks to prevent integer overflow in UPX unpacker.<br style="max-width: 100%;" class="">
- Fix for minor memory leak in OLE2 parser.<br style="max-width: 100%;" class="">
- Fix to speed up PDF parser when handling truncated (or malformed) PDFs.<br style="max-width: 100%;" class="">
- Fix for memory leak in ARJ decoder failure condition.<br style="max-width: 100%;" class="">
- Fix for potential memory and file descriptor leak in HTML normalization code.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
- Removed use of problematic feature that converted file descriptors to<br style="max-width: 100%;" class="">
file paths. The feature was intended to improve performance when scanning<br style="max-width: 100%;" class="">
file types, notably RAR archives, for which the API requires a file path.<br style="max-width: 100%;" class="">
This feature caused issues in environments where the ClamAV engine is run<br style="max-width: 100%;" class="">
in a low-permissions or sandboxed process. RAR archives are still supported<br style="max-width: 100%;" class="">
with this change, but performance may suffer slightly if the file path is not<br style="max-width: 100%;" class="">
provided in calls to `cl_scandesc_callback()`.<br style="max-width: 100%;" class="">
- Added filename and tempfile names to scandesc calls in clamd.<br style="max-width: 100%;" class="">
- Added general scan option `CL_SCAN_GENERAL_UNPRIVILEGED` to treat the scan<br style="max-width: 100%;" class="">
engine as unprivileged, meaning that the scan engine will not have read<br style="max-width: 100%;" class="">
access to the file. Provided file paths are for logging purposes only.<br style="max-width: 100%;" class="">
- Added ability to create a temp file when scanning RAR archives when the<br style="max-width: 100%;" class="">
process does not have read access to the file path provided (i.e.<br style="max-width: 100%;" class="">
unprivileged is set, or an access check fails).<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
Thank you to the Google OSS-Fuzz project for identifying and reporting many of<br style="max-width: 100%;" class="">
the bugs patched in this release.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
Additional thanks to the following community members for submitting bug reports:<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
- aCaB<br style="max-width: 100%;" class="">
- David L.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
<h3 style="font-size: 1.25em; max-width: 100%;" class="">
ClamAV 0.100.3</h3>
ClamAV 0.100.3 is a patch release to address a few security related bugs.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
This patch release is being released alongside the 0.101.2 patch so that users<br style="max-width: 100%;" class="">
who are unable to upgrade to 0.101 due to libclamav API changes are protected.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
The bug fixes in this release are limited to security-related bugs only.<br style="max-width: 100%;" class="">
Users are encouraged to upgrade to 0.101.2 for additional improvements.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
- Fixes for the following vulnerabilities:<br style="max-width: 100%;" class="">
- <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1787" style="color: rgb(65, 110, 210); max-width: 100%;" class="">CVE-2019-1787</a>:<br style="max-width: 100%;" class="">
An out-of-bounds heap read condition may occur when scanning PDF<br style="max-width: 100%;" class="">
documents. The defect is a failure to correctly keep track of the number<br style="max-width: 100%;" class="">
of bytes remaining in a buffer when indexing file data.<br style="max-width: 100%;" class="">
- <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1789" style="color: rgb(65, 110, 210); max-width: 100%;" class="">CVE-2019-1789</a>:<br style="max-width: 100%;" class="">
An out-of-bounds heap read condition may occur when scanning PE files<br style="max-width: 100%;" class="">
(i.e. Windows EXE and DLL files) that have been packed using Aspack as a<br style="max-width: 100%;" class="">
result of inadequate bound-checking.<br style="max-width: 100%;" class="">
- <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1788" style="color: rgb(65, 110, 210); max-width: 100%;" class="">CVE-2019-1788</a>:<br style="max-width: 100%;" class="">
An out-of-bounds heap write condition may occur when scanning OLE2 files<br style="max-width: 100%;" class="">
such as Microsoft Office 97-2003 documents. The invalid write happens when<br style="max-width: 100%;" class="">
an invalid pointer is mistakenly used to initialize a 32bit integer to<br style="max-width: 100%;" class="">
zero. This is likely to crash the application.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
Thank you to the Google OSS-Fuzz project for identifying and reporting the bugs<br style="max-width: 100%;" class="">
patched in this release.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
Both of these can be found on <a href="http://www.clamav.net/downloads" target="_blank" style="color: rgb(65, 110, 210); max-width: 100%;" class="">ClamAV's downloads site</a>, with 0.101.2 as the main release and 0.100.3 under "Previous Stable Releases" </div></div></div></blockquote></div></body></html>
--Apple-Mail=_DC51A4D4-20B8-46EC-9C27-F6EEC074C855--
--Apple-Mail=_AF6316AC-9055-48A1-9850-99EF7F2E335A
Content-Disposition: attachment; filename="smime.p7s"
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCCRYw
ggRuMIIDVqADAgECAgphEIBtAAAAAAAOMA0GCSqGSIb3DQEBBQUAMDUxFjAUBgNVBAoTDUNpc2Nv
IFN5c3RlbXMxGzAZBgNVBAMTEkNpc2NvIFJvb3QgQ0EgMjA0ODAeFw0xNDA0MDQyMDI0MThaFw0y
OTA1MTQyMDI1NDJaMCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBD
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrffhZMUxX7I1bNxrllCgSV5d5MRWeM
DMcG4KsfbV83Knvn7aOtgH8RyPOC6+6fUNnJvz2hL7s8EQc177il2VFO2bD3U6CUgCwskmWtEG+h
hmtfQAqZpVBEGpBNz+ZM+0YGjUjjB9fhrWPX1egnABW/bgeyQ7tlBi999lldmxLFLH2960SwUuHC
/B7tnVn3HZOnqzGmQkI5J9OBYsZULCaM2z0U0KiOFeoopBv+vaw8nk3W1UyvjMv/S58FbA9xgTIk
Ye0Zq77qcbRojLvI9OSLP3dTon4VnnML41d0XoPS6JPGzDSRDAKXndcHk3VUtF+DLAIXqLCQZXfZ
UuTuIncCAwEAAaOCAYcwggGDMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBSflTa0jl3VS8MK
wacpk0NRBv2JUTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwEgYDVR0T
AQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBQn88gVHm6aAgkWrSugiWBf2nsvqjBDBgNVHR8EPDA6
MDigNqA0hjJodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY3JsL2NyY2EyMDQ4LmNy
bDBQBggrBgEFBQcBAQREMEIwQAYIKwYBBQUHMAKGNGh0dHA6Ly93d3cuY2lzY28uY29tL3NlY3Vy
aXR5L3BraS9jZXJ0cy9jcmNhMjA0OC5jZXIwXAYDVR0gBFUwUzBRBgorBgEEAQkVARUAMEMwQQYI
KwYBBQUHAgEWNWh0dHA6Ly93d3cuY2lzY28uY29tL3NlY3VyaXR5L3BraS9wb2xpY2llcy9pbmRl
eC5odG1sMA0GCSqGSIb3DQEBBQUAA4IBAQA+Tr4jGkYCjV5r24oCNAtjm+UBPCZdjHCyJOtgXuyK
hGQuG1kVo2ca4Rbj/eBNfUSaIyjS7bb3oh/nRM3tbeqGIVQorGxhvPvIZVAEQIoqi/yfbhie9cU+
paKpHACucaYXu0kyS0pYE5NMNun3Lw3ogOs4XVR5yoVSpKTiVnfTDQchTpwkMgzivqXDcS1OiDfU
8C9WaEZHRWtdUIgl9zoppPGIQa1TflcxhirW4GeH2FOrgaN1d77bIcg6R7RpJ9Xu3/f01nGNunrR
cy993c2meJQoZcOJd15C6ugHwhAxeXY6QXYgkY8KQVCCGwkpshEgbwPrC+I/Itb6P7hGq7awMIIE
oDCCA4igAwIBAgIKAYYRaDD7OEqcKzANBgkqhkiG9w0BAQsFADAsMQ4wDAYDVQQKEwVDaXNjbzEa
MBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwHhcNMTgxMTIxMDAwMDAwWhcNMjAxMTIwMDAxMDAw
WjCBlTEcMBoGA1UEAxMTSm9lbCBFc2xlciAoamVzbGVyKTEUMBIGA1UECxMLQ2lzY28gVXNlcnMx
EjAQBgNVBAsTCUVtcGxveWVlczETMBEGCgmSJomT8ixkARkTA2NvbTEVMBMGCgmSJomT8ixkARkT
BWNpc2NvMR8wHQYJKoZIhvcNAQkBDBBqZXNsZXJAY2lzY28uY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAjY9Yo3zw0WCxtdtE4oQyXJqoSbeuJULMuLBbZbmalv2w7vNluXG9Qhsh
7zttHIU+z1j0XpG2BnYZMl4AgO23yOyghTAo5u8hBH9Riox9bw0hRkB/pAE89QeZ+1kNOGLuZfN8
B5sTFFmRTztX+TZtIkFONq7q9Wj+h0P5ikvyCgr3tjsbnJRNVSAynEfWGFxIxAGyEYIGMHeSz1ej
SenHps4yI8qTKsX9o3KLRz1nLucUDpm/TCLbQEI87Uv9Phd2v0FptbWUKik9agDjTW4/Q7PjBTPc
OpXem/8w8H9S7TKa248Opt2Nv24oqJZMVAUu6It9oQZWubO0bsYYp8yiDQIDAQABo4IBWDCCAVQw
DgYDVR0PAQH/BAQDAgTwMAwGA1UdEwEB/wQCMAAwegYIKwYBBQUHAQEEbjBsMDwGCCsGAQUFBzAC
hjBodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY2VjYS5jZXIwLAYIKwYB
BQUHMAGGIGh0dHA6Ly9wa2ljdnMuY2lzY28uY29tL3BraS9vY3NwMB8GA1UdIwQYMBaAFJ+VNrSO
XdVLwwrBpymTQ1EG/YlRMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jaXNjb2NlcnRzLmNpc2Nv
LmNvbS9maWxlL2NlY2EuY3JsMBsGA1UdEQQUMBKBEGplc2xlckBjaXNjby5jb20wHQYDVR0OBBYE
FDTmAUtoBuQRY6GKIvCllZGSohm5MB8GA1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0G
CSqGSIb3DQEBCwUAA4IBAQA3p6fJ3fQlcqszfVLrike+NXunUtbNejhKDOPMhVc3bsozBPggAZbo
m62BvhsvgVLj/+IS2qIEflQxhS2ToplJi8nXRpZ9Qtsu4mhCByy0Z0Xtaw0v2f78B1pskPxDdXZm
T47sc84h0iW+wuZ4yADZb2azb+2j7GNd/vdPLnVyDE209ksjrYyYNO7LifZqmSqIipBYOyG3JZ25
BMTQP7ttExfRKbrkRFSHapvISiFoBeakwGRSqiF7aTAnilXm0Kp1Aj6cQH0Ju3xgXSUpxQewDvZm
Q+AYG6sV6V0yy4fwa1UQAOVKH0dadXp1z9K5WcrqC8Wqz0ojBLT/Avhfy3sXMYICajCCAmYCAQEw
OjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGEWgw+zhK
nCswDQYJYIZIAWUDBAIBBQCgggEBMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcN
AQkFMQ8XDTE5MDMyOTE0MTA1OFowLwYJKoZIhvcNAQkEMSIEIE7Ia08IkS4fV0TA0j7qQUYCGcgE
Fsdz4ooEVyzXTJVxMEkGCSsGAQQBgjcQBDE8MDowLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMT
EUNpc2NvIEVtcGxveWVlIENBAgoBhhFoMPs4SpwrMEsGCyqGSIb3DQEJEAILMTygOjAsMQ4wDAYD
VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGEWgw+zhKnCswDQYJKoZI
hvcNAQEBBQAEggEANs2VmWHnj2A9AOVFf7TNT9219twt455rh0iOeAErLhVra48yJBAqSVnqt/9T
1N4dkIljJlBKy1/MyAzbHrc8WZz6VO1XhE+UHl+YroGgyi5Dl6wwei43n1W1ZsNeVdwINPdjzUGH
xQW3JGr5VAh1+OYaXIbc3bFITk2yxrDiYugKSHj+tdJpeuIU8L7EJJZkqvoCqogqdjz5qAUP9Chh
naqDUxpzvMc+MutlXiMW2bORajV3gDEoeFsQuXkkrWV4oICwffXngYa+DG/UXDGdobJ5JMiy/AjE
ywe7cBXn7iJW/1KZic9vpjye7FVsAq5KZZMt0h4w9uoN3MiLwWScKAAAAAAAAA==
--Apple-Mail=_AF6316AC-9055-48A1-9850-99EF7F2E335A--
--===============7845138793798821116==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
clamav-announce mailing list
[email protected]
https://lists.clamav.net/mailman/listinfo/clamav-announce
http://www.clamav.net/contact.html#ml
--===============7845138793798821116==--