Re: [clamav-users] ClamAV® blog: ClamAV 0.103.2 security patch release

2021-04-10 Thread Joel Esler (jesler) via clamav-users
Thanks for pointing that out. We’ve corrected it with mitre, but obviously, we can’t correct the news.md for now. — Sent from my  iPad > On Apr 10, 2021, at 08:14, Sergey wrote: > > On Wednesday 07 April 2021, Joel Esler (jesler) via clamav-users wrote: > >> CVE-2021-1404: Fix for PDF par

Re: [clamav-users] Error 429 when updating database

2021-04-10 Thread Joel Esler (jesler) via clamav-users
This. — Sent from my  iPad > On Apr 10, 2021, at 09:15, Gary R. Schmidt wrote: > > On 10/04/2021 22:59, Matus UHLAR - fantomas wrote: > [SNIP] >> it could help if we provided proper reason to upgrade tho. > Isn't, "It's security software", sufficient? > >Cheers, >GaryB-) >

Re: [clamav-users] Error 429 when updating database

2021-04-10 Thread Matus UHLAR - fantomas
On 10/04/2021 23:45, Matus UHLAR - fantomas wrote: On 10/04/2021 22:59, Matus UHLAR - fantomas wrote: [SNIP] it could help if we provided proper reason to upgrade tho. On 10.04.21 23:08, Gary R. Schmidt wrote: Isn't, "It's security software", sufficient? obviously not. There are still quest

Re: [clamav-users] SSN question

2021-04-10 Thread Matus UHLAR - fantomas
On Tue, 6 Apr 2021, Matus UHLAR - fantomas wrote: I see that I can enable DLP by enabling StructuredDataDetection true which allows for scanning credit card numbers and social security numbers in US format. Is there any possibility to enhance this by adding other formats? in slovakia we have

Re: [clamav-users] SSN question

2021-04-10 Thread Matus UHLAR - fantomas
On 06.04.21 15:51, eric-l...@truenet.com wrote: I noticed no one emailed you back. I usually give people time to think, so thank you for doing it. I personally would just use a yara regex if needed, but I would definitely test first with just yara to make sure there isn't too many false posit

Re: [clamav-users] Error 429 when updating database

2021-04-10 Thread Gary R. Schmidt
On 10/04/2021 23:45, Matus UHLAR - fantomas wrote: On 10/04/2021 22:59, Matus UHLAR - fantomas wrote: [SNIP] it could help if we provided proper reason to upgrade tho. On 10.04.21 23:08, Gary R. Schmidt wrote: Isn't, "It's security software", sufficient? obviously not. There are still quest

Re: [clamav-users] Error 429 when updating database

2021-04-10 Thread Matus UHLAR - fantomas
On 10/04/2021 22:59, Matus UHLAR - fantomas wrote: [SNIP] it could help if we provided proper reason to upgrade tho. On 10.04.21 23:08, Gary R. Schmidt wrote: Isn't, "It's security software", sufficient? obviously not. There are still question: 1.) what may break if we upgrade? 2.) what may

Re: [clamav-users] Error 429 when updating database

2021-04-10 Thread Gary R. Schmidt
On 10/04/2021 22:59, Matus UHLAR - fantomas wrote: [SNIP] it could help if we provided proper reason to upgrade tho. Isn't, "It's security software", sufficient? Cheers, GaryB-) ___ clamav-users mailing list clamav-users

Re: [clamav-users] Error 429 when updating database

2021-04-10 Thread Matus UHLAR - fantomas
On 08.04.21 16:23, Joel Esler (jesler) via clamav-users wrote: Upgrade to 103.2. The FreshClam there is much better and will resolve the issues. On Thu, 8 Apr 2021 16:44:46 Matus UHLAR - fantomas wrote: I don't think this is easily doable for devuan ascii. (not much people want to backport ma

Re: [clamav-users] ClamAV 0.103.2 security patch release

2021-04-10 Thread Per Jessen
G.W. Haywood via clamav-users wrote: > Hi there, > > On Sat, 10 Apr 2021, Per Jessen wrote: >> G.W. Haywood wrote: >>> On Sat, 10 Apr 2021, Per Jessen wrote: >>> When I built $SUBJ just now, I see libclammspack.so.0 => /home/per/workspace/clamav-0.103.2/libclamav/.libs/li

Re: [clamav-users] ClamAV 0.103.2 security patch release

2021-04-10 Thread Per Jessen
Per Jessen wrote: > >> If this is after install, exactly how did you build it? > > I don't normally do a "make install", I copy the libraries to the > destination servers directly. I only need the libraries. Having just built and installed on another machine, this is what is causing my issue.

Re: [clamav-users] ClamAV 0.103.2 security patch release

2021-04-10 Thread G.W. Haywood via clamav-users
Hi there, On Sat, 10 Apr 2021, Per Jessen wrote: G.W. Haywood wrote: On Sat, 10 Apr 2021, Per Jessen wrote: When I built $SUBJ just now, I see libclammspack.so.0 => /home/per/workspace/clamav-0.103.2/libclamav/.libs/libclammspack.so.0 Is this before 'make install'? Yes. See below. Afte

Re: [clamav-users] ClamAV 0.103.2 security patch release

2021-04-10 Thread Per Jessen
G.W. Haywood wrote: > Hi there, > > On Sat, 10 Apr 2021, Per Jessen wrote: > >> When I built $SUBJ just now, I see >> >> libclammspack.so.0 >> => >> /home/per/workspace/clamav-0.103.2/libclamav/.libs/libclammspack.so.0 >> >> ie. with a fixed path ? How do I avoid that? > > Is this before 'make

Re: [clamav-users] ClamAV® blog: ClamAV 0.103.2 security patch release

2021-04-10 Thread Sergey
On Wednesday 07 April 2021, Joel Esler (jesler) via clamav-users wrote: > CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. Affects > 0.103.0 and 0.103.1 only. > > CVE-2021-1405: Fix for mail parser NULL-dereference crash. Affects 0.103.1 > and prior. I seems you got the CVE

Re: [clamav-users] understanding clamd.conf: TemporaryDirectory and clamonacc

2021-04-10 Thread Sergey
On Saturday 10 April 2021, G.W. Haywood via clamav-users wrote: > > Does clamonacc have to watch in /tmp ? > > No.  But we do not know what you have told clamonacc to watch because > you have not told us.  My guess is that you have told it to watch the > entire filesystem, which will cause proble

Re: [clamav-users] Error 429 when updating database

2021-04-10 Thread G.W. Haywood via clamav-users
Hi there, On Sat, 10 Apr 2021, Marko Randjelovic wrote: On Thu, 8 Apr 2021 16:44:46 Matus UHLAR - fantomas wrote: On 08.04.21 16:23, Joel Esler (jesler) via clamav-users wrote: Upgrade to 103.2. The FreshClam there is much better and will resolve the issues. I don't think this is easily do

Re: [clamav-users] understanding clamd.conf: TemporaryDirectory and clamonacc

2021-04-10 Thread G.W. Haywood via clamav-users
Hi there, On Sat, 10 Apr 2021, Sergey wrote: clamd.conf contains default setting # Optional path to the global temporary directory. # Default: system specific (usually /tmp or /var/tmp). #TemporaryDirectory /var/tmp It cause error message when clamonacc starting: It is not the TemporaryDire