Re: Issue with FP only on 0.103.1
Mark Allan <[email protected]> Thu, 11 Feb 2021 23:53:45 +0000
| Newsgroups | gmane.comp.security.virus.clamav.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi Micah, Yes of course! I've just uploaded a zip file (Archive.zip) to the FP page on clamav.net MD5 (Archive.zip) = 45229d954a884a1e03aba15b9f42168a Regards Mark > On 11 Feb 2021, at 7:12 pm, Micah Snyder (micasnyd) <[email protected]> wrote: > > Hi Mark, > > Do you think you could share a sample or two with me to test. I'm really curious what changed and would like to debug each version with a sample or two. > > -Micah > >> -----Original Message----- >> From: clamav-devel <[email protected]> On Behalf Of >> Mark Allan >> Sent: Monday, February 8, 2021 3:04 AM >> To: ClamAV Development <[email protected]> >> Subject: [Clamav-devel] Issue with FP only on 0.103.1 >> >> Hi all, >> >> It looks like the additional image file type support in 0.103.1 has introduced >> an issue with a particular signature which has been in the database since 2018 >> >> Img.Exploit.CVE_2018_4904-6449838-0 >> >> It's flagging up thousands of known-good files. As far as I can tell, they're all >> TIFF files. >> >> I've added that signature to an ign2 file for now, but I'm wondering if there's >> something else that's maybe amiss somewhere either with the signature or >> the 0.103.1 update? >> >> Best regards, >> Mark >> >> _______________________________________________ >> >> clamav-devel mailing list >> [email protected] >> https://lists.clamav.net/mailman/listinfo/clamav-devel >> >> Please submit your patches to our Github: https://github.com/Cisco- >> Talos/clamav-devel/pulls >> >> Help us build a comprehensive ClamAV guide: >> https://github.com/vrtadmin/clamav-faq >> >> http://www.clamav.net/contact.html#ml > _______________________________________________ > > clamav-devel mailing list > [email protected] > https://lists.clamav.net/mailman/listinfo/clamav-devel > > Please submit your patches to our Github: https://github.com/Cisco-Talos/clamav-devel/pulls > > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml _______________________________________________ clamav-devel mailing list [email protected] https://lists.clamav.net/mailman/listinfo/clamav-devel Please submit your patches to our Github: https://github.com/Cisco-Talos/clamav-devel/pulls Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml