[clamav-users] Segfaults with database version 26908

[David Raynor]

Based on these reports we've started a take-back of the signature, so it
will be dropped in the next daily CVD publish. We'll also analyze to see
why this signature is triggering that behavior on some platforms.

Dave R.

On Tue, May 16, 2023 at 2:53 PM Claudio Cuqui <claudio at c3systems.com.br>
wrote:

> Same here......same version, but compiled from source directly......and
> the same strange message when clamd is restarted:
>
> Starting clamd daemon: LibClamAV Warning: Don't know how to create filter
> for: Win.Downloader.LNKAgent-10001628-0
> LibClamAV Warning: cli_ac_addpatt: cannot use filter for trie
>
> Best Regards,
>
> Claudio Cuqui
> On 5/16/23 07:02, Matthias Rieber wrote:
>
> Hello List,
>
> since the update to version 26908 we observe a high amount of segfaults.
>
> As far as I can tell this happens in
>
> 0x7fdfd44c377d <ac_backward_match_branch+813>
>
> We use version 0.103.8+dfsg-0+deb11u1 on debian bullseye.
>
> Has anyone seen this, too?
>
> Best regards,
> Matthias
> _______________________________________________
>
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
>
> _______________________________________________
>
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
>


-- 
---
Dave Raynor
Talos Security Intelligence and Research Group
draynor at sourcefire.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20230516/29e3a83b/attachment.htm>