ClamAV® blog: ClamAV 0.10 3.1 patch release

"Joel Esler (jesler)" <[email protected]> Tue, 9 Feb 2021 16:06:28 +0000
Newsgroups gmane.comp.security.virus.clamav.announce,gmane.comp.security.virus.clamav.win32
Message-ID <[email protected]>
--===============0159112973890870900==
Content-Language: en-US
Content-Type: multipart/signed;
	boundary="Apple-Mail=_B8740C8B-368F-4039-B0F5-9B10362541B2";
	protocol="application/pkcs7-signature";
	micalg=sha-256

--Apple-Mail=_B8740C8B-368F-4039-B0F5-9B10362541B2
Content-Type: multipart/alternative;
	boundary="Apple-Mail=_F7B9E03C-197C-44BC-93DB-2B79EDD84A06"


--Apple-Mail=_F7B9E03C-197C-44BC-93DB-2B79EDD84A06
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii


>=20
> https://blog.clamav.net/2021/02/clamav-01031-patch-release.html =
<https://blog.clamav.net/2021/02/clamav-01031-patch-release.html>
>=20
> ClamAV 0.103.1 patch release
>=20
> ClamAV 0.103.1 is out now. Users can head over to clamav.net/downloads =
<https://www.clamav.net/downloads> to download the release materials.
> The latest version of ClamAV contains the following fixes and =
improvements:
>=20
> Notable changes
>=20
>  Added a new scan option to alert on broken media (graphics) file =
formats.
>=20
> This feature mitigates the risk of malformed media files intended to =
exploit vulnerabilities in other software. At present, media validation =
exists for JPEG, TIFF, PNG and GIF files. To enable this feature, set =
AlertBrokenMedia yes in clamd.conf for use with ClamD, or use the =
--alert-broken-media option when using ClamScan. These options are =
disabled by default in this patch release but may be enabled in a =
subsequent release.
>=20
> Application developers may enable this scan option by enabling =
CL_SCAN_HEURISTIC_BROKEN_MEDIA for the heuristic scan option bit field.
> Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF and PNG typing =
behavior. BMP and JPEG 2000 files will continue to detect as =
CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG 2000 =
format-checking capabilities.
>  Bug fixes
>=20
> Fixed PNG parser logic bugs that caused an excess of parsing errors =
and fixed a stack exhaustion issue affecting some systems when scanning =
PNG files. PNG file type detection was disabled via signature database =
update for ClamAV version 0.103.0 to mitigate the effects from these =
bugs.
> Fixed an issue where PNG and GIF files no longer work with Target:5 =
graphics signatures if detected as CL_TYPE_PNG or CL_TYPE_GIF rather =
than as CL_TYPE_GRAPHICS. Target types now support up to 10 possible =
file types to make way for additional graphics types in future releases.
> Fixed ClamOnAcc's --fdpass option.
>=20
> File descriptor passing (or "FD-passing") is a mechanism by which =
ClamOnAcc and ClamDScan may transfer an open file to ClamD to scan, even =
if ClamD is running as a non-privileged user and wouldn't otherwise have =
read-access to the file. This enables ClamD to scan all files without =
having to run ClamD as root. If possible, ClamD should never be run as =
root to mitigate the risk in case ClamD is somehow compromised while =
scanning malware.
>=20
> Interprocess file descriptor passing for ClamOnAcc was broken since =
version 0.102.0 due to a bug introduced by the switch to cURL for =
communicating with ClamD. On Linux, passing file descriptors from one =
process to another is handled by the kernel, so we reverted ClamOnAcc to =
use standard system calls for socket communication when FD-passing is =
enabled.
> Fixed a ClamOnAcc stack corruption issue on some systems when using an =
older version of libcurl. Patch courtesy of Emilio Pozuelo Monfort.
> Allow ClamScan and ClamDScan scans to proceed even if the realpath =
lookup failed. This alleviates an issue on Windows scanning files hosted =
on file-systems that do not support the GetMappedFileNameW() API, such =
as on ImDisk RAM-disks.
> Fixed FreshClam's --on-update-execute=3DEXIT_1 temporary directory =
cleanup issue.
> ClamD's log output and VirusEvent feature now provide the scan =
target's file path instead of a file descriptor. The ClamD socket API =
for submitting a scan by FD-passing doesn't include a file path. This =
feature works by looking up the file path by the file descriptor. This =
feature works on Mac and Linux but is not yet implemented for other UNIX =
operating systems. FD-passing is not available for Windows.
> Fixed an issue where FreshClam database validation didn't work =
correctly when run in daemon mode on Linux/Unix.
> Fixed scan speed performance issues accidentally introduced in ClamAV =
0.103.0 caused by hashing file maps more than once when parsing a file =
as a new type, and caused by frequent scanning of non-HTML text data =
with the HTML parser.
> Other improvements
>=20
> Scanning JPEG, TIFF, PNG and GIF files will no longer return "parse" =
errors when file format validation fails. Instead, the scan will alert =
with the "Heuristics.Broken.Media" signature prefix and a descriptive =
suffix to indicate the issue, provided that the "alert broken media" =
feature is enabled.
> GIF format validation will no longer fail if the GIF image is missing =
the trailer byte, as this appears to be a relatively common issue in =
otherwise functional GIFs.
> Added a TIFF dynamic configuration (DCONF) option that was missing. =
This will allow us to disable TIFF format validation via signature =
database update in the event that it proves to be problematic. This =
feature already exists for many other file types.
> Acknowledgments
>=20
> The ClamAV team thanks Emilio Pozuelo Monfort for their code =
submissions.

--Apple-Mail=_F7B9E03C-197C-44BC-93DB-2B79EDD84A06
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dus-ascii"><base></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><base=
 class=3D""><div class=3D"Apple-Mail-URLShareUserContentTopClass"><br =
class=3D""></div><div =
class=3D"Apple-Mail-URLShareWrapperClass"><blockquote type=3D"cite" =
style=3D"border-left-style: none; color: inherit; padding: inherit; =
margin: inherit;" class=3D""><div class=3D""><div =
class=3D"original-url"><br class=3D""><a =
href=3D"https://blog.clamav.net/2021/02/clamav-01031-patch-release.html" =
class=3D"">https://blog.clamav.net/2021/02/clamav-01031-patch-release.html=
</a><br class=3D""><br class=3D""></div><div id=3D"article" =
role=3D"article" style=3D"font-family: Georgia; text-rendering: =
optimizeLegibility; font-size: 1.2em; line-height: 1.5em; margin: 0px; =
padding: 0px;" class=3D"georgia exported">
        <!-- This node will contain a number of div.page. -->
    <div class=3D"page" style=3D"word-wrap: break-word; max-width: =
100%;"><h1 class=3D"title" style=3D"font-size: 1.95552em; line-height: =
1.2141em; margin-top: 0px; margin-bottom: 0.5em; max-width: =
100%;">ClamAV 0.103.1 patch release</h1>
<div style=3D"max-width: 100%;" class=3D"">
ClamAV 0.103.1 is out now. Users can head over to <a =
href=3D"https://www.clamav.net/downloads" target=3D"_blank" =
style=3D"color: rgb(73, 129, 254); max-width: 100%;" =
class=3D"">clamav.net/downloads</a> to download the release =
materials.</div><p style=3D"max-width: 100%;" class=3D"">The latest =
version of ClamAV contains the following fixes and improvements:</p><h3 =
style=3D"font-size: 1.25em; max-width: 100%;" class=3D"">Notable =
changes</h3><ul style=3D"max-width: 100%;" class=3D""><li =
style=3D"max-width: 100%;" class=3D"">&nbsp;Added a new scan option to =
alert on broken media (graphics) file formats.<br style=3D"max-width: =
100%;" class=3D""><br style=3D"max-width: 100%;" class=3D"">This feature =
mitigates the risk of malformed media files intended to exploit =
vulnerabilities in other software. At present, media validation exists =
for JPEG, TIFF, PNG and GIF files. To enable this feature, set <span =
style=3D"max-width: 100%;" class=3D"">AlertBrokenMedia yes</span> in =
<span style=3D"max-width: 100%;" class=3D"">clamd.conf</span> for use =
with ClamD, or use the <span style=3D"max-width: 100%;" =
class=3D"">--alert-broken-media</span> option when using ClamScan. These =
options are disabled by default in this patch release but may be enabled =
in a subsequent release.<br style=3D"max-width: 100%;" class=3D""><br =
style=3D"max-width: 100%;" class=3D"">Application developers may enable =
this scan option by enabling <span style=3D"max-width: 100%;" =
class=3D"">CL_SCAN_HEURISTIC_BROKEN_MEDIA</span> for the <span =
style=3D"max-width: 100%;" class=3D"">heuristic</span> scan option bit =
field.<br style=3D"max-width: 100%;" class=3D""></li></ul><ul =
style=3D"max-width: 100%;" class=3D""><li style=3D"max-width: 100%;" =
class=3D"">Added <span style=3D"max-width: 100%;" =
class=3D"">CL_TYPE_TIFF</span>, <span style=3D"max-width: 100%;" =
class=3D"">CL_TYPE_JPEG</span> types to match GIF and PNG typing =
behavior. BMP and JPEG 2000 files will continue to detect as <span =
style=3D"max-width: 100%;" class=3D"">CL_TYPE_GRAPHICS</span> because =
ClamAV does not yet have BMP or JPEG 2000 format-checking =
capabilities.<br style=3D"max-width: 100%;" class=3D""></li></ul><h3 =
style=3D"font-size: 1.25em; max-width: 100%;" class=3D"">&nbsp;Bug =
fixes</h3><ul style=3D"max-width: 100%;" class=3D""><li =
style=3D"max-width: 100%;" class=3D"">Fixed PNG parser logic bugs that =
caused an excess of parsing errors and fixed a stack exhaustion issue =
affecting some systems when scanning PNG files. PNG file type detection =
was disabled via signature database update for ClamAV version 0.103.0 to =
mitigate the effects from these bugs.<br style=3D"max-width: 100%;" =
class=3D""></li></ul><ul style=3D"max-width: 100%;" class=3D""><li =
style=3D"max-width: 100%;" class=3D"">Fixed an issue where PNG and GIF =
files no longer work with <span style=3D"max-width: 100%;" =
class=3D"">Target:5</span> graphics signatures if detected as <span =
style=3D"max-width: 100%;" class=3D"">CL_TYPE_PNG</span> or <span =
style=3D"max-width: 100%;" class=3D"">CL_TYPE_GIF</span> rather than as =
<span style=3D"max-width: 100%;" class=3D"">CL_TYPE_GRAPHICS</span>. =
Target types now support up to 10 possible file types to make way for =
additional graphics types in future releases.<br style=3D"max-width: =
100%;" class=3D""></li></ul><ul style=3D"max-width: 100%;" class=3D""><li =
style=3D"max-width: 100%;" class=3D"">Fixed ClamOnAcc's <span =
style=3D"max-width: 100%;" class=3D"">--fdpass</span> option.<br =
style=3D"max-width: 100%;" class=3D""><br style=3D"max-width: 100%;" =
class=3D"">File descriptor passing (or "FD-passing") is a mechanism by =
which ClamOnAcc and ClamDScan may transfer an open file to ClamD to =
scan, even if ClamD is running as a non-privileged user and wouldn't =
otherwise have read-access to the file. This enables ClamD to scan all =
files without having to run ClamD as root. If possible, ClamD should =
never be run as root to mitigate the risk in case ClamD is somehow =
compromised while scanning malware.<br style=3D"max-width: 100%;" =
class=3D""><br style=3D"max-width: 100%;" class=3D"">Interprocess file =
descriptor passing for ClamOnAcc was broken since version 0.102.0 due to =
a bug introduced by the switch to cURL for communicating with ClamD. On =
Linux, passing file descriptors from one process to another is handled =
by the kernel, so we reverted ClamOnAcc to use standard system calls for =
socket communication when FD-passing is enabled.<br style=3D"max-width: =
100%;" class=3D""></li></ul><ul style=3D"max-width: 100%;" class=3D""><li =
style=3D"max-width: 100%;" class=3D"">Fixed a ClamOnAcc stack corruption =
issue on some systems when using an older version of libcurl. Patch =
courtesy of Emilio Pozuelo Monfort.<br style=3D"max-width: 100%;" =
class=3D""></li></ul><ul style=3D"max-width: 100%;" class=3D""><li =
style=3D"max-width: 100%;" class=3D"">Allow ClamScan and ClamDScan scans =
to proceed even if the realpath lookup failed. This alleviates an issue =
on Windows scanning files hosted on file-systems that do not support the =
<span style=3D"max-width: 100%;" class=3D"">GetMappedFileNameW()</span> =
API, such as on ImDisk RAM-disks.<br style=3D"max-width: 100%;" =
class=3D""></li></ul><ul style=3D"max-width: 100%;" class=3D""><li =
style=3D"max-width: 100%;" class=3D"">Fixed FreshClam's <span =
style=3D"max-width: 100%;" class=3D"">--on-update-execute=3DEXIT_1</span> =
temporary directory cleanup issue.</li></ul><ul style=3D"max-width: =
100%;" class=3D""><li style=3D"max-width: 100%;" class=3D"">ClamD's log =
output and VirusEvent feature now provide the scan target's file path =
instead of a file descriptor. The ClamD socket API for submitting a scan =
by FD-passing doesn't include a file path. This feature works by looking =
up the file path by the file descriptor. This feature works on Mac and =
Linux but is not yet implemented for other UNIX operating systems. =
FD-passing is not available for Windows.<br style=3D"max-width: 100%;" =
class=3D""></li></ul><ul style=3D"max-width: 100%;" class=3D""><li =
style=3D"max-width: 100%;" class=3D"">Fixed an issue where FreshClam =
database validation didn't work correctly when run in daemon mode on =
Linux/Unix.</li></ul><ul style=3D"max-width: 100%;" class=3D""><li =
style=3D"max-width: 100%;" class=3D"">Fixed scan speed performance =
issues accidentally introduced in ClamAV 0.103.0 caused by hashing file =
maps more than once when parsing a file as a new type, and caused by =
frequent scanning of non-HTML text data with the HTML parser.<br =
style=3D"max-width: 100%;" class=3D""></li></ul><h3 style=3D"font-size: =
1.25em; max-width: 100%;" class=3D"">Other improvements</h3><ul =
style=3D"max-width: 100%;" class=3D""><li style=3D"max-width: 100%;" =
class=3D"">Scanning JPEG, TIFF, PNG and GIF files will no longer return =
"parse" errors when file format validation fails. Instead, the scan will =
alert with the "Heuristics.Broken.Media" signature prefix and a =
descriptive suffix to indicate the issue, provided that the "alert =
broken media" feature is enabled.<br style=3D"max-width: 100%;" =
class=3D""></li></ul><ul style=3D"max-width: 100%;" class=3D""><li =
style=3D"max-width: 100%;" class=3D"">GIF format validation will no =
longer fail if the GIF image is missing the trailer byte, as this =
appears to be a relatively common issue in otherwise functional GIFs.<br =
style=3D"max-width: 100%;" class=3D""></li></ul><ul style=3D"max-width: =
100%;" class=3D""><li style=3D"max-width: 100%;" class=3D"">Added a TIFF =
dynamic configuration (DCONF) option that was missing. This will allow =
us to disable TIFF format validation via signature database update in =
the event that it proves to be problematic. This feature already exists =
for many other file types.<br style=3D"max-width: 100%;" =
class=3D""></li></ul><h3 style=3D"font-size: 1.25em; max-width: 100%;" =
class=3D"">Acknowledgments</h3><p style=3D"max-width: 100%;" =
class=3D"">The ClamAV team thanks Emilio Pozuelo Monfort for their code =
submissions.</p></div></div></div></blockquote></div></body></html>=

--Apple-Mail=_F7B9E03C-197C-44BC-93DB-2B79EDD84A06--

--Apple-Mail=_B8740C8B-368F-4039-B0F5-9B10362541B2
Content-Disposition: attachment; filename="smime.p7s"
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCCRYw
ggRuMIIDVqADAgECAgphEIBtAAAAAAAOMA0GCSqGSIb3DQEBBQUAMDUxFjAUBgNVBAoTDUNpc2Nv
IFN5c3RlbXMxGzAZBgNVBAMTEkNpc2NvIFJvb3QgQ0EgMjA0ODAeFw0xNDA0MDQyMDI0MThaFw0y
OTA1MTQyMDI1NDJaMCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBD
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrffhZMUxX7I1bNxrllCgSV5d5MRWeM
DMcG4KsfbV83Knvn7aOtgH8RyPOC6+6fUNnJvz2hL7s8EQc177il2VFO2bD3U6CUgCwskmWtEG+h
hmtfQAqZpVBEGpBNz+ZM+0YGjUjjB9fhrWPX1egnABW/bgeyQ7tlBi999lldmxLFLH2960SwUuHC
/B7tnVn3HZOnqzGmQkI5J9OBYsZULCaM2z0U0KiOFeoopBv+vaw8nk3W1UyvjMv/S58FbA9xgTIk
Ye0Zq77qcbRojLvI9OSLP3dTon4VnnML41d0XoPS6JPGzDSRDAKXndcHk3VUtF+DLAIXqLCQZXfZ
UuTuIncCAwEAAaOCAYcwggGDMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBSflTa0jl3VS8MK
wacpk0NRBv2JUTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwEgYDVR0T
AQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBQn88gVHm6aAgkWrSugiWBf2nsvqjBDBgNVHR8EPDA6
MDigNqA0hjJodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY3JsL2NyY2EyMDQ4LmNy
bDBQBggrBgEFBQcBAQREMEIwQAYIKwYBBQUHMAKGNGh0dHA6Ly93d3cuY2lzY28uY29tL3NlY3Vy
aXR5L3BraS9jZXJ0cy9jcmNhMjA0OC5jZXIwXAYDVR0gBFUwUzBRBgorBgEEAQkVARUAMEMwQQYI
KwYBBQUHAgEWNWh0dHA6Ly93d3cuY2lzY28uY29tL3NlY3VyaXR5L3BraS9wb2xpY2llcy9pbmRl
eC5odG1sMA0GCSqGSIb3DQEBBQUAA4IBAQA+Tr4jGkYCjV5r24oCNAtjm+UBPCZdjHCyJOtgXuyK
hGQuG1kVo2ca4Rbj/eBNfUSaIyjS7bb3oh/nRM3tbeqGIVQorGxhvPvIZVAEQIoqi/yfbhie9cU+
paKpHACucaYXu0kyS0pYE5NMNun3Lw3ogOs4XVR5yoVSpKTiVnfTDQchTpwkMgzivqXDcS1OiDfU
8C9WaEZHRWtdUIgl9zoppPGIQa1TflcxhirW4GeH2FOrgaN1d77bIcg6R7RpJ9Xu3/f01nGNunrR
cy993c2meJQoZcOJd15C6ugHwhAxeXY6QXYgkY8KQVCCGwkpshEgbwPrC+I/Itb6P7hGq7awMIIE
oDCCA4igAwIBAgIKAYYWErs4TvKVkTANBgkqhkiG9w0BAQsFADAsMQ4wDAYDVQQKEwVDaXNjbzEa
MBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwHhcNMjAwOTA4MjA0MDAzWhcNMjIwOTA4MjA1MDAz
WjCBlTEcMBoGA1UEAxMTSm9lbCBFc2xlciAoamVzbGVyKTEUMBIGA1UECxMLQ2lzY28gVXNlcnMx
EjAQBgNVBAsTCUVtcGxveWVlczETMBEGCgmSJomT8ixkARkTA2NvbTEVMBMGCgmSJomT8ixkARkT
BWNpc2NvMR8wHQYJKoZIhvcNAQkBDBBqZXNsZXJAY2lzY28uY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAtlgRHNz0SlxmINxuYgRIhGdo6KI+ceaEVMlXvu42GaUpO/Pdv3qlAV/Y
+yy1Q02lBfn18d5PF+JPy2f8K3wIQpL9X4dALwmd8GZcEF+CIvmwW3QvRtjosiOKVb5qRFuWcqIh
HKNcAEAFmeIc1ITbYupI1z0H3RVwq5fMMHEOl0A+37uelaq/Ly5ROHeWYnesARBlorXgg4XLFI3e
ElW7VARCwn1HWy+LiuBu3V91wIpKQKni17owKSvad1br+1k9zliDNmQFE+1wdZV+OCQtkTG40rcF
bxEhwtqlwSKiTGuK5oujHNP5U3oAUBeqGKeHbXeSrP0gkHo4K623v5+gbwIDAQABo4IBWDCCAVQw
DgYDVR0PAQH/BAQDAgTwMAwGA1UdEwEB/wQCMAAwegYIKwYBBQUHAQEEbjBsMDwGCCsGAQUFBzAC
hjBodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY2VjYS5jZXIwLAYIKwYB
BQUHMAGGIGh0dHA6Ly9wa2ljdnMuY2lzY28uY29tL3BraS9vY3NwMB8GA1UdIwQYMBaAFJ+VNrSO
XdVLwwrBpymTQ1EG/YlRMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jaXNjb2NlcnRzLmNpc2Nv
LmNvbS9maWxlL2NlY2EuY3JsMBsGA1UdEQQUMBKBEGplc2xlckBjaXNjby5jb20wHQYDVR0OBBYE
FOzpIRqPuItz4nKvmlyE9WC9g2WNMB8GA1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0G
CSqGSIb3DQEBCwUAA4IBAQAwZUYp0Cb1QXshNnkXhC5kv4u1fu3LC442L+yCjrD5a4FeGfW8UMu1
wgJPQhVyoPw4S3E3/RuVaqp/txByfcd0jhUXSmjq8AGpMWiQg9Us4WLpoH2hn6PmEEFvKq5YLtLy
aSLHZCMIYt9zX1IFGtlT8jeKBZzr7xnzV5nUNAWJ/Dc/m25Zn0ypX/wbl9UNlHjHXl5BGiQYoLo5
jfH8y0EwyowlWBv0jOnJoyYDhm6ndS16XKWMz0wSvu4TAurnCnSQnfFZiAK6VXoAGYGRg0qyejyz
eknHW/f2VhkH8/08RqfCB2MSk+CqbXmy8lwBnrrmjuD0OFlevt/H+SNPphbSMYICajCCAmYCAQEw
OjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGFhK7OE7y
lZEwDQYJYIZIAWUDBAIBBQCgggEBMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcN
AQkFMQ8XDTIxMDIwOTE2MDYyOFowLwYJKoZIhvcNAQkEMSIEIP/3JpriCE+Yrq31YlH4uIS3akqQ
SxyTIngl5Aool+6kMEkGCSsGAQQBgjcQBDE8MDowLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMT
EUNpc2NvIEVtcGxveWVlIENBAgoBhhYSuzhO8pWRMEsGCyqGSIb3DQEJEAILMTygOjAsMQ4wDAYD
VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGFhK7OE7ylZEwDQYJKoZI
hvcNAQELBQAEggEAao8UcI2KlRhnPKWx61bZT+lCWPWdZztHqOgs/hBcEyzApkoVpc7oZjsmMn4i
FtUEuzHsdB1wg6aqVnKJny0yQAKbrr1bQ9H7SRZx0l3SbdbFbcD92mBdoVs4OnJBLqf3bh/j6/f2
D1fFuwFNjo+TbRjp+Ul78d8X0eTsWHxZOIx+29marktlrYLPZ/w8uZ5gJSa9OMOtv6M0XV49nuEH
SLVSMU+fWzhUdnE0a4Mu9F0iwDQFS3KnJ3rNjDmBvbX9EWXKEc9X7sSyrZAvwPekwwNAw84Y186W
vFk7b7pSPp4FMf/nfAiO+M2o6VZpQreLAzHv3CdHe8T20Algg7TNgQAAAAAAAA==

--Apple-Mail=_B8740C8B-368F-4039-B0F5-9B10362541B2--

--===============0159112973890870900==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________

clamav-announce mailing list
[email protected]
https://lists.clamav.net/mailman/listinfo/clamav-announce

http://www.clamav.net/contact.html#ml

--===============0159112973890870900==--