ClamAV 0.101.0 beta has been posted!

Welcome to the ClamAV 0.101.0 beta!

Important notes about this release:

• Changes to the libclamav API:
• Those who build applications around our shared library will need to change how they declare and pass scanning options to libclamav. Please take a look at the change to our example code for details. 
• Many of the scanning option #defines have changed. These can be found in our clamav.h header.
• The libclamav version number has changed.
• Some of the clamd config and clamscan command line option names have changed. The original versions will still work for a time, but eventually they will be deprecated. These options in question are detailed in the NEWS document.
• A new sub-signature type called "Byte Compare". Byte Compare sub-signatures can be used to evaluate a numeric value at a given offset from the start of another (matched) sub-signature within the same logical signature. That numerical value may be interpreted from signed ascii decimal, unsigned ascii hex, or unsigned binary data relative to a match offset. Your participation in testing this feature during our beta period will be greatly appreciated. For details, see the signature writing documentation.
• Changes to our documentation. Documentation is now in Markdown and should be easier to navigate and easier to contribute to.
• Support for extraction/scanning of RAR v5.x archives.

For additional details on changes in 0.101, please read the notes in our NEWS document.

Thank you in advance for participating in the ClamAV 0.101 beta! Bugs should be brought to our attention via the clamav-devel mailing list or via bugzilla.

You may download the ClamAV 0.101.0 beta at the usual location on ClamAV.net.

ClamAV 0.100.2 has been released!

ClamAV 0.100.2 has been released! This is a patch release to address several vulnerabilities.

• Fixes for the following ClamAV vulnerabilities:
• CVE-2018-15378:
• Vulnerability in ClamAV's MEW unpacking feature that could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition on an affected device.
• Reported by Secunia Research at Flexera.
• Fix for a two-byte buffer over-read bug in ClamAV's PDF parsing code.
• Reported by Alex Gaynor.
• Fixes for the following vulnerabilities in bundled third-party libraries:
• CVE-2018-14680:
• An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.
• CVE-2018-14681:
• An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one- or two-byte overwrite.
• CVE-2018-14682:
• An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression. Additionally, 0.100.2 reverted 0.100.1's patch for CVE-2018-14679, and applied libmspack's version of the fix in its place

• Other changes:
• Some users have reported freshclam signature update failures as a result of a delay between the time the new signature database content is announced and the time that the content-delivery-network has the content available for download. To mitigate these errors, this patch release includes some modifications to freshclam to make it more lenient, and to reduce the time that freshclam will ignore a mirror when it detects an issue.
• On-Access "Extra Scanning," an opt-in minor feature of OnAccess scanning on Linux systems, has been disabled due to a known issue with resource cleanup OnAccessExtraScanning will be re-enabled in a future release when the issue is resolved. In the mean-time, users who enabled the feature in clamd.conf will see a warning informing them that the feature is not active. For details, click here.

Thank you to the following ClamAV community members for your code submissions
and bug reports:

- Alex Gaynor
- Hiroya Ito
- Laurent Delosieres, Secunia Research at Flexera