[clamav-users] Anyone notice any issues with clamav 0.99.2 and recent patterns?

Christoph Moench-Tegeder cmt at burggraben.net
Fri Jan 26 12:12:45 UTC 2018


## Karl Pielorz (kpielorz_lst at tdx.co.uk):

> We're currently running clamav 0.99.2 (technically shown as 0.99.2_8) under 
> FreeBSD 10.3 amd64 - since then we've seen an issue where clamd "kind of 
> dies" - it's still running, there are no errors logged anywhere (we log to 
> syslog) - but whilst it's accepting connections to scan things - for lots 
> of them it doesn't seem to either be accepting data sent to it's socket 
> (causing the caller to hang/timeout eventually) - or return results.

There are reports of exploits against 0.99.2 in the wild. Heise reports
on that (in german, can't find an english source right now):
https://heise.de/-3951801

> I can't yet update to 0.99.3 (as we use FreeBSD's pkg system - and it's not 
> available yet).

If possible, update from HEAD - I already pinged the committer
about MFHing.

Regards,
Christoph

-- 
Spare Space



More information about the clamav-users mailing list