Critical bug in virus scanning engine (development versions only)

Tomasz Kojm <[email protected]> Sat, 3 Jan 2004 11:33:47 +0100

Newsgroups	gmane.comp.security.virus.clamav.announce
Message-ID	<20040103113347.3ded0db5.tk__17182.4626661421$1073128022@lodz.tpnet.pl>

Dear Users,

all ClamAV snapshots newer than clamav-20031201 contain a bug that
completely disables detection of polymorphic viruses (Hybris, Magistr)
and other malware with multipart signatures. Please update to the latest
version and make sure the changelog contains the following entry:

* libclamav: fixed handling of multipart signatures (broken since
	     Dec 2). The bug was introduced by _me_ and not by the
             Thomas Lamy's patch. Problem found and reported by René
             Bellora <rbellora*tecnoaccion.com.ar>, Jean-Christophe
             Heger <jcheger*acytec.com> and Tomasz Papszun
             <tomek*clamav.net>.  Many thanks !

ClamAV 0.65 is NOT affected by this problem.

Best regards,
Tomasz Kojm
-- 
      oo    .....      	[email protected]	  www.ClamAV.net
     (\/)\.........    	http://www.clamav.net/gpg/tkojm.gpg
        \..........._  	0DCA5A08407D5288279DB43454822DC8985A444B
          //\   /\ 	Sat Jan  3 11:27:24 CET 2004

signature.asc (application/pgp-signature, 189 B)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/9pqLVIItyJhaREsRAnNhAJ4/fIYd0M59nntzLVdA4+lCiLVoeQCaAp1Z
5yRvZXW5MhiWFIJgTcyWR9o=
=fmDO
-----END PGP SIGNATURE-----