[clamav-users] Daily 23161 broke Clam

[Joel Esler (jesler)]

A new daily with the Sig dropped. 

Probably what we will do to prevent this from happening again, is to have 0.99.3 (the upcoming version) require pcre 7.  

How does that sound?

--
Sent from my iPhone

> On Mar 3, 2017, at 18:08, Chris Conn <cconn at abacom.com> wrote:
> 
> Hello,
> 
> I hope you don't mind my contact off-list, I don't want to make noise on it for all.  Apologies.
> 
> This new build, are we talking about a daily.cvd (23162?) or a new build of clam/pcre?
> 
> Thanks again in advance for your help,
> 
> Chris
> 
> 
>> On 3/3/2017 4:00 PM, Alain Zidouemba wrote:
>> We are coming to the same conclusions.
>> 
>> The issue seem to isolated to using pcre libraries older than 7.0. I does
>> not affect users of newer versions of pcre or users of pcre2.
>> 
>> A new build with the fix is in progress now.
>> 
>> Apologies for the impact this has caused.
>> 
>> Alain
>> 
>> On Fri, Mar 3, 2017 at 2:34 PM, Steve Basford <
>> steveb_clamav at sanesecurity.com> wrote:
>> 
>>>> On Fri, March 3, 2017 7:20 pm, Alain Zidouemba wrote:
>>>> We're pulling the signature causing the issue now, while we investigate
>>>> the cause.
>>>> 
>>>> - Alain
>>> Hi Alain,
>>> 
>>> I think the fix is... Replace ? with ?P  when the PCRE library is old
>>> 
>>> ie.  ?< to ?P<
>>> 
>>> On...
>>> 
>>> Doc.Macro.GenericHeuristic-5901772-0
>>> Doc.Macro.GenericHeuristic-5931846-1
>>> 
>>> 
>>> --
>>> Cheers,
>>> 
>>> Steve
>>> Twitter: @sanesecurity
>>> 
>>> _______________________________________________
>>> clamav-users mailing list
>>> clamav-users at lists.clamav.net
>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>> 
>>> 
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq
>>> 
>>> http://www.clamav.net/contact.html#ml
>>> 
>> _______________________________________________
>> clamav-users mailing list
>> clamav-users at lists.clamav.net
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>> 
>> 
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> 
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml