[clamav-users] Errir parsing PNG files and 451_mail_server_temporarily_rejected_message

[Pablo Murillo]

Hi Micah

I was ready to send a new mail when yours arrived
I made a lot of test and when I activated the option LogClean to yes on 
clamd.conf I found that not all PNG generate the problem !
I'm sending some PNGs attached inside a tar.gz

Now, I feel me better, I thought that I was the problem :D

Pablo Murillo

On 10/20/2020 4:40 PM, Micah Snyder (micasnyd) via clamav-users wrote:
> Hi all,
>
> It seems as though the new PNG graphics format/CVE checker added in 0.103 is causing trouble for you and for some others.  We will disable it for now, which we can do with an update to the daily database.
>
> Pablo, if you're allowed to share some of the PNG files with me that caused issues for you, the samples will help us find the bug in the PNG parser.
>
> Regards,
> Micah
>
>
> Micah Snyder
> ClamAV Development
> Talos
> Cisco Systems, Inc.
>   
>
>
> On 10/19/20, 11:26 AM, "clamav-users on behalf of Pablo Murillo" <clamav-users-bounces at lists.clamav.net on behalf of info at pablomurillo.com.ar> wrote:
>
>      Hi
>
>      I started seeing the error [
>      451_mail_server_temporarily_rejected_message ] on maillog, and looking
>      in the clamd.log I found a lot of lines like this [ /*/*/*/*.png: Can't
>      parse data ERROR ]
>      I added on clamd.conf the next line
>
>      ExcludePath ^\.png$
>
>      But clamd is still sending the error
>      Is there a way to avoid this ?
>      Any mail qith a PNG file is rejected by clamd
>
>      My config
>      FreeBSD 11.3-RELEASE-p13
>      qmail (with a lot ot patches)
>      SpamDyke 5.0.1
>      ClamAV 0.103.0
>
>      Thanks
>
>
>      --
>      This email has been checked for viruses by AVG.
>      https://www.avg.com
>
>
>      _______________________________________________
>
>      clamav-users mailing list
>      clamav-users at lists.clamav.net
>      https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
>      Help us build a comprehensive ClamAV guide:
>      https://github.com/vrtadmin/clamav-faq
>
>      http://www.clamav.net/contact.html#ml
>
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml


-- 
This email has been checked for viruses by AVG.
https://www.avg.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: png.tar.gz
Type: application/x-gzip
Size: 1237958 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20201020/aa0eb5fa/attachment.bin>