ClamAV® blog: ClamAV 0.101 .3 security patch release and 0.102.0-beta have been publ ished

--===============0095599540061950913==
Content-Language: en-US
Content-Type: multipart/signed;
	boundary="Apple-Mail=_F94CAE1F-4F3C-42C2-B2BC-6AF3BA029341";
	protocol="application/pkcs7-signature";
	micalg=sha-256

--Apple-Mail=_F94CAE1F-4F3C-42C2-B2BC-6AF3BA029341
Content-Type: multipart/alternative;
	boundary="Apple-Mail=_EB7D11DC-3202-431F-B10F-26EC8BB3B624"


--Apple-Mail=_EB7D11DC-3202-431F-B10F-26EC8BB3B624
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8


>=20
> =
https://blog.clamav.net/2019/08/clamav-01013-security-patch-release-and.ht=
ml =
<https://blog.clamav.net/2019/08/clamav-01013-security-patch-release-and.h=
tml>
>=20
> ClamAV 0.101.3 security patch release and 0.102.0-beta have been =
published
>=20
> We are pleased to introduce the ClamAV 0.101.3 security patch release =
and a beta for the upcoming 0.102 feature release.
>=20
> Both of these can be found on ClamAV's downloads site =
<http://www.clamav.net/downloads>, with 0.101.3 in the "latest stable =
release" section and 0.102.0-beta in the beta section.
>=20
> 0.101.3
>=20
> ClamAV 0.101.3 is a patch release to address a vulnerability to =
non-recursive zip bombs.
>=20
> A Denial-of-Service (DoS) vulnerability may occur when scanning a zip =
bomb as a result of excessively long scan times. The issue is resolved =
by detecting the overlapping local file headers which characterize the =
non-recursive zip bomb described by David Fifield.
>=20
> Thank you to Hanno B=C3=B6ck for reporting the issue as it relates to =
ClamAV, here <https://bugzilla.clamav.net/show_bug.cgi?id=3D12356>.
>=20
> Also included in 0.101.3:
> Update of bundled the libmspack library from 0.8alpha to 0.10alpha, to =
address a buffer overflow vulnerability in libmspack < 0.9.1=CE=B1.
>=20
>=20
> 0.102-beta
>=20
> ClamAV 0.102.0 includes an assortment improvements and a couple of =
significant changes.
> Major changes
>=20
> The On-Access Scanning feature has been migrated out of clamd and into =
a brand new utility named clamonacc. This utility is similar to =
clamdscan and clamav-milter in that it acts as a client to clamd. This =
separation from clamd means that clamd no longer needs to run with root =
privileges while scanning potentially malicious files. Instead, clamd =
may drop privileges to run under an account that does not have =
super-user. In addition to improving the security posture of running =
clamd with On-Access enabled, this update fixed a few outstanding =
defects:
> On-Access scanning for created and moved files (Extra-Scanning) is =
fixed.
> VirusEvent for On-Access scans is fixed.
> With clamonacc, it is now possible to copy, move, or remove a file if =
the scan triggered an alert, just like with clamdscan. For details on =
how to use the new clamonacc On-Access scanner, please refer to the user =
manual on ClamAV.net <http://www.clamav.net/documents/>, and keep an eye =
out for a new blog post on the topic
> The freshclam database update utility has undergone a significant =
update. This includes:
> Added support for HTTPS.
> Support for database mirrors hosted on ports other than 80.
> Removal of the mirror management feature (mirrors.dat).
> An all new libfreshclam library API.
>=20
> Notable changes
>=20
> Added support for extracting ESTsoft .egg archives. This feature is =
new code developed from scratch using ESTsoft's Egg-archive =
specification and without referencing the UnEgg library provided by =
ESTsoft. This was necessary because the UnEgg library's license includes =
restrictions limiting the commercial use of the UnEgg library.
> The documentation has moved!
> Users should navigate to ClamAV.net <http://www.clamav.net/documents/> =
to view the documentation online.
> The documentation will continue to be provided in HTML format with =
each release for offline viewing in the docs/html directory.
> The new home for the documentation markdown is in our ClamAV FAQ =
Github repository. <https://github.com/Cisco-Talos/clamav-faq>
> Other improvements
>=20
> Improved Windows executable Authenticode handling, enabling both =
whitelisting and blacklisting of files based on code-signing =
certificates. Additional improvements to Windows executable (PE file) =
parsing. Work courtesy of Andrew Williams.
> Added support for creating bytecode signatures for Mach-O and ELF =
executable unpacking. Work courtesy of Jonas Zaddach.
> Re-formatted the entire ClamAV code-base using clang-format in =
conjunction with our new ClamAV code style specification. See the =
clamav.net blog post =
<https://blog.clamav.net/2019/02/clamav-adopts-clang-format.html> for =
details.
> Integrated ClamAV with Google's OSS-Fuzz =
<https://github.com/google/oss-fuzz> automated fuzzing service with the =
help of Alex Gaynor. This work has already proven beneficial, enabling =
us to identify and fix subtle bugs in both legacy code and newly =
developed code.
> The clamsubmit tool is now available on Windows.
> The clamscan metadata feature (--gen-json) is now available on =
Windows.
> Significantly reduced number of warnings generated when compiling =
ClamAV with "-Wall" and "-Wextra" compiler flags and made many subtle =
improvements to the consistency of variable types throughout the code.
> Updated the majority of third-party dependencies for ClamAV on =
Windows. The source code for each has been removed from the clamav-devel =
repository. This means that these dependencies have to be compiled =
independently of ClamAV. The added build process complexity is offset by =
significantly reducing the difficulty of releasing ClamAV with newer =
versions of those dependencies.
> During the 0.102 development period, we've also improved our =
Continuous Integration (CI) processes. Most recently, we added a CI =
pipeline definition to the ClamAV Git repository. This chains together =
our build and quality assurance test suites and enables automatic =
testing of all proposed changes to ClamAV, with customizable parameters =
to suit the testing needs of any given code change.
>=20
> Bug fixes
>=20
> Fix to prevent a possible crash when loading LDB type signature =
databases and PCRE is not available. Patch courtesy of Tomasz Kojm.
> Fixes to the PDF parser that will improve PDF malware detection =
efficacy. Patch courtesy of Clement Lecigne.
> Fix for regular expression phishing signatures (PDB R-type =
signatures).
> Various other bug fixes.
>=20
> New Requirements
>=20
> Libcurl has become a hard-dependency. Libcurl enables HTTPS support =
for freshclam and clamsubmit as well as communication between clamonacc =
and clamd.
> Libcurl version >=3D 7.45 is required when building ClamAV from source =
with the new On-Access Scanning application (clamonacc). Users on Linux =
operating systems that package older versions of libcurl (e.g. all =
versions of CentOS and Debian versions <=3D 8) have a number of options:
> Wait for your package maintainer to provide a newer version of =
libcurl.
> Install a newer version of libcurl from source.
> Disable installation of clamonacc and On-Access Scanning capabilities =
with the ./configure flag --disable-clamonacc.
>=20
> Non-Linux users will need to take no actions as they are unaffected by =
this new requirement.
>=20
> Acknowledgements
>=20
> The ClamAV team thanks the following individuals for their code =
submissions:
> Alex Gaynor
> Andrew Williams
> Carlo Landmeter
> Chips
> Clement Lecigne
> Paul Arthur
> Jonas Zaddach
> =C3=98rjan Malde
> Rick Wang
> Rosen Penev
> Thomas Jarosch
> Tomasz Kojm
>=20
> Finally, we'd like to thank Joe McGrath for building our quality =
assurance test suite and for working diligently to ensure knowledge =
transfer up until his last day on the team. Working with you was a =
pleasure, Joe, and we wish you the best of luck in your next adventure! =20=


--Apple-Mail=_EB7D11DC-3202-431F-B10F-26EC8BB3B624
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"><base></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><base=
 class=3D""><div class=3D"Apple-Mail-URLShareUserContentTopClass"><br =
class=3D""></div><div =
class=3D"Apple-Mail-URLShareWrapperClass"><blockquote type=3D"cite" =
style=3D"border-left-style: none; color: inherit; padding: inherit; =
margin: inherit;" class=3D""><div class=3D""><div =
class=3D"original-url"><br class=3D""><a =
href=3D"https://blog.clamav.net/2019/08/clamav-01013-security-patch-releas=
e-and.html" =
class=3D"">https://blog.clamav.net/2019/08/clamav-01013-security-patch-rel=
ease-and.html</a><br class=3D""><br class=3D""></div><div id=3D"article" =
role=3D"article" style=3D"text-rendering: optimizeLegibility; =
font-family: -apple-system-font; font-size: 1.2em; line-height: 1.5em; =
margin: 0px; padding: 0px;" class=3D"system exported">
        <!-- This node will contain a number of div.page. -->
    <div class=3D"page" style=3D"word-wrap: break-word; max-width: =
100%;"><h1 class=3D"title" style=3D"font-size: 1.95552em; line-height: =
1.2141em; margin-top: 0px; margin-bottom: 0.5em; max-width: =
100%;">ClamAV 0.101.3 security patch release and 0.102.0-beta have been =
published</h1>
We are pleased to introduce the ClamAV 0.101.3 security patch release =
and a beta for the upcoming 0.102 feature release.<br style=3D"max-width: =
100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
Both of these can be found on <a href=3D"http://www.clamav.net/downloads" =
target=3D"_blank" style=3D"color: rgb(65, 110, 210); max-width: 100%;" =
class=3D"">ClamAV's downloads site</a>, with 0.101.3 in the "latest =
stable release" section and 0.102.0-beta in the beta section.<br =
style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
<h4 style=3D"font-size: 1em; margin: 1em 0px; max-width: 100%;" =
class=3D"">
0.101.3</h4>
ClamAV 0.101.3 is a patch release to address a vulnerability to =
non-recursive zip bombs.<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
A Denial-of-Service (DoS) vulnerability may occur when scanning a zip =
bomb as a result of excessively long scan times. The issue is resolved =
by detecting the overlapping local file headers which characterize the =
non-recursive zip bomb described by David Fifield.<br style=3D"max-width: =
100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
Thank you to Hanno B=C3=B6ck for reporting the issue as it relates to =
ClamAV, <a href=3D"https://bugzilla.clamav.net/show_bug.cgi?id=3D12356" =
style=3D"color: rgb(65, 110, 210); max-width: 100%;" =
class=3D"">here</a>.<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
Also included in 0.101.3:<br style=3D"max-width: 100%;" class=3D"">
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Update of bundled the =
libmspack library from 0.8alpha to 0.10alpha, to address a buffer =
overflow vulnerability in libmspack &lt; 0.9.1=CE=B1.</li>
</ul>
<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
<h4 style=3D"font-size: 1em; margin: 1em 0px; max-width: 100%;" =
class=3D"">
0.102-beta</h4>
ClamAV 0.102.0 includes an assortment improvements and a couple of =
significant changes.<br style=3D"max-width: 100%;" class=3D"">
<h2 style=3D"font-size: 1.43em; max-width: 100%;" class=3D"">
Major changes</h2>
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">The On-Access Scanning feature =
has been migrated out of <span style=3D"max-width: 100%;" =
class=3D"">clamd</span> and into a brand new utility named <span =
style=3D"max-width: 100%;" class=3D"">clamonacc</span>. This utility is =
similar to <span style=3D"max-width: 100%;" class=3D"">clamdscan</span> =
and <span style=3D"max-width: 100%;" class=3D"">clamav-milter</span> in =
that it acts as a client to <span style=3D"max-width: 100%;" =
class=3D"">clamd</span>. This separation from <span style=3D"max-width: =
100%;" class=3D"">clamd</span> means that <span style=3D"max-width: =
100%;" class=3D"">clamd</span> no longer needs to run with root =
privileges while scanning potentially malicious files. Instead, <span =
style=3D"max-width: 100%;" class=3D"">clamd</span> may drop privileges =
to run under an account that does not have super-user. In addition to =
improving the security posture of running <span style=3D"max-width: =
100%;" class=3D"">clamd</span> with On-Access enabled, this update fixed =
a few outstanding defects:</li>
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">On-Access scanning for created =
and moved files (Extra-Scanning) is fixed.</li>
<li style=3D"max-width: 100%;" class=3D"">VirusEvent for On-Access scans =
is fixed.</li>
<li style=3D"max-width: 100%;" class=3D"">With <span style=3D"max-width: =
100%;" class=3D"">clamonacc</span>, it is now possible to copy, move, or =
remove a file if the scan triggered an alert, just like with clamdscan. =
For details on how to use the new <span style=3D"max-width: 100%;" =
class=3D"">clamonacc</span> On-Access scanner, please refer to the user =
manual on <a href=3D"http://www.clamav.net/documents/" style=3D"color: =
rgb(65, 110, 210); max-width: 100%;" class=3D"">ClamAV.net</a>, and keep =
an eye out for a new blog post on the topic</li>
</ul>
<li style=3D"max-width: 100%;" class=3D"">The <span style=3D"max-width: =
100%;" class=3D"">freshclam</span> database update utility has undergone =
a significant update. This includes:</li>
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Added support for HTTPS.</li>
<li style=3D"max-width: 100%;" class=3D"">Support for database mirrors =
hosted on ports other than 80.</li>
<li style=3D"max-width: 100%;" class=3D"">Removal of the mirror =
management feature (mirrors.dat).</li>
<li style=3D"max-width: 100%;" class=3D"">An all new libfreshclam =
library API.</li>
</ul>
</ul>
<br style=3D"max-width: 100%;" class=3D"">
<h2 style=3D"font-size: 1.43em; max-width: 100%;" class=3D"">
Notable changes</h2>
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Added support for extracting =
ESTsoft .egg archives. This feature is new code developed from scratch =
using ESTsoft's Egg-archive specification and without referencing the =
UnEgg library provided by ESTsoft. This was necessary because the UnEgg =
library's license includes restrictions limiting the commercial use of =
the UnEgg library.</li>
<li style=3D"max-width: 100%;" class=3D"">The documentation has =
moved!</li>
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Users should navigate to <a =
href=3D"http://www.clamav.net/documents/" style=3D"color: rgb(65, 110, =
210); max-width: 100%;" class=3D"">ClamAV.net</a> to view the =
documentation online.</li>
<li style=3D"max-width: 100%;" class=3D"">The documentation will =
continue to be provided in HTML format with each release for offline =
viewing in the <span style=3D"max-width: 100%;" =
class=3D"">docs/html</span> directory.</li>
<li style=3D"max-width: 100%;" class=3D"">The new home for the =
documentation markdown is in our <a =
href=3D"https://github.com/Cisco-Talos/clamav-faq" style=3D"color: =
rgb(65, 110, 210); max-width: 100%;" class=3D"">ClamAV FAQ Github =
repository.</a></li>
</ul>
</ul>
<br style=3D"max-width: 100%;" class=3D"">
<h2 style=3D"font-size: 1.43em; max-width: 100%;" class=3D"">
Other improvements</h2>
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Improved Windows executable =
Authenticode handling, enabling both whitelisting and blacklisting of =
files based on code-signing certificates. Additional improvements to =
Windows executable (PE file) parsing. Work courtesy of Andrew =
Williams.</li>
<li style=3D"max-width: 100%;" class=3D"">Added support for creating =
bytecode signatures for Mach-O and ELF executable unpacking. Work =
courtesy of Jonas Zaddach.</li>
<li style=3D"max-width: 100%;" class=3D"">Re-formatted the entire ClamAV =
code-base using <span style=3D"max-width: 100%;" =
class=3D"">clang-format</span> in conjunction with our new ClamAV code =
style specification. See the <a =
href=3D"https://blog.clamav.net/2019/02/clamav-adopts-clang-format.html" =
style=3D"color: rgb(65, 110, 210); max-width: 100%;" class=3D"">clamav.net=
 blog post</a> for details.</li>
<li style=3D"max-width: 100%;" class=3D"">Integrated ClamAV with =
Google's <a href=3D"https://github.com/google/oss-fuzz" style=3D"color: =
rgb(65, 110, 210); max-width: 100%;" class=3D"">OSS-Fuzz</a> automated =
fuzzing service with the help of Alex Gaynor. This work has already =
proven beneficial, enabling us to identify and fix subtle bugs in both =
legacy code and newly developed code.</li>
<li style=3D"max-width: 100%;" class=3D"">The <span style=3D"max-width: =
100%;" class=3D"">clamsubmit</span> tool is now available on =
Windows.</li>
<li style=3D"max-width: 100%;" class=3D"">The <span style=3D"max-width: =
100%;" class=3D"">clamscan</span> metadata feature (<span =
style=3D"max-width: 100%;" class=3D"">--gen-json</span>) is now =
available on Windows.</li>
<li style=3D"max-width: 100%;" class=3D"">Significantly reduced number =
of warnings generated when compiling ClamAV with "<span =
style=3D"max-width: 100%;" class=3D"">-Wall</span>" and "<span =
style=3D"max-width: 100%;" class=3D"">-Wextra</span>" compiler flags and =
made many subtle improvements to the consistency of variable types =
throughout the code.</li>
<li style=3D"max-width: 100%;" class=3D"">Updated the majority of =
third-party dependencies for ClamAV on Windows. The source code for each =
has been removed from the clamav-devel repository. This means that these =
dependencies have to be compiled independently of ClamAV. The added =
build process complexity is offset by significantly reducing the =
difficulty of releasing ClamAV with newer versions of those =
dependencies.</li>
<li style=3D"max-width: 100%;" class=3D"">During the 0.102 development =
period, we've also improved our Continuous Integration (CI) processes. =
Most recently, we added a CI pipeline definition to the ClamAV Git =
repository. This chains together our build and quality assurance test =
suites and enables automatic testing of all proposed changes to ClamAV, =
with customizable parameters to suit the testing needs of any given code =
change.</li>
</ul>
<br style=3D"max-width: 100%;" class=3D"">
<h2 style=3D"font-size: 1.43em; max-width: 100%;" class=3D"">
Bug fixes</h2>
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Fix to prevent a possible =
crash when loading LDB type signature databases and PCRE is not =
available. Patch courtesy of Tomasz Kojm.</li>
<li style=3D"max-width: 100%;" class=3D"">Fixes to the PDF parser that =
will improve PDF malware detection efficacy. Patch courtesy of Clement =
Lecigne.</li>
<li style=3D"max-width: 100%;" class=3D"">Fix for regular expression =
phishing signatures (PDB R-type signatures).</li>
<li style=3D"max-width: 100%;" class=3D"">Various other bug fixes.</li>
</ul>
<br style=3D"max-width: 100%;" class=3D"">
<h2 style=3D"font-size: 1.43em; max-width: 100%;" class=3D"">
New Requirements</h2>
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Libcurl has become a =
hard-dependency. Libcurl enables HTTPS support for <span =
style=3D"max-width: 100%;" class=3D"">freshclam</span> and <span =
style=3D"max-width: 100%;" class=3D"">clamsubmit</span> as well as =
communication between <span style=3D"max-width: 100%;" =
class=3D"">clamonacc</span> and <span style=3D"max-width: 100%;" =
class=3D"">clamd</span>.</li>
</ul>
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Libcurl version &gt;=3D 7.45 =
is required when building ClamAV from source with the new On-Access =
Scanning application (<span style=3D"max-width: 100%;" =
class=3D"">clamonacc</span>). Users on Linux operating systems that =
package older versions of libcurl (e.g. all versions of CentOS and =
Debian versions &lt;=3D 8) have a number of options:</li>
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Wait for your package =
maintainer to provide a newer version of libcurl.</li>
<li style=3D"max-width: 100%;" class=3D"">Install a newer version of =
libcurl from source.</li>
<li style=3D"max-width: 100%;" class=3D"">Disable installation of <span =
style=3D"max-width: 100%;" class=3D"">clamonacc</span> and On-Access =
Scanning capabilities with the <span style=3D"max-width: 100%;" =
class=3D"">./configure</span> flag <span style=3D"max-width: 100%;" =
class=3D"">--disable-clamonacc</span>.<br style=3D"max-width: 100%;" =
class=3D""><br style=3D"max-width: 100%;" class=3D"">Non-Linux users =
will need to take no actions as they are unaffected by this new =
requirement.</li>
</ul>
</ul>
<br style=3D"max-width: 100%;" class=3D"">
<h2 style=3D"font-size: 1.43em; max-width: 100%;" class=3D"">
Acknowledgements</h2>
The ClamAV team thanks the following individuals for their code =
submissions:<br style=3D"max-width: 100%;" class=3D"">
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Alex Gaynor</li>
<li style=3D"max-width: 100%;" class=3D"">Andrew Williams</li>
<li style=3D"max-width: 100%;" class=3D"">Carlo Landmeter</li>
<li style=3D"max-width: 100%;" class=3D"">Chips</li>
<li style=3D"max-width: 100%;" class=3D"">Clement Lecigne</li>
<li style=3D"max-width: 100%;" class=3D"">Paul Arthur</li>
<li style=3D"max-width: 100%;" class=3D"">Jonas Zaddach</li>
<li style=3D"max-width: 100%;" class=3D"">=C3=98rjan Malde</li>
<li style=3D"max-width: 100%;" class=3D"">Rick Wang</li>
<li style=3D"max-width: 100%;" class=3D"">Rosen Penev</li>
<li style=3D"max-width: 100%;" class=3D"">Thomas Jarosch</li>
<li style=3D"max-width: 100%;" class=3D"">Tomasz Kojm</li>
</ul>
<br style=3D"max-width: 100%;" class=3D"">

Finally, we'd like to thank Joe McGrath for building our quality =
assurance test suite and for working diligently to ensure knowledge =
transfer up until his last day on the team. Working with you was a =
pleasure, Joe, and we wish you the best of luck in your next adventure! =
&nbsp;</div></div></div></blockquote></div></body></html>=

--Apple-Mail=_EB7D11DC-3202-431F-B10F-26EC8BB3B624--

--Apple-Mail=_F94CAE1F-4F3C-42C2-B2BC-6AF3BA029341
Content-Disposition: attachment; filename="smime.p7s"
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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==

--Apple-Mail=_F94CAE1F-4F3C-42C2-B2BC-6AF3BA029341--

--===============0095599540061950913==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________

clamav-announce mailing list
[email protected]
https://lists.clamav.net/mailman/listinfo/clamav-announce

http://www.clamav.net/contact.html#ml

--===============0095599540061950913==--