[clamav-users] Errir parsing PNG files and 451_mail_server_temporarily_rejected_message

[Pablo Murillo]

Hi

What happened with this ?
Now I'm seeing some errors in GIF files too

On 10/21/2020 2:04 PM, Pablo Murillo wrote:
> Ajajaja
> I feel better !
> ajajaja
>
> Check the mail I sent few minutes ago with more info and more files 
> (defug, config, the rights pngs, and the real error)
>
> Sorry my english !
>
>
> On 10/21/2020 1:48 PM, Micah Snyder (micasnyd) via clamav-users wrote:
>> Thanks Pablo I'll check it out right away!  I hope you're feeling 
>> better now :D
>>
>> Best,
>> Micah
>>
>> On 10/20/20, 1:10 PM, "clamav-users on behalf of Pablo Murillo" 
>> <clamav-users-bounces at lists.clamav.net on behalf of 
>> info at pablomurillo.com.ar> wrote:
>>
>>      Hi Micah
>>
>>      I was ready to send a new mail when yours arrived
>>      I made a lot of test and when I activated the option LogClean to 
>> yes on
>>      clamd.conf I found that not all PNG generate the problem !
>>      I'm sending some PNGs attached inside a tar.gz
>>
>>      Now, I feel me better, I thought that I was the problem :D
>>
>>      Pablo Murillo
>>
>>      On 10/20/2020 4:40 PM, Micah Snyder (micasnyd) via clamav-users 
>> wrote:
>>      > Hi all,
>>      >
>>      > It seems as though the new PNG graphics format/CVE checker 
>> added in 0.103 is causing trouble for you and for some others.  We 
>> will disable it for now, which we can do with an update to the daily 
>> database.
>>      >
>>      > Pablo, if you're allowed to share some of the PNG files with 
>> me that caused issues for you, the samples will help us find the bug 
>> in the PNG parser.
>>      >
>>      > Regards,
>>      > Micah
>>      >
>>      >
>>      > Micah Snyder
>>      > ClamAV Development
>>      > Talos
>>      > Cisco Systems, Inc.
>>      >
>>      >
>>      >
>>      > On 10/19/20, 11:26 AM, "clamav-users on behalf of Pablo 
>> Murillo" <clamav-users-bounces at lists.clamav.net on behalf of 
>> info at pablomurillo.com.ar> wrote:
>>      >
>>      >      Hi
>>      >
>>      >      I started seeing the error [
>>      >      451_mail_server_temporarily_rejected_message ] on 
>> maillog, and looking
>>      >      in the clamd.log I found a lot of lines like this [ 
>> /*/*/*/*.png: Can't
>>      >      parse data ERROR ]
>>      >      I added on clamd.conf the next line
>>      >
>>      >      ExcludePath ^\.png$
>>      >
>>      >      But clamd is still sending the error
>>      >      Is there a way to avoid this ?
>>      >      Any mail qith a PNG file is rejected by clamd
>>      >
>>      >      My config
>>      >      FreeBSD 11.3-RELEASE-p13
>>      >      qmail (with a lot ot patches)
>>      >      SpamDyke 5.0.1
>>      >      ClamAV 0.103.0
>>      >
>>      >      Thanks
>>      >
>>      >
>>      >      --
>>      >      This email has been checked for viruses by AVG.
>>      >      https://www.avg.com
>>      >
>>      >
>>      >      _______________________________________________
>>      >
>>      >      clamav-users mailing list
>>      >      clamav-users at lists.clamav.net
>>      > https://lists.clamav.net/mailman/listinfo/clamav-users
>>      >
>>      >
>>      >      Help us build a comprehensive ClamAV guide:
>>      >      https://github.com/vrtadmin/clamav-faq
>>      >
>>      >      http://www.clamav.net/contact.html#ml
>>      >
>>      >
>>      > _______________________________________________
>>      >
>>      > clamav-users mailing list
>>      > clamav-users at lists.clamav.net
>>      > https://lists.clamav.net/mailman/listinfo/clamav-users
>>      >
>>      >
>>      > Help us build a comprehensive ClamAV guide:
>>      > https://github.com/vrtadmin/clamav-faq
>>      >
>>      > http://www.clamav.net/contact.html#ml
>>
>>
>>      --
>>      This email has been checked for viruses by AVG.
>>      https://www.avg.com
>>
>>
>> _______________________________________________
>>
>> clamav-users mailing list
>> clamav-users at lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
>

-- 
This email has been checked for viruses by AVG.
https://www.avg.com