ClamAV 1.3.0 feature release and 1.2.2, 1.0.5 security patch release!
"Micah Snyder (micasnyd)" <[email protected]> Wed, 7 Feb 2024 17:10:12 +0000
| Newsgroups | gmane.comp.security.virus.clamav.announce |
|---|---|
| Message-ID | <CH3PR11MB87505248AA190FCB9F6E44A8C6452__23285.6223288522$1707326054$gmane$org@CH3PR11MB8750.namprd11.prod.outlook.com> |
--===============8921831612852798117==
Content-Language: en-US
Content-Type: multipart/alternative;
boundary="_000_CH3PR11MB87505248AA190FCB9F6E44A8C6452CH3PR11MB8750namp_"
--_000_CH3PR11MB87505248AA190FCB9F6E44A8C6452CH3PR11MB8750namp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Read this online at: https://blog.clamav.net/2023/11/clamav-130-122-105-rel=
eased.html
The ClamAV 1.3.0 feature release is now stable!
Today, we are also publishing the 1.2.2 and 1.0.5 security patch versions.
ClamAV 1.1 is past EOL<https://docs.clamav.net/faq/faq-eol.html> for securi=
ty fixes and will not receive an update. Switch to the 1.0 LTS, 1.2, or 1.3=
versions for continued support.
The release files are available for download on the ClamAV downloads page<h=
ttps://www.clamav.net/downloads>, on the Github Release page<https://github=
.com/Cisco-Talos/clamav/releases>, and through Docker Hub*:
* Alpine-based images<https://hub.docker.com/r/clamav/clamav/>
* Debian-based multi-arch images<https://hub.docker.com/r/clamav/clamav=
-debian/>
*The Docker images are built on release day and may not be available until =
later in the day.
Continue reading to learn what changed in each version.
1.3.0
ClamAV 1.3.0 includes the following improvements and changes:
Major changes
* Added support for extracting and scanning attachments found in Micros=
oft OneNote section files. OneNote parsing will be enabled by default, but =
may be optionally disabled using one of the following options:
a. The clamscan command line option: --scan-onenote=3Dno,
b. The clamd.conf config option: ScanOneNote no,
c. The libclamav scan option options.parse &=3D ~CL_SCAN_PARSE_ONENOTE;,
d. A signature change to the daily.cfg dynamic configuration (DCONF).
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/104=
8>
Other improvements
* Fixed issue when building ClamAV on the Haiku (BeOS-like) operating s=
ystem. Patch courtesy of Luca D'Amico
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/106=
1>
* ClamD: When starting, ClamD will now check if the directory specified=
by TemporaryDirectory in clamd.conf exists. If it doesn't, ClamD will prin=
t an error message and will exit with exit code 1. Patch courtesy of Andrew=
Kiggins.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/103=
7>
* CMake: If configured to build static libraries, CMake will now also i=
nstall the libclamav_rust, libclammspack, libclamunrar_iface, and libclamun=
rar static libraries required by libclamav.
Note: These libraries are all linked into the clamscan, clamd, sigtool, and=
freshclam programs, which is why they did not need to be installed to func=
tion. However, these libraries would be required if you wish to build some =
other program that uses the libclamav static library.
Patch courtesy of driverxdw.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/110=
0>
* Added file type recognition for compiled Python (`.pyc`) files.
The file type appears as a string parameter for these callback functions:
- clcb_pre_cache
- clcb_pre_scan
- clcb_file_inspection
When scanning a `.pyc` file, the `type` parameter will now show
"CL_TYPE_PYTHON_COMPILED" instead of "CL_TYPE_BINARY_DATA".
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/111=
1>
* Improved support for decrypting PDFs with empty passwords.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/114=
1>
* Assorted minor improvements and typo fixes.
Bug fixes
* Fixed a warning when scanning some HTML files.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/108=
4>
* Fixed an issue decrypting some PDF's with an empty password.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/107=
9>
* ClamOnAcc: Fixed an infinite loop when a watched directory does not e=
xist.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/104=
7>
* ClamOnAcc: Fixed an infinite loop when a file has been deleted before=
a scan.
Patch courtesy of gsuehiro.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/115=
0>
* Fixed a possible crash when processing VBA files on HP-UX/IA 64bit. P=
atch courtesy of Albert Chin-A-Young.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/526=
>
* ClamConf: Fixed an issue printing `MaxScanSize` introduced with the c=
hange to allow a `MaxScanSize` greater than 4 GB.
Fix courtesy of teoberi.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/112=
1>
* Fixed an issue building a ClamAV RPM in some configurations.
The issue was caused by faulty CMake logic that intended to create an empty=
database directory during the installation.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/114=
4>
Acknowledgments
Special thanks to the following people for code contributions and bug repor=
ts:
* Albert Chin-A-Young
* Andrew Kiggins
* driverxdw
* gsuehiro
* Luca D'Amico
* RainRat
* teoberi
1.2.2 and 1.0.5
ClamAV 1.2.2 and ClamAV 1.0.5 are critical patch versions with the followin=
g fixes:
* CVE-2024-20290<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2=
024-20290>: Fixed a possible heap overflow read bug in the OLE2 file parser=
that could cause a denial-of-service (DoS) condition.
Thank you to OSS-Fuzz for identifying this issue.
Affected versions:
* 1.0.0 through 1.0.4 (LTS)
* 1.1 (all patch versions)
* 1.2.0 and 1.2.1
* CVE-2024-20328<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2=
024-20328>: Fixed a possible command injection vulnerability in the "VirusE=
vent" feature of ClamAV's ClamD service.
To fix this issue, we disabled the '%f' format string parameter. ClamD adm=
inistrators may continue to use the `CLAM_VIRUSEVENT_FILENAME` environment=
variable, instead of '%f'. But you should do so only from within an execu=
table, such as a Python script, and not directly in the clamd.conf "VirusEv=
ent" command.
Thank you to Amit Schendel for identifying this issue.
Affected versions:
* 0.104 (all patch versions)
* 0.105 (all patch versions)
* 1.0.0 through 1.0.4 (LTS)
* 1.1 (all patch versions)
* 1.2.0 and 1.2.1
Posted by Micah Snyder <https://www.blogger.com/profile/0779891600614582644=
1>
BlogThis!<https://www.blogger.com/share-post.g?blogID=3D2366689974368239573=
&postID=3D440866868384796287&target=3Dblog>
Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
--_000_CH3PR11MB87505248AA190FCB9F6E44A8C6452CH3PR11MB8750namp_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div class=3D"elementToProof"><span style=3D"font-family: Aptos, Aptos_Embe=
ddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 1=
2pt; color: rgb(0, 0, 0);">Read this online at:
<a href=3D"https://blog.clamav.net/2023/11/clamav-130-122-105-released.html=
" id=3D"LPlnk417264" class=3D"OWAAutoLink" data-loopstyle=3D"linkonly">
https://blog.clamav.net/2023/11/clamav-130-122-105-released.html</a></span>=
</div>
<div class=3D"elementToProof"><span style=3D"font-family: Aptos, Aptos_Embe=
ddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 1=
2pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div class=3D"elementToProof"><span style=3D"font-family: Aptos, Aptos_Embe=
ddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 1=
2pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div style=3D"background-color: rgb(255, 255, 255); width: 644.4px;">
<p style=3D"line-height: 1.4;"><span style=3D"font-family: Arial, Tahoma, H=
elvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68);">T=
he ClamAV 1.3.0 feature release is now stable!</span></p>
<div style=3D"line-height: 1.4;"><span style=3D"font-family: Arial, Tahoma,=
Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); =
line-height: 17.2667px;">Today, we are also publishing the 1.2.2 and 1.0.5 =
security patch versions.<br>
<br>
</span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans=
-serif; font-size: 13px; color: rgb(68, 68, 68); background-color: rgb(255,=
255, 255); line-height: 17.2667px;">ClamAV 1.1 is
</span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans=
-serif; font-size: 13px; color: rgb(239, 62, 66); background-color: rgb(255=
, 255, 255); line-height: 17.2667px;"><a href=3D"https://docs.clamav.net/fa=
q/faq-eol.html" target=3D"_blank" id=3D"OWA33bfa958-c8ea-819d-654b-aa6920f6=
904e" class=3D"OWAAutoLink" data-loopstyle=3D"linkonly" style=3D"color: rgb=
(239, 62, 66); text-decoration: none; background-color: rgb(255, 255, 255);=
text-align: left;">past
EOL</a></span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSa=
ns, sans-serif; font-size: 13px; color: rgb(68, 68, 68); background-color: =
rgb(255, 255, 255); line-height: 17.2667px;"> for security fixes and w=
ill not receive an update. Switch to the
1.0 LTS, 1.2, or 1.3 versions for continued support.</span></div>
<div class=3D"elementToProof" style=3D"line-height: 1.4;"><span style=3D"fo=
nt-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px;=
color: rgb(68, 68, 68); line-height: 17.2667px;"><br>
</span></div>
<div style=3D"line-height: 1.4;"><span style=3D"font-family: Arial, Tahoma,=
Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); =
background-color: white; line-height: 17.2667px;">The release files are ava=
ilable for download on the
</span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans=
-serif; font-size: 13px; color: rgb(239, 62, 66); line-height: 17.2667px;">=
<a href=3D"https://www.clamav.net/downloads" target=3D"_blank" id=3D"OWA462=
782b9-f668-3ada-7a8e-4c20fde2fb2c" class=3D"Hyperlink SCXW156866380 BCX0 OW=
AAutoLink" rel=3D"noreferrer noopener" data-loopstyle=3D"linkonly" style=3D=
"color: rgb(239, 62, 66); text-decoration: none; margin: 0px;">ClamAV
downloads page</a></span><span style=3D"font-family: Arial, Tahoma, Helvet=
ica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); backgro=
und-color: white; line-height: 17.2667px;">, on the
</span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans=
-serif; font-size: 13px; color: rgb(239, 62, 66); background-color: white; =
line-height: 17.2667px;"><a href=3D"https://github.com/Cisco-Talos/clamav/r=
eleases" target=3D"_blank" id=3D"OWAc2b9ff5e-12a2-870f-0520-e7c0969404c4" c=
lass=3D"Hyperlink SCXW156866380 BCX0 OWAAutoLink" rel=3D"noreferrer noopene=
r" data-loopstyle=3D"linkonly" style=3D"color: rgb(239, 62, 66); text-decor=
ation: none; margin: 0px; background-color: white;">Github Release
page</a></span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeS=
ans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); background-color:=
white; line-height: 17.2667px;">, and through Docker Hub<b>*</b>:</span></=
div>
<ul style=3D"text-align: left; margin: 0.5em 0px; padding-right: 2.5em; pad=
ding-left: 2.5em; list-style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); background-color: white; line-he=
ight: 17.2667px;"><a href=3D"https://hub.docker.com/r/clamav/clamav/" targe=
t=3D"_blank" id=3D"OWAe163c434-9432-2d0f-21d7-dd6377d6e9fa" class=3D"OWAAut=
oLink" rel=3D"nofollow" data-loopstyle=3D"linkonly" style=3D"color: rgb(239=
, 62, 66); text-decoration: none;">Alpine-based
images</a></span></li><li style=3D"font-family: Arial, Tahoma, Helvetica, =
FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); text-indent:=
0px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); background-color: white; line-he=
ight: 17.2667px;"><a href=3D"https://hub.docker.com/r/clamav/clamav-debian/=
" target=3D"_blank" id=3D"OWA29acfa67-6be6-2120-ae35-af4be24c9ce7" class=3D=
"OWAAutoLink" rel=3D"nofollow" data-loopstyle=3D"linkonly" style=3D"color: =
rgb(239, 62, 66); text-decoration: none;">Debian-based
multi-arch images</a></span></li></ul>
<div style=3D"line-height: 1.4;"><span style=3D"font-family: Arial, Tahoma,=
Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); =
line-height: 17.2667px;"><b><i>*</i></b><i>The Docker images are built on r=
elease day and may not be available
until later in the day.</i></span></div>
<div style=3D"line-height: 1.4;"><span style=3D"font-family: Arial, Tahoma,=
Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); =
line-height: 17.2667px;"><i><br>
</i></span></div>
<div style=3D"line-height: 1.4;"><span style=3D"font-family: Arial, Tahoma,=
Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); =
background-color: white; line-height: 17.2667px;"><br>
</span></div>
<div style=3D"line-height: 1.4;"><span style=3D"font-family: Arial, Tahoma,=
Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); =
background-color: white; line-height: 17.2667px;">Continue reading to learn=
what changed in each version.</span></div>
<div style=3D"line-height: 1.4;"><span style=3D"font-family: Arial, Tahoma,=
Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); =
background-color: white; line-height: 17.2667px;"><br>
</span></div>
<h4 style=3D"text-align: left; line-height: normal; margin: 0px 0px 30px; f=
ont-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 22px=
; color: rgb(239, 62, 66);">
<span style=3D"background-color: white; line-height: 17.2667px;"><br>
1.3.0</span></h4>
<p style=3D"direction: ltr; line-height: 1.4; margin-top: 0px; margin-botto=
m: 16px; color: rgb(59, 59, 59);">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; line-height: 17.2667px;">ClamAV 1.3.0 includes the follow=
ing improvements and changes:</span></p>
<h3 style=3D"line-height: 1.25; margin: 24px 0px 16px; color: rgb(59, 59, 5=
9);"><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-s=
erif; font-size: 9.75pt; line-height: 17.2667px;">Major changes</span></h3>
<ul data-line=3D"11" style=3D"direction: ltr; margin: 0px 0px 0.7em; paddin=
g-right: 2.5em; padding-left: 2.5em; list-style-position: initial; list-sty=
le-type: disc;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); direction: ltr; text-indent: 0px; l=
ine-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">Added support =
for extracting and scanning attachments found in Microsoft OneNote section =
files. OneNote parsing will be enabled
by default, but may be optionally disabled using one of the following opti=
ons:<br>
a. The </span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSan=
s, sans-serif; font-size: 13px; color: rgb(68, 68, 68); line-height: 1.357e=
m;"><code>clamscan</code></span><span style=3D"font-family: Arial, Tahoma, =
Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); l=
ine-height: 1.4;"> command
line option: </span><span style=3D"font-family: Arial, Tahoma, Helvetica, =
FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); line-height:=
1.357em;"><code>--scan-onenote=3Dno</code></span><span style=3D"font-famil=
y: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; color: =
rgb(68, 68, 68); line-height: 1.4;">,<br>
b. The </span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSan=
s, sans-serif; font-size: 13px; color: rgb(68, 68, 68); line-height: 1.357e=
m;"><code>clamd.conf</code></span><span style=3D"font-family: Arial, Tahoma=
, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68);=
line-height: 1.4;"> config
option: </span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeS=
ans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); line-height: 1.35=
7em;"><code>ScanOneNote no</code></span><span style=3D"font-family: Arial, =
Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68=
, 68); line-height: 1.4;">,<br>
c. The libclamav scan option </span><span style=3D"font-family: Arial, Taho=
ma, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68=
); line-height: 1.357em;"><code>options.parse &=3D ~CL_SCAN_PARSE_ONENO=
TE;</code></span><span style=3D"font-family: Arial, Tahoma, Helvetica, Free=
Sans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4=
;">,<br>
d. A signature change to the </span><span style=3D"font-family: Arial, Taho=
ma, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68=
); line-height: 1.357em;"><code>daily.cfg</code></span><span style=3D"font-=
family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; co=
lor: rgb(68, 68, 68); line-height: 1.4;"> dynamic
configuration (DCONF).</span></li><ul data-line=3D"19" style=3D"direction:=
ltr; margin: 0px 0px 0.7em; padding-right: 2.5em; padding-left: 2.5em; lis=
t-style-position: initial; list-style-type: circle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); direction: ltr; text-indent: 0px; l=
ine-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/1048" id=3D"OWA268c8025-2d5c-f9b8-=
0293-366a04ce84db" class=3D"OWAAutoLink" title=3D"https://github.com/Cisco-=
Talos/clamav/pull/1048" data-loopstyle=3D"linkonly" data-href=3D"https://gi=
thub.com/Cisco-Talos/clamav/pull/1048" style=3D"color: rgb(239, 62, 66); te=
xt-decoration: none;">GitHub
pull request</a></span></li></ul>
</ul>
<h3 style=3D"line-height: 1.25; margin: 24px 0px 16px; color: rgb(59, 59, 5=
9);"><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-s=
erif; font-size: 9.75pt; line-height: 17.2667px;">Other improvements</span>=
</h3>
<ul data-line=3D"23" style=3D"margin: 0px 0px 0.7em; padding-right: 2.5em; =
padding-left: 2.5em; list-style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(59, 59, 59); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<p style=3D"line-height: 1.4; margin-top: 0px; margin-bottom: 0.7em;"><span=
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font=
-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">Fixed issue when bu=
ilding ClamAV on the Haiku (BeOS-like)
operating system. Patch courtesy of Luca D'Amico</span></p>
</li><ul data-line=3D"25" style=3D"margin: 0px 0px 0.7em; padding-right: 2.=
5em; padding-left: 2.5em; list-style-position: initial; list-style-type: ci=
rcle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/1061" id=3D"OWA588ad32c-f7f9-b392-=
0b0f-a4d3d9bb93d1" class=3D"OWAAutoLink" title=3D"https://github.com/Cisco-=
Talos/clamav/pull/1061" data-loopstyle=3D"linkonly" data-href=3D"https://gi=
thub.com/Cisco-Talos/clamav/pull/1061" style=3D"color: rgb(239, 62, 66); te=
xt-decoration: none;">GitHub
pull request</a></span></li></ul>
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(59, 59, 59); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<p style=3D"line-height: 1.4; margin-top: 0px; margin-bottom: 0.7em;"><span=
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font=
-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">ClamD: When startin=
g, ClamD will now check if the directory
specified by </span><span style=3D"font-family: Arial, Tahoma, Helvetica, =
FreeSans, sans-serif; font-size: 13px; color: rgb(59, 59, 59); line-height:=
1.357em;"><code>TemporaryDirectory</code></span><span style=3D"font-family=
: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; color: r=
gb(59, 59, 59); line-height: 1.4;"> in
</span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans=
-serif; font-size: 13px; color: rgb(59, 59, 59); line-height: 1.357em;"><co=
de>clamd.conf</code></span><span style=3D"font-family: Arial, Tahoma, Helve=
tica, FreeSans, sans-serif; font-size: 13px; color: rgb(59, 59, 59); line-h=
eight: 1.4;"> exists.
If it doesn't, ClamD will print an error message and will exit with exit c=
ode 1. Patch courtesy of Andrew Kiggins.</span></p>
</li><ul data-line=3D"31" style=3D"margin: 0px 0px 0.7em; padding-right: 2.=
5em; padding-left: 2.5em; list-style-position: initial; list-style-type: ci=
rcle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/1037" id=3D"OWAac69ab9f-453f-f812-=
eb24-cf942ce40f79" class=3D"OWAAutoLink" title=3D"https://github.com/Cisco-=
Talos/clamav/pull/1037" data-loopstyle=3D"linkonly" data-href=3D"https://gi=
thub.com/Cisco-Talos/clamav/pull/1037" style=3D"color: rgb(239, 62, 66); te=
xt-decoration: none;">GitHub
pull request</a></span></li></ul>
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(59, 59, 59); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<p style=3D"line-height: 1.4; margin-top: 0px; margin-bottom: 0.7em;"><span=
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font=
-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">CMake: If configure=
d to build static libraries, CMake will
now also install the libclamav_rust, libclammspack, libclamunrar_iface, an=
d libclamunrar static libraries required by libclamav.</span></p>
<p style=3D"line-height: 1.4; margin-top: 0px; margin-bottom: 0.7em;"><span=
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font=
-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">Note: These librari=
es are all linked into the
</span><span style=3D"font-family: courier; font-size: 13px; color: rgb(59,=
59, 59); line-height: 1.4;">clamscan</span><span style=3D"font-family: Ari=
al, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(59=
, 59, 59); line-height: 1.4;">,
</span><span style=3D"font-family: courier; font-size: 13px; color: rgb(59,=
59, 59); line-height: 1.4;">clamd</span><span style=3D"font-family: Arial,=
Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(59, 5=
9, 59); line-height: 1.4;">,
</span><span style=3D"font-family: courier; font-size: 13px; color: rgb(59,=
59, 59); line-height: 1.4;">sigtool</span><span style=3D"font-family: Aria=
l, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(59,=
59, 59); line-height: 1.4;">, and
</span><span style=3D"font-family: courier; font-size: 13px; color: rgb(59,=
59, 59); line-height: 1.4;">freshclam
</span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans=
-serif; font-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">program=
s, which is why they did not need to be installed to function. However, the=
se libraries would be required if
you wish to build some other program that uses the libclamav static librar=
y.</span></p>
<p style=3D"line-height: 1.4; margin-top: 0px; margin-bottom: 0.7em;"><span=
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font=
-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">Patch courtesy of d=
riverxdw.</span></p>
</li><ul data-line=3D"43" style=3D"margin: 0px 0px 0.7em; padding-right: 2.=
5em; padding-left: 2.5em; list-style-position: initial; list-style-type: ci=
rcle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/1100" target=3D"_blank" id=3D"OWA9=
6082b2c-b7f9-ac89-0fea-4edc8d6817f0" class=3D"OWAAutoLink" title=3D"https:/=
/github.com/Cisco-Talos/clamav/pull/1100" rel=3D"nofollow" data-loopstyle=
=3D"linkonly" data-href=3D"https://github.com/Cisco-Talos/clamav/pull/1100"=
style=3D"color: rgb(239, 62, 66); text-decoration: none;">GitHub
pull request</a></span></li></ul>
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<p style=3D"line-height: 1.4; margin-top: 0px; margin-bottom: 0.7em;"><span=
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font=
-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">Added file type rec=
ognition for compiled Python (</span><span style=3D"font-family: courier; f=
ont-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">`.pyc`</span><sp=
an style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; fo=
nt-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">)
files.</span></p>
<p style=3D"line-height: 1.4; margin-top: 0px; margin-bottom: 0.7em;"><span=
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font=
-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;"> The file typ=
e appears as a string parameter for these
callback functions:</span></p>
<p style=3D"line-height: 1.4; margin-top: 0px; margin-bottom: 0.7em;"><span=
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font=
-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;"> -
</span><span style=3D"font-family: courier; font-size: 13px; color: rgb(59,=
59, 59); line-height: 1.4;">clcb_pre_cache</span></p>
<p style=3D"line-height: 1.4; margin-top: 0px; margin-bottom: 0.7em;"><span=
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font=
-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;"> -
</span><span style=3D"font-family: courier; font-size: 13px; color: rgb(59,=
59, 59); line-height: 1.4;">clcb_pre_scan</span></p>
<p style=3D"line-height: 1.4; margin-top: 0px; margin-bottom: 0.7em;"><span=
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font=
-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;"> -
</span><span style=3D"font-family: courier; font-size: 13px; color: rgb(59,=
59, 59); line-height: 1.4;">clcb_file_inspection</span></p>
<p style=3D"line-height: 1.4; margin-top: 0px; margin-bottom: 0.7em;"><span=
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font=
-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;"> When scannin=
g a `</span><span style=3D"font-family: courier; font-size: 13px; color: rg=
b(59, 59, 59); line-height: 1.4;">.pyc</span><span style=3D"font-family: Ar=
ial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(5=
9, 59, 59); line-height: 1.4;">`
file, the `</span><span style=3D"font-family: courier; font-size: 13px; co=
lor: rgb(59, 59, 59); line-height: 1.4;">type</span><span style=3D"font-fam=
ily: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; color=
: rgb(59, 59, 59); line-height: 1.4;">`
parameter will now show</span></p>
<p style=3D"line-height: 1.4; margin-top: 0px; margin-bottom: 0.7em;"><span=
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font=
-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;"> "CL_TYP=
E_PYTHON_COMPILED" instead of "CL_TYPE_BINARY_DATA".</span><=
/p>
</li><ul style=3D"margin: 0.5em 0px; padding-right: 2.5em; padding-left: 2.=
5em; list-style-position: initial; list-style-type: circle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/1111" target=3D"_blank" id=3D"OWAb=
5fa1779-0022-e720-5eef-79cee5add5e1" class=3D"OWAAutoLink" rel=3D"nofollow"=
data-loopstyle=3D"linkonly" style=3D"color: rgb(239, 62, 66); text-decorat=
ion: none;">GitHub
pull request</a></span></li></ul>
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">Improved suppo=
rt for decrypting PDFs with empty passwords.</span></li><ul style=3D"margin=
: 0.5em 0px; padding-right: 2.5em; padding-left: 2.5em; list-style-position=
: initial; list-style-type: circle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/1141" target=3D"_blank" id=3D"OWAc=
9366e30-252e-4687-42a1-944be46faa69" class=3D"OWAAutoLink" rel=3D"nofollow"=
data-loopstyle=3D"linkonly" style=3D"color: rgb(239, 62, 66); text-decorat=
ion: none;">GitHub
pull request</a></span></li></ul>
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">Assorted minor=
improvements and typo fixes.</span></li></ul>
<h3 style=3D"line-height: 1.25; margin: 24px 0px 16px; color: rgb(59, 59, 5=
9);"><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-s=
erif; font-size: 9.75pt; line-height: 17.2667px;">Bug fixes</span></h3>
<ul data-line=3D"49" style=3D"direction: ltr; margin: 0px 0px 0.7em; paddin=
g-right: 2.5em; padding-left: 2.5em; list-style-position: initial; list-sty=
le-type: disc;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); direction: ltr; text-indent: 0px; l=
ine-height: 1.4; margin: 0px 0px 0.25em;">
<p style=3D"direction: ltr; line-height: 1.4; margin-top: 0px; margin-botto=
m: 0.7em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">Fixed a warnin=
g when scanning some HTML files.</span></p>
</li><ul data-line=3D"50" style=3D"direction: ltr; margin: 0px 0px 0.7em; p=
adding-right: 2.5em; padding-left: 2.5em; list-style-position: initial; lis=
t-style-type: circle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); direction: ltr; text-indent: 0px; l=
ine-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/1084" id=3D"OWA7ece1774-374b-fd2a-=
3fb6-8fe0e5705442" class=3D"OWAAutoLink" title=3D"https://github.com/Cisco-=
Talos/clamav/pull/1084" data-loopstyle=3D"linkonly" data-href=3D"https://gi=
thub.com/Cisco-Talos/clamav/pull/1084" style=3D"color: rgb(239, 62, 66); te=
xt-decoration: none;">GitHub
pull request</a></span></li></ul>
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); direction: ltr; text-indent: 0px; l=
ine-height: 1.4; margin: 0px 0px 0.25em;">
<p style=3D"direction: ltr; line-height: 1.4; margin-top: 0px; margin-botto=
m: 0.7em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">Fixed an issue=
decrypting some PDF's with an empty password.</span></p>
</li><ul data-line=3D"53" style=3D"direction: ltr; margin: 0px 0px 0.7em; p=
adding-right: 2.5em; padding-left: 2.5em; list-style-position: initial; lis=
t-style-type: circle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); direction: ltr; text-indent: 0px; l=
ine-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/1079" id=3D"OWA5b04208e-2685-dc04-=
fe41-74c53f2b5ff4" class=3D"OWAAutoLink" title=3D"https://github.com/Cisco-=
Talos/clamav/pull/1079" data-loopstyle=3D"linkonly" data-href=3D"https://gi=
thub.com/Cisco-Talos/clamav/pull/1079" style=3D"color: rgb(239, 62, 66); te=
xt-decoration: none;">GitHub
pull request</a></span></li></ul>
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); direction: ltr; text-indent: 0px; l=
ine-height: 1.4; margin: 0px 0px 0.25em;">
<p style=3D"direction: ltr; line-height: 1.4; margin-top: 0px; margin-botto=
m: 0.7em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">ClamOnAcc: Fix=
ed an infinite loop when a watched directory does not exist.</span></p>
</li><ul data-line=3D"56" style=3D"direction: ltr; margin: 0px 0px 0.7em; p=
adding-right: 2.5em; padding-left: 2.5em; list-style-position: initial; lis=
t-style-type: circle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); direction: ltr; text-indent: 0px; l=
ine-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/1047" id=3D"OWAbde82b17-119f-c9dd-=
618a-eb85d61464df" class=3D"OWAAutoLink" title=3D"https://github.com/Cisco-=
Talos/clamav/pull/1047" data-loopstyle=3D"linkonly" data-href=3D"https://gi=
thub.com/Cisco-Talos/clamav/pull/1047" style=3D"color: rgb(239, 62, 66); te=
xt-decoration: none;">GitHub
pull request</a></span></li></ul>
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">ClamOnAcc: Fix=
ed an infinite loop when a file has been deleted before a scan.<br>
Patch courtesy of gsuehiro.</span></li><ul style=3D"margin: 0.5em 0px; padd=
ing-right: 2.5em; padding-left: 2.5em; list-style-position: initial; list-s=
tyle-type: circle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/1150" target=3D"_blank" id=3D"OWAe=
d077602-5038-8b5d-0dd4-e93a74792078" class=3D"OWAAutoLink" rel=3D"nofollow"=
data-loopstyle=3D"linkonly" style=3D"color: rgb(239, 62, 66); text-decorat=
ion: none;">GitHub
pull request</a></span></li></ul>
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); direction: ltr; text-indent: 0px; l=
ine-height: 1.4; margin: 0px 0px 0.25em;">
<p style=3D"direction: ltr; line-height: 1.4; margin-top: 0px; margin-botto=
m: 0.7em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">Fixed a possib=
le crash when processing VBA files on HP-UX/IA 64bit. Patch courtesy of Alb=
ert Chin-A-Young.</span></p>
</li><ul data-line=3D"60" style=3D"direction: ltr; margin: 0px 0px 0.7em; p=
adding-right: 2.5em; padding-left: 2.5em; list-style-position: initial; lis=
t-style-type: circle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); direction: ltr; text-indent: 0px; l=
ine-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/526" id=3D"OWAa60acba5-8ecf-820b-e=
6d2-29164291a84e" class=3D"OWAAutoLink" title=3D"https://github.com/Cisco-T=
alos/clamav/pull/526" data-loopstyle=3D"linkonly" data-href=3D"https://gith=
ub.com/Cisco-Talos/clamav/pull/526" style=3D"color: rgb(239, 62, 66); text-=
decoration: none;">GitHub
pull request</a></span></li></ul>
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">ClamConf: Fixe=
d an issue printing `</span><span style=3D"font-family: courier; font-size:=
13px; color: rgb(68, 68, 68); line-height: 1.4;">MaxScanSize</span><span s=
tyle=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-s=
ize: 13px; color: rgb(68, 68, 68); line-height: 1.4;">`
introduced with the change to allow a `</span><span style=3D"font-family: =
courier; font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">MaxSca=
nSize</span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans,=
sans-serif; font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">`
greater than 4 GB.<br>
Fix courtesy of teoberi.</span></li><ul style=3D"margin: 0.5em 0px; padding=
-right: 2.5em; padding-left: 2.5em; list-style-position: initial; list-styl=
e-type: circle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/1121" target=3D"_blank" id=3D"OWA9=
62c6105-d805-ab51-7f94-990ea580e6b4" class=3D"OWAAutoLink" rel=3D"nofollow"=
data-loopstyle=3D"linkonly" style=3D"color: rgb(239, 62, 66); text-decorat=
ion: none;">GitHub
pull request</a></span></li></ul>
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">Fixed an issue=
building a ClamAV RPM in some configurations.<br>
The issue was caused by faulty CMake logic that intended to create an empty=
database directory during the installation.</span></li><ul style=3D"margin=
: 0.5em 0px; padding-right: 2.5em; padding-left: 2.5em; list-style-position=
: initial; list-style-type: circle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://github.com/Cisco-Talos/clamav/pull/1144" target=3D"_blank" id=3D"OWA9=
fed6b01-9002-aefb-04a1-07be943716e6" class=3D"OWAAutoLink" rel=3D"nofollow"=
data-loopstyle=3D"linkonly" style=3D"color: rgb(239, 62, 66); text-decorat=
ion: none;">GitHub
pull request</a></span></li></ul>
</ul>
<h3 style=3D"line-height: 1.25; margin: 24px 0px 16px; color: rgb(59, 59, 5=
9);"><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-s=
erif; font-size: 9.75pt; line-height: 17.2667px;">Acknowledgments</span></h=
3>
<p style=3D"direction: ltr; line-height: 1.4; margin-top: 0px; margin-botto=
m: 16px; color: rgb(59, 59, 59);">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; line-height: 17.2667px;">Special thanks to the following =
people for code contributions and bug reports:</span></p>
<ul data-line=3D"65" style=3D"direction: ltr; margin: 0px 0px 0.7em; paddin=
g-right: 2.5em; padding-left: 2.5em; list-style-position: initial; list-sty=
le-type: disc;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(59, 59, 59); direction: ltr; text-indent: 0px; l=
ine-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">Albert Chin-A-=
Young</span></li><li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSa=
ns, sans-serif; font-size: 13px; color: rgb(59, 59, 59); direction: ltr; te=
xt-indent: 0px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">Andrew Kiggins=
</span></li><li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, s=
ans-serif; font-size: 13px; color: rgb(59, 59, 59); direction: ltr; text-in=
dent: 0px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">driverxdw</spa=
n></li><li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-s=
erif; font-size: 13px; color: rgb(68, 68, 68); direction: ltr; text-indent:=
0px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">gsuehiro</span=
></li><li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-se=
rif; font-size: 13px; color: rgb(59, 59, 59); direction: ltr; text-indent: =
0px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">Luca D'Amico</=
span></li><li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, san=
s-serif; font-size: 13px; color: rgb(59, 59, 59); direction: ltr; text-inde=
nt: 0px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">RainRat</span>=
</li><li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-ser=
if; font-size: 13px; color: rgb(68, 68, 68); direction: ltr; text-indent: 0=
px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(59, 59, 59); line-height: 1.4;">teoberi</span>=
</li></ul>
<div style=3D"line-height: 1.4;"><span style=3D"font-family: Arial, Tahoma,=
Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); =
background-color: white; line-height: 17.2667px;"><br>
</span></div>
<h4 style=3D"text-align: left; line-height: normal; margin: 0px 0px 30px; f=
ont-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 22px=
; color: rgb(239, 62, 66);">
<span style=3D"background-color: white; line-height: 17.2667px;">1.2.2 and =
1.0.5</span></h4>
<div style=3D"line-height: 1.4;"><span style=3D"font-family: Arial, Tahoma,=
Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); =
line-height: 17.2667px;">ClamAV 1.2.2 and ClamAV 1.0.5 are critical patch v=
ersions with the following fixes:</span></div>
<div style=3D"line-height: 1.4;"><span style=3D"font-family: Arial, Tahoma,=
Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); =
line-height: 17.2667px;"><br>
</span></div>
<ul style=3D"text-align: left; margin: 0.5em 0px; padding-right: 2.5em; pad=
ding-left: 2.5em; list-style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2024-20290" target=3D"_b=
lank" id=3D"OWA4610c159-2dc8-621d-5895-59821f18c32d" class=3D"OWAAutoLink" =
rel=3D"nofollow" data-loopstyle=3D"linkonly" style=3D"color: rgb(239, 62, 6=
6); text-decoration: none;">CVE-2024-20290</a></span><span style=3D"font-fa=
mily: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; colo=
r: rgb(68, 68, 68); line-height: 1.4;">:
Fixed a possible heap overflow read bug in the OLE2 file parser that could=
cause a denial-of-service (DoS) condition.<br>
<br>
Thank you to OSS-Fuzz for identifying this issue.<br>
<br>
Affected versions:</span></li><ul style=3D"margin: 0.5em 0px; padding-right=
: 2.5em; padding-left: 2.5em; list-style-position: initial; list-style-type=
: circle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">1.0.0 through =
1.0.4 (LTS)</span></li><li style=3D"font-family: Arial, Tahoma, Helvetica, =
FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); text-indent:=
0px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">1.1 (all patch=
versions)</span></li><li style=3D"font-family: Arial, Tahoma, Helvetica, F=
reeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); text-indent: =
0px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">1.2.0 and 1.2.=
1</span></li></ul>
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); line-height: 1.4;"><a href=3D"ht=
tps://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2024-20328" target=3D"_b=
lank" id=3D"OWA200eb9c6-3881-4ebe-2e29-1cbb036715a0" class=3D"OWAAutoLink" =
rel=3D"nofollow" data-loopstyle=3D"linkonly" style=3D"color: rgb(239, 62, 6=
6); text-decoration: none;">CVE-2024-20328</a></span><span style=3D"font-fa=
mily: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; colo=
r: rgb(68, 68, 68); line-height: 1.4;">:
Fixed a possible command injection vulnerability in the "VirusEvent&q=
uot; feature of ClamAV's ClamD service.<br>
<br>
To fix this issue, we disabled the '</span><span style=3D"font-family: cour=
ier; font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">%f</span><=
span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; =
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">'
format string parameter. ClamD administrators may continue to use th=
e `</span><span style=3D"font-family: courier; font-size: 13px; color: rgb(=
68, 68, 68); line-height: 1.4;">CLAM_VIRUSEVENT_FILENAME</span><span style=
=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size:=
13px; color: rgb(68, 68, 68); line-height: 1.4;">`
environment variable, instead of '</span><span style=3D"font-family: couri=
er; font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">%f</span><s=
pan style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">'.
But you should do so only from within an executable, such as a Pytho=
n script, and not directly in the
</span><span style=3D"font-family: courier; font-size: 13px; color: rgb(68,=
68, 68); line-height: 1.4;">clamd.conf</span><span style=3D"font-family: A=
rial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(=
68, 68, 68); line-height: 1.4;"> "VirusEvent"
command.<br>
<br>
Thank you to Amit Schendel for identifying this issue.<br>
<br>
Affected versions:</span></li><ul style=3D"margin: 0.5em 0px; padding-right=
: 2.5em; padding-left: 2.5em; list-style-position: initial; list-style-type=
: circle;">
<li style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; f=
ont-size: 13px; color: rgb(68, 68, 68); text-indent: 0px; line-height: 1.4;=
margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">0.104 (all pat=
ch versions)</span></li><li style=3D"font-family: Arial, Tahoma, Helvetica,=
FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); text-indent=
: 0px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">0.105 (all pat=
ch versions)</span></li><li style=3D"font-family: Arial, Tahoma, Helvetica,=
FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); text-indent=
: 0px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">1.0.0 through =
1.0.4 (LTS)</span></li><li style=3D"font-family: Arial, Tahoma, Helvetica, =
FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); text-indent:=
0px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">1.1 (all patch=
versions)</span></li><li style=3D"font-family: Arial, Tahoma, Helvetica, F=
reeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68); text-indent: =
0px; line-height: 1.4; margin: 0px 0px 0.25em;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(68, 68, 68); line-height: 1.4;">1.2.0 and 1.2.=
1</span></li></ul>
</ul>
<div style=3D"line-height: 1.4;"><span style=3D"font-family: Arial, Tahoma,=
Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(68, 68, 68);"=
><br>
</span></div>
</div>
<div style=3D"background-color: rgb(255, 255, 255); margin: 1.5em 0px 0px;"=
>
<div style=3D"text-align: left; text-indent: 0px; line-height: 1.6;"><span =
style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-=
size: 13px; color: rgb(68, 68, 68);">Posted by
</span><span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans=
-serif; font-size: 13px; color: rgb(239, 62, 66);"><a href=3D"https://www.b=
logger.com/profile/07798916006145826441" id=3D"OWAcb96fe22-4cf2-3343-9d55-e=
cf2b227dfb3" class=3D"g-profile OWAAutoLink" title=3D"author profile" rel=
=3D"author" data-loopstyle=3D"linkonly" style=3D"color: rgb(239, 62, 66); t=
ext-decoration: none;">Micah
Snyder </a></span></div>
<div style=3D"text-align: left; text-indent: -9999px; line-height: 1.6; dis=
play: block;">
<span style=3D"font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;=
font-size: 13px; color: rgb(239, 62, 66); background-color: initial;"><a h=
ref=3D"https://www.blogger.com/share-post.g?blogID=3D2366689974368239573&am=
p;postID=3D440866868384796287&target=3Dblog" target=3D"_blank" id=3D"OW=
A4e8976ce-80d8-beeb-6e1e-6f9a399732ea" class=3D"goog-inline-block share-but=
ton sb-blog OWAAutoLink" title=3D"BlogThis!" data-loopstyle=3D"linkonly" st=
yle=3D"color: rgb(239, 62, 66); text-decoration: none; display: inline-bloc=
k; margin-left: -1px; background-color: initial; width: 20px; height: 20px;=
">BlogThis!</a></span></div>
</div>
<div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, =
Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id=3D"Signature">
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
<br>
<span style=3D"font-family: Helvetica; font-size: 12px;">Micah Snyder</span=
><br>
<span style=3D"font-family: Helvetica; font-size: 12px;">ClamAV Development=
</span><br>
<span style=3D"font-family: Helvetica; font-size: 12px;">Talos</span><br>
<span style=3D"font-family: Helvetica; font-size: 12px;">Cisco Systems, Inc=
.</span><br>
</div>
</div>
</body>
</html>
--_000_CH3PR11MB87505248AA190FCB9F6E44A8C6452CH3PR11MB8750namp_--
--===============8921831612852798117==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
clamav-announce mailing list
[email protected]
https://lists.clamav.net/mailman/listinfo/clamav-announce
http://www.clamav.net/contact.html#ml
--===============8921831612852798117==--