Version in base suite: 0.103.3+dfsg-0+deb11u1 Version in overlay suite: 0.103.4+dfsg-0+deb11u1 Base version: clamav_0.103.4+dfsg-0+deb11u1 Target version: clamav_0.103.5+dfsg-0+deb11u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/c/clamav/clamav_0.103.4+dfsg-0+deb11u1.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/c/clamav/clamav_0.103.5+dfsg-0+deb11u1.dsc CMakeLists.txt | 4 Makefile.am | 2 Makefile.in | 2 NEWS.md | 34 clamav-milter/CMakeLists.txt | 2 clamav-milter/Makefile.am | 2 clamav-milter/Makefile.in | 2 clamav-milter/clamav-milter.c | 26 clamav-milter/clamfi.c | 2 clamav-milter/clamfi.h | 2 clamav-milter/connpool.c | 2 clamav-milter/connpool.h | 2 clamav-milter/netcode.c | 2 clamav-milter/netcode.h | 2 clamav-milter/whitelist.c | 2 clamav-milter/whitelist.h | 2 clamav-types.h.in | 2 clamav-version.h.in | 2 clambc/CMakeLists.txt | 2 clambc/bcrun.c | 4 clamconf/CMakeLists.txt | 2 clamconf/Makefile.am | 2 clamconf/Makefile.in | 2 clamconf/clamconf.c | 4 clamd/CMakeLists.txt | 2 clamd/Makefile.am | 2 clamd/Makefile.in | 2 clamd/clamd.c | 94 +- clamd/clamd_others.c | 2 clamd/clamd_others.h | 2 clamd/localserver.c | 2 clamd/localserver.h | 2 clamd/scanner.c | 2 clamd/scanner.h | 2 clamd/server-th.c | 5 clamd/server.h | 2 clamd/session.c | 2 clamd/session.h | 2 clamd/shared.h | 2 clamd/tcpserver.c | 2 clamd/tcpserver.h | 2 clamd/thrmgr.c | 2 clamd/thrmgr.h | 2 clamdscan/CMakeLists.txt | 2 clamdscan/Makefile.am | 2 clamdscan/Makefile.in | 2 clamdscan/clamdscan.c | 4 clamdscan/client.c | 2 clamdscan/client.h | 2 clamdscan/proto.c | 2 clamdscan/proto.h | 2 clamdtop/CMakeLists.txt | 2 clamdtop/clamdtop.c | 4 clamonacc/CMakeLists.txt | 2 clamonacc/Makefile.am | 2 clamonacc/Makefile.in | 2 clamonacc/clamonacc.c | 4 clamonacc/clamonacc.h | 2 clamonacc/client/client.c | 2 clamonacc/client/client.h | 2 clamonacc/client/socket.c | 2 clamonacc/client/socket.h | 2 clamonacc/fanotif/fanotif.c | 2 clamonacc/fanotif/fanotif.h | 2 clamonacc/inotif/hash.c | 2 clamonacc/inotif/hash.h | 2 clamonacc/inotif/inotif.c | 4 clamonacc/inotif/inotif.h | 2 clamonacc/misc/utils.c | 2 clamonacc/misc/utils.h | 2 clamonacc/scan/onas_queue.c | 2 clamonacc/scan/onas_queue.h | 2 clamonacc/scan/thread.c | 2 clamonacc/scan/thread.h | 2 clamscan/CMakeLists.txt | 2 clamscan/Makefile.am | 2 clamscan/Makefile.in | 2 clamscan/clamscan.c | 4 clamscan/global.h | 2 clamscan/manager.c | 2 clamscan/manager.h | 2 clamsubmit/CMakeLists.txt | 2 clamsubmit/clamsubmit.c | 4 configure | 26 configure.ac | 4 database/Makefile.am | 2 database/Makefile.in | 2 debian/.git-dpm | 14 debian/changelog | 8 debian/libclamav9.symbols | 414 +++++----- debian/patches/Add-support-for-LLVM-3.7.patch | 6 debian/patches/Add-support-for-LLVM-3.8.patch | 6 debian/patches/Add-support-for-LLVM-3.9.patch | 4 debian/patches/Change-paths-in-sample-conf-file-to-match-Debian.patch | 2 debian/patches/Fix-ck_assert_msg-call.patch | 4 debian/patches/add-support-for-system-tomsfastmath.patch | 6 debian/patches/clamd_dont_depend_on_clamav_demon_socket.patch | 2 debian/rules | 2 docs/Makefile.am | 2 docs/Makefile.in | 2 docs/html/404.html | 18 docs/html/Introduction.html | 18 docs/html/appendix/Appendix.html | 18 docs/html/appendix/Authenticode.html | 18 docs/html/appendix/CvdPrivateMirror.html | 18 docs/html/appendix/FileTypes.html | 18 docs/html/appendix/FunctionalityLevels.html | 127 +-- docs/html/appendix/Terminology.html | 18 docs/html/css/general.css | 1 docs/html/faq/faq-cvd.html | 18 docs/html/faq/faq-eol.html | 28 docs/html/faq/faq-freshclam.html | 18 docs/html/faq/faq-ignore.html | 18 docs/html/faq/faq-misc.html | 18 docs/html/faq/faq-ml.html | 18 docs/html/faq/faq-pua.html | 18 docs/html/faq/faq-safebrowsing.html | 18 docs/html/faq/faq-scan-alerts.html | 23 docs/html/faq/faq-troubleshoot.html | 18 docs/html/faq/faq-uninstall.html | 18 docs/html/faq/faq-upgrade.html | 18 docs/html/faq/faq-whichversion.html | 18 docs/html/faq/faq-win32.html | 18 docs/html/faq/faq.html | 18 docs/html/index.html | 18 docs/html/manual/Development.html | 18 docs/html/manual/Development/Contribute.html | 18 docs/html/manual/Development/build-installer-packages.html | 18 docs/html/manual/Development/clamav-git-work-flow.html | 18 docs/html/manual/Development/code-coverage.html | 18 docs/html/manual/Development/development-builds.html | 18 docs/html/manual/Development/fuzzing-sanitizers.html | 18 docs/html/manual/Development/github-pr-basics.html | 18 docs/html/manual/Development/libclamav.html | 18 docs/html/manual/Development/performance-profiling.html | 18 docs/html/manual/Development/personal-forks.html | 18 docs/html/manual/Development/testing-pull-requests.html | 18 docs/html/manual/Development/tips-and-tricks.html | 18 docs/html/manual/Installing.html | 18 docs/html/manual/Installing/Add-clamav-user.html | 18 docs/html/manual/Installing/Community-projects.html | 18 docs/html/manual/Installing/Docker.html | 18 docs/html/manual/Installing/Installing-from-source-Unix-old.html | 18 docs/html/manual/Installing/Installing-from-source-Unix.html | 21 docs/html/manual/Installing/Installing-from-source-Windows.html | 18 docs/html/manual/Installing/Packages.html | 18 docs/html/manual/OnAccess.html | 18 docs/html/manual/Signatures.html | 18 docs/html/manual/Signatures/AllowLists.html | 18 docs/html/manual/Signatures/AuthenticodeRules.html | 18 docs/html/manual/Signatures/BodySignatureFormat.html | 18 docs/html/manual/Signatures/BytecodeSignatures.html | 18 docs/html/manual/Signatures/ContainerMetadata.html | 18 docs/html/manual/Signatures/DatabaseInfo.html | 18 docs/html/manual/Signatures/DynamicConfig.html | 18 docs/html/manual/Signatures/EncryptedArchives.html | 18 docs/html/manual/Signatures/ExtendedSignatures.html | 18 docs/html/manual/Signatures/FileTypeMagic.html | 18 docs/html/manual/Signatures/HashSignatures.html | 18 docs/html/manual/Signatures/LogicalSignatures.html | 18 docs/html/manual/Signatures/PhishSigs.html | 18 docs/html/manual/Signatures/YaraRules.html | 18 docs/html/manual/Usage.html | 18 docs/html/manual/Usage/Configuration.html | 18 docs/html/manual/Usage/ReportABug.html | 18 docs/html/manual/Usage/Scanning.html | 20 docs/html/manual/Usage/Services.html | 18 docs/html/manual/Usage/SignatureManagement.html | 18 docs/html/print.html | 147 ++- docs/html/searchindex.js | 2 docs/html/searchindex.json | 2 etc/Makefile.am | 2 etc/Makefile.in | 2 examples/CMakeLists.txt | 2 examples/ex1.c | 2 freshclam/CMakeLists.txt | 2 freshclam/Makefile.am | 2 freshclam/Makefile.in | 2 freshclam/freshclam.c | 4 freshclam/notify.c | 2 freshclam/notify.h | 2 fuzz/clamav_dbload_fuzzer.cpp | 2 fuzz/clamav_scanfile_fuzzer.cpp | 2 fuzz/clamav_scanmap_fuzzer.cpp | 25 fuzz/run_fuzzer_tests.py | 2 libclamav/7z_iface.c | 2 libclamav/7z_iface.h | 2 libclamav/CMakeLists.txt | 2 libclamav/Makefile.am | 2 libclamav/Makefile.in | 2 libclamav/adc.c | 2 libclamav/adc.h | 2 libclamav/apm.c | 2 libclamav/apm.h | 2 libclamav/arc4.c | 2 libclamav/arc4.h | 2 libclamav/asn1.c | 2 libclamav/asn1.h | 2 libclamav/aspack.c | 2 libclamav/aspack.h | 2 libclamav/autoit.c | 2 libclamav/autoit.h | 2 libclamav/bcfeatures.h | 2 libclamav/binhex.c | 2 libclamav/binhex.h | 2 libclamav/blob.c | 2 libclamav/blob.h | 2 libclamav/builtin_bytecodes.h | 2 libclamav/bytecode.c | 2 libclamav/bytecode.h | 2 libclamav/bytecode_api.c | 2 libclamav/bytecode_api.h | 3 libclamav/bytecode_api_decl.c | 2 libclamav/bytecode_api_impl.h | 2 libclamav/bytecode_detect.c | 2 libclamav/bytecode_detect.h | 2 libclamav/bytecode_hooks.h | 2 libclamav/bytecode_nojit.c | 2 libclamav/bytecode_priv.h | 2 libclamav/bytecode_vm.c | 2 libclamav/c++/ClamBCDiagnostics.h | 11 libclamav/c++/ClamBCRTChecks.cpp | 2 libclamav/c++/Makefile.in | 2 libclamav/c++/bytecode2llvm.cpp | 2 libclamav/cache.c | 2 libclamav/cache.h | 2 libclamav/clamav.h | 2 libclamav/clambc.h | 2 libclamav/cpio.c | 2 libclamav/cpio.h | 2 libclamav/crtmgr.c | 2 libclamav/crtmgr.h | 2 libclamav/cvd.c | 2 libclamav/cvd.h | 2 libclamav/dconf.c | 2 libclamav/dconf.h | 2 libclamav/default.h | 2 libclamav/disasm-common.h | 2 libclamav/disasm.c | 2 libclamav/disasm.h | 2 libclamav/disasmpriv.h | 2 libclamav/dlp.c | 2 libclamav/dlp.h | 2 libclamav/dmg.c | 2 libclamav/dmg.h | 2 libclamav/dsig.c | 2 libclamav/dsig.h | 2 libclamav/egg.c | 2 libclamav/egg.h | 2 libclamav/elf.c | 2 libclamav/elf.h | 2 libclamav/encoding_aliases.h | 2 libclamav/entconv.c | 2 libclamav/entconv.h | 4 libclamav/entitylist.h | 2 libclamav/events.c | 2 libclamav/events.h | 2 libclamav/execs.c | 2 libclamav/execs.h | 2 libclamav/explode.c | 2 libclamav/explode.h | 2 libclamav/filetypes.c | 2 libclamav/filetypes.h | 2 libclamav/filetypes_int.h | 2 libclamav/filtering.c | 2 libclamav/filtering.h | 2 libclamav/fmap.c | 2 libclamav/fmap.h | 2 libclamav/fpu.c | 2 libclamav/fpu.h | 2 libclamav/fsg.c | 2 libclamav/fsg.h | 2 libclamav/gif.c | 2 libclamav/gif.h | 2 libclamav/gpt.c | 2 libclamav/gpt.h | 2 libclamav/hashtab.c | 2 libclamav/hashtab.h | 2 libclamav/hfsplus.c | 2 libclamav/hfsplus.h | 2 libclamav/htmlnorm.c | 2 libclamav/htmlnorm.h | 2 libclamav/hwp.c | 2 libclamav/hwp.h | 2 libclamav/iowrap.c | 2 libclamav/iowrap.h | 2 libclamav/ishield.c | 2 libclamav/ishield.h | 2 libclamav/iso9660.c | 2 libclamav/iso9660.h | 2 libclamav/jpeg.c | 2 libclamav/jpeg.h | 2 libclamav/json_api.c | 2 libclamav/json_api.h | 2 libclamav/jsparse/js-norm.c | 4 libclamav/jsparse/js-norm.h | 2 libclamav/jsparse/lexglobal.h | 2 libclamav/jsparse/textbuf.h | 2 libclamav/libclamav_main.c | 2 libclamav/libmspack.c | 68 + libclamav/line.c | 2 libclamav/line.h | 2 libclamav/lzma_iface.c | 2 libclamav/lzma_iface.h | 2 libclamav/macho.c | 2 libclamav/macho.h | 2 libclamav/matcher-ac.c | 4 libclamav/matcher-ac.h | 2 libclamav/matcher-bm.c | 2 libclamav/matcher-bm.h | 2 libclamav/matcher-byte-comp.c | 2 libclamav/matcher-byte-comp.h | 2 libclamav/matcher-hash.c | 2 libclamav/matcher-hash.h | 2 libclamav/matcher-pcre.c | 2 libclamav/matcher-pcre.h | 2 libclamav/matcher.c | 2 libclamav/matcher.h | 2 libclamav/mbox.c | 2 libclamav/mbox.h | 2 libclamav/mbr.c | 2 libclamav/mbr.h | 2 libclamav/message.c | 2 libclamav/message.h | 2 libclamav/mew.c | 2 libclamav/mew.h | 2 libclamav/mpool.c | 2 libclamav/mpool.h | 2 libclamav/msdoc.c | 2 libclamav/msdoc.h | 2 libclamav/msexpand.c | 2 libclamav/msexpand.h | 2 libclamav/msxml.c | 2 libclamav/msxml.h | 2 libclamav/msxml_parser.c | 2 libclamav/msxml_parser.h | 2 libclamav/ole2_extract.c | 2 libclamav/ole2_extract.h | 2 libclamav/ooxml.c | 4 libclamav/ooxml.h | 2 libclamav/openioc.c | 2 libclamav/openioc.h | 2 libclamav/others.c | 2 libclamav/others.h | 6 libclamav/others_common.c | 2 libclamav/packlibs.c | 2 libclamav/packlibs.h | 2 libclamav/partition_intersection.c | 2 libclamav/partition_intersection.h | 2 libclamav/pdf.c | 2 libclamav/pdf.h | 2 libclamav/pdfdecode.c | 2 libclamav/pdfdecode.h | 8 libclamav/pdfng.c | 2 libclamav/pe.c | 2 libclamav/pe.h | 2 libclamav/pe_icons.c | 2 libclamav/pe_icons.h | 2 libclamav/pe_structs.h | 2 libclamav/perflogging.c | 2 libclamav/perflogging.h | 2 libclamav/petite.c | 2 libclamav/petite.h | 2 libclamav/phish_domaincheck_db.c | 2 libclamav/phish_domaincheck_db.h | 2 libclamav/phish_whitelist.c | 2 libclamav/phish_whitelist.h | 2 libclamav/phishcheck.c | 2 libclamav/phishcheck.h | 2 libclamav/png.c | 6 libclamav/png.h | 2 libclamav/readdb.c | 6 libclamav/readdb.h | 2 libclamav/rebuildpe.c | 2 libclamav/rebuildpe.h | 2 libclamav/regex_list.c | 2 libclamav/regex_list.h | 2 libclamav/regex_pcre.c | 2 libclamav/regex_pcre.h | 2 libclamav/regex_suffix.c | 2 libclamav/regex_suffix.h | 2 libclamav/rtf.c | 2 libclamav/rtf.h | 2 libclamav/scanners.c | 6 libclamav/scanners.h | 2 libclamav/sf_base64decode.c | 2 libclamav/sf_base64decode.h | 2 libclamav/sis.c | 2 libclamav/sis.h | 2 libclamav/special.c | 2 libclamav/special.h | 2 libclamav/spin.c | 2 libclamav/spin.h | 2 libclamav/str.c | 2 libclamav/str.h | 2 libclamav/swf.c | 2 libclamav/swf.h | 2 libclamav/table.c | 2 libclamav/table.h | 2 libclamav/text.c | 2 libclamav/text.h | 2 libclamav/textdet.c | 2 libclamav/textdet.h | 2 libclamav/textnorm.c | 2 libclamav/textnorm.h | 2 libclamav/tiff.c | 2 libclamav/tiff.h | 2 libclamav/tnef.c | 2 libclamav/tnef.h | 2 libclamav/type_desc.h | 2 libclamav/unarj.c | 2 libclamav/unarj.h | 2 libclamav/uniq.c | 2 libclamav/uniq.h | 2 libclamav/unsp.c | 2 libclamav/unsp.h | 2 libclamav/untar.c | 2 libclamav/untar.h | 2 libclamav/unzip.c | 2 libclamav/unzip.h | 2 libclamav/upack.c | 2 libclamav/upack.h | 2 libclamav/upx.c | 2 libclamav/upx.h | 2 libclamav/uuencode.c | 2 libclamav/uuencode.h | 2 libclamav/vba_extract.c | 2 libclamav/vba_extract.h | 2 libclamav/version.h | 2 libclamav/wwunpack.c | 2 libclamav/wwunpack.h | 2 libclamav/www.c | 2 libclamav/xar.c | 2 libclamav/xar.h | 2 libclamav/xlm_extract.c | 2 libclamav/xlm_extract.h | 2 libclamav/xz_iface.c | 2 libclamav/xz_iface.h | 2 libclamav/yara_clam.h | 2 libclamav/yara_grammar.y | 2 libclamav/yara_lexer.l | 2 libclamav/yara_parser.c | 2 libclamav/yc.c | 2 libclamav/yc.h | 2 libclamunrar_iface/unrar_iface.cpp | 2 libclamunrar_iface/unrar_iface.h | 2 libfreshclam/CMakeLists.txt | 2 libfreshclam/Makefile.am | 2 libfreshclam/Makefile.in | 2 libfreshclam/dns.c | 2 libfreshclam/dns.h | 2 libfreshclam/libfreshclam.c | 2 libfreshclam/libfreshclam.h | 2 libfreshclam/libfreshclam_internal.c | 14 libfreshclam/libfreshclam_internal.h | 2 libfreshclam/libfreshclam_main.c | 2 m4/reorganization/version.m4 | 2 shared/CMakeLists.txt | 2 shared/actions.c | 2 shared/actions.h | 2 shared/cert_util.c | 2 shared/cert_util_internal.h | 2 shared/clamdcom.c | 2 shared/clamdcom.h | 2 shared/fdpassing.h | 2 shared/hostid.c | 2 shared/hostid.h | 2 shared/linux/cert_util_linux.c | 2 shared/mac/cert_util_mac.m | 2 shared/misc.c | 19 shared/misc.h | 6 shared/optparser.c | 4 shared/optparser.h | 2 shared/output.c | 2 shared/output.h | 2 shared/tar.c | 2 shared/tar.h | 2 shared/win/cert_util_win.c | 13 sigtool/CMakeLists.txt | 2 sigtool/Makefile.am | 2 sigtool/Makefile.in | 2 sigtool/sigtool.c | 16 unit_tests/check_bytecode.c | 2 unit_tests/check_clamd.c | 2 unit_tests/check_disasm.c | 2 unit_tests/check_fpu_endian.c | 2 unit_tests/check_htmlnorm.c | 2 unit_tests/check_jsnorm.c | 4 unit_tests/check_matchers.c | 2 unit_tests/check_regex.c | 2 unit_tests/check_str.c | 2 unit_tests/check_uniq.c | 2 492 files changed, 2242 insertions(+), 921 deletions(-) diff -Nru clamav-0.103.4+dfsg/CMakeLists.txt clamav-0.103.5+dfsg/CMakeLists.txt --- clamav-0.103.4+dfsg/CMakeLists.txt 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/CMakeLists.txt 2022-01-10 23:17:45.000000000 +0000 @@ -1,4 +1,4 @@ -# Copyright (C) 2019-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2019-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. cmake_minimum_required( VERSION 3.12...3.13 ) set(CMAKE_C_STANDARD 90) @@ -15,7 +15,7 @@ set(VERSION_SUFFIX "") project( ClamAV - VERSION "0.103.4" + VERSION "0.103.5" DESCRIPTION "ClamAV open source email, web, and end-point anti-virus toolkit." ) set(CMAKE_MODULE_PATH "${CMAKE_CURRENT_SOURCE_DIR}/cmake" ${CMAKE_MODULE_PATH}) diff -Nru clamav-0.103.4+dfsg/Makefile.am clamav-0.103.5+dfsg/Makefile.am --- clamav-0.103.4+dfsg/Makefile.am 2021-11-13 20:57:13.000000000 +0000 +++ clamav-0.103.5+dfsg/Makefile.am 2022-01-12 19:53:22.000000000 +0000 @@ -1,5 +1,5 @@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2002-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/Makefile.in clamav-0.103.5+dfsg/Makefile.in --- clamav-0.103.4+dfsg/Makefile.in 2021-11-13 20:57:13.000000000 +0000 +++ clamav-0.103.5+dfsg/Makefile.in 2022-01-12 19:53:22.000000000 +0000 @@ -15,7 +15,7 @@ @SET_MAKE@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2002-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/NEWS.md clamav-0.103.5+dfsg/NEWS.md --- clamav-0.103.4+dfsg/NEWS.md 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/NEWS.md 2022-01-10 23:17:45.000000000 +0000 @@ -3,6 +3,40 @@ Note: This file refers to the source tarball. Things described here may differ slightly from the binary packages. +## 0.103.5 + +ClamAV 0.103.5 is a critical patch release with the following fixes: + +- [CVE-2022-20698](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20698): + Fix for invalid pointer read that may cause a crash. + Affects 0.104.1, 0.103.4 and prior when ClamAV is compiled with libjson-c and + the `CL_SCAN_GENERAL_COLLECT_METADATA` scan option (the `clamscan --gen-json` + option) is enabled. + + Cisco would like to thank Laurent Delosieres of ManoMano for reporting this + vulnerability. + +- Fixed ability to disable the file size limit with libclamav C API, like this: + ```c + cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0); + ``` + This issue didn't impact ClamD or ClamScan which also can disable the limit by + setting it to zero using `MaxFileSize 0` in `clamd.conf` for ClamD, or + `clamscan --max-filesize=0` for ClamScan. + + Note: Internally, the max file size is still set to 2 GiB. Disabling the limit + for a scan will fall back on the internal 2 GiB limitation. + +- Increased the maximum line length for ClamAV config files from 512 bytes to + 1024 bytes to allow for longer config option strings. + +- SigTool: Fix insufficient buffer size for `--list-sigs` that caused a failure + when listing a database containing one or more very long signatures. + This fix was backported from 0.104. + +Special thanks to the following for code contributions and bug reports: +- Laurent Delosieres + ## 0.103.4 ClamAV 0.103.4 is a critical patch release with the following fixes: diff -Nru clamav-0.103.4+dfsg/clamav-milter/CMakeLists.txt clamav-0.103.5+dfsg/clamav-milter/CMakeLists.txt --- clamav-0.103.4+dfsg/clamav-milter/CMakeLists.txt 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-milter/CMakeLists.txt 2022-01-10 23:17:45.000000000 +0000 @@ -1,4 +1,4 @@ -# Copyright (C) 2020-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2020-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. cmake_minimum_required( VERSION 3.12...3.13 ) diff -Nru clamav-0.103.4+dfsg/clamav-milter/Makefile.am clamav-0.103.5+dfsg/clamav-milter/Makefile.am --- clamav-0.103.4+dfsg/clamav-milter/Makefile.am 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-milter/Makefile.am 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2003-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/clamav-milter/Makefile.in clamav-0.103.5+dfsg/clamav-milter/Makefile.in --- clamav-0.103.4+dfsg/clamav-milter/Makefile.in 2021-11-02 15:48:15.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-milter/Makefile.in 2022-01-10 23:18:12.000000000 +0000 @@ -15,7 +15,7 @@ @SET_MAKE@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2003-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/clamav-milter/clamav-milter.c clamav-0.103.5+dfsg/clamav-milter/clamav-milter.c --- clamav-0.103.4+dfsg/clamav-milter/clamav-milter.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-milter/clamav-milter.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2008-2013 Sourcefire, Inc. * * Author: aCaB @@ -96,7 +96,7 @@ sigset_t sigset; struct sigaction act; - const char * user_name = NULL; + const char *user_name = NULL; cl_initialize_crypto(); @@ -122,7 +122,7 @@ printf("\n"); printf(" Clam AntiVirus: Milter Mail Scanner %s\n", get_version()); printf(" By The ClamAV Team: https://www.clamav.net/about.html#credits\n"); - printf(" (C) 2021 Cisco Systems, Inc.\n"); + printf(" (C) 2022 Cisco Systems, Inc.\n"); printf("\n"); printf(" %s [-c ]\n\n", argv[0]); printf("\n"); @@ -158,7 +158,7 @@ } free(pt); - if ((opt = optget(opts, "User"))->enabled){ + if ((opt = optget(opts, "User"))->enabled) { user_name = opt->strarg; } @@ -419,7 +419,7 @@ if ((opt = optget(opts, "PidFile"))->enabled) { FILE *fd; mode_t old_umask = umask(0002); - int err = 0; + int err = 0; if ((fd = fopen(opt->strarg, "w")) == NULL) { logg("!Can't save PID in file %s\n", opt->strarg); @@ -434,14 +434,14 @@ umask(old_umask); #ifndef _WIN32 - if (0 == err){ + if (0 == err) { /*If the file has already been created by a different user, it will just be * rewritten by us, but not change the ownership, so do that explicitly. */ - if (0 == geteuid()){ - struct passwd * pw = getpwuid(0); - int ret = lchown(opt->strarg, pw->pw_uid, pw->pw_gid); - if (ret){ + if (0 == geteuid()) { + struct passwd *pw = getpwuid(0); + int ret = lchown(opt->strarg, pw->pw_uid, pw->pw_gid); + if (ret) { logg("!Can't change ownership of PID file %s '%s'\n", opt->strarg, strerror(errno)); err = 1; } @@ -449,7 +449,7 @@ } #endif /*_WIN32*/ - if (err){ + if (err) { localnets_free(); whitelist_free(); logg_close(); @@ -460,7 +460,7 @@ #ifndef _WIN32 dropPrivRet = drop_privileges(user_name, logg_file); - if (dropPrivRet){ + if (dropPrivRet) { optfree(opts); return dropPrivRet; } @@ -468,7 +468,7 @@ /* We have been daemonized, and initialization is done. Signal * the parent process so that it can exit cleanly. */ - if (parentPid != getpid()){ //we have been daemonized + if (parentPid != getpid()) { //we have been daemonized daemonize_signal_parent(parentPid); } #endif diff -Nru clamav-0.103.4+dfsg/clamav-milter/clamfi.c clamav-0.103.5+dfsg/clamav-milter/clamfi.c --- clamav-0.103.4+dfsg/clamav-milter/clamfi.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-milter/clamfi.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2008-2013 Sourcefire, Inc. * * Author: aCaB diff -Nru clamav-0.103.4+dfsg/clamav-milter/clamfi.h clamav-0.103.5+dfsg/clamav-milter/clamfi.h --- clamav-0.103.4+dfsg/clamav-milter/clamfi.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-milter/clamfi.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2008-2013 Sourcefire, Inc. * * Author: aCaB diff -Nru clamav-0.103.4+dfsg/clamav-milter/connpool.c clamav-0.103.5+dfsg/clamav-milter/connpool.c --- clamav-0.103.4+dfsg/clamav-milter/connpool.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-milter/connpool.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2008-2013 Sourcefire, Inc. * * Author: aCaB diff -Nru clamav-0.103.4+dfsg/clamav-milter/connpool.h clamav-0.103.5+dfsg/clamav-milter/connpool.h --- clamav-0.103.4+dfsg/clamav-milter/connpool.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-milter/connpool.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2008-2013 Sourcefire, Inc. * * Author: aCaB diff -Nru clamav-0.103.4+dfsg/clamav-milter/netcode.c clamav-0.103.5+dfsg/clamav-milter/netcode.c --- clamav-0.103.4+dfsg/clamav-milter/netcode.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-milter/netcode.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2008-2013 Sourcefire, Inc. * * Author: aCaB diff -Nru clamav-0.103.4+dfsg/clamav-milter/netcode.h clamav-0.103.5+dfsg/clamav-milter/netcode.h --- clamav-0.103.4+dfsg/clamav-milter/netcode.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-milter/netcode.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2008-2013 Sourcefire, Inc. * * Author: aCaB diff -Nru clamav-0.103.4+dfsg/clamav-milter/whitelist.c clamav-0.103.5+dfsg/clamav-milter/whitelist.c --- clamav-0.103.4+dfsg/clamav-milter/whitelist.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-milter/whitelist.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2008-2013 Sourcefire, Inc. * * Author: aCaB diff -Nru clamav-0.103.4+dfsg/clamav-milter/whitelist.h clamav-0.103.5+dfsg/clamav-milter/whitelist.h --- clamav-0.103.4+dfsg/clamav-milter/whitelist.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-milter/whitelist.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2008-2013 Sourcefire, Inc. * * Author: aCaB diff -Nru clamav-0.103.4+dfsg/clamav-types.h.in clamav-0.103.5+dfsg/clamav-types.h.in --- clamav-0.103.4+dfsg/clamav-types.h.in 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-types.h.in 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, Micah Snyder diff -Nru clamav-0.103.4+dfsg/clamav-version.h.in clamav-0.103.5+dfsg/clamav-version.h.in --- clamav-0.103.4+dfsg/clamav-version.h.in 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamav-version.h.in 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2019-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2019-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Micah Snyder * diff -Nru clamav-0.103.4+dfsg/clambc/CMakeLists.txt clamav-0.103.5+dfsg/clambc/CMakeLists.txt --- clamav-0.103.4+dfsg/clambc/CMakeLists.txt 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clambc/CMakeLists.txt 2022-01-10 23:17:45.000000000 +0000 @@ -1,4 +1,4 @@ -# Copyright (C) 2020-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2020-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. cmake_minimum_required( VERSION 3.12...3.13 ) diff -Nru clamav-0.103.4+dfsg/clambc/bcrun.c clamav-0.103.5+dfsg/clambc/bcrun.c --- clamav-0.103.4+dfsg/clambc/bcrun.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clambc/bcrun.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,7 +1,7 @@ /* * ClamAV bytecode handler tool. * - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2009-2013 Sourcefire, Inc. * * Authors: Török Edvin @@ -52,7 +52,7 @@ printf("\n"); printf(" Clam AntiVirus: Bytecode Testing Tool %s\n", get_version()); printf(" By The ClamAV Team: https://www.clamav.net/about.html#credits\n"); - printf(" (C) 2021 Cisco Systems, Inc.\n"); + printf(" (C) 2022 Cisco Systems, Inc.\n"); printf("\n"); printf(" clambc [function] [param1 ...]\n"); printf("\n"); diff -Nru clamav-0.103.4+dfsg/clamconf/CMakeLists.txt clamav-0.103.5+dfsg/clamconf/CMakeLists.txt --- clamav-0.103.4+dfsg/clamconf/CMakeLists.txt 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamconf/CMakeLists.txt 2022-01-10 23:17:45.000000000 +0000 @@ -1,4 +1,4 @@ -# Copyright (C) 2020-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2020-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. cmake_minimum_required( VERSION 3.12...3.13 ) diff -Nru clamav-0.103.4+dfsg/clamconf/Makefile.am clamav-0.103.5+dfsg/clamconf/Makefile.am --- clamav-0.103.4+dfsg/clamconf/Makefile.am 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamconf/Makefile.am 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2006-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/clamconf/Makefile.in clamav-0.103.5+dfsg/clamconf/Makefile.in --- clamav-0.103.4+dfsg/clamconf/Makefile.in 2021-11-02 15:48:15.000000000 +0000 +++ clamav-0.103.5+dfsg/clamconf/Makefile.in 2022-01-10 23:18:12.000000000 +0000 @@ -15,7 +15,7 @@ @SET_MAKE@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2006-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/clamconf/clamconf.c clamav-0.103.5+dfsg/clamconf/clamconf.c --- clamav-0.103.4+dfsg/clamconf/clamconf.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamconf/clamconf.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2009-2013 Sourcefire, Inc. * * Author: Tomasz Kojm @@ -207,7 +207,7 @@ printf("\n"); printf(" Clam AntiVirus: Configuration Tool %s\n", get_version()); printf(" By The ClamAV Team: https://www.clamav.net/about.html#credits\n"); - printf(" (C) 2021 Cisco Systems, Inc.\n"); + printf(" (C) 2022 Cisco Systems, Inc.\n"); printf("\n"); printf(" --help -h Show this help\n"); printf(" --version -V Show version\n"); diff -Nru clamav-0.103.4+dfsg/clamd/CMakeLists.txt clamav-0.103.5+dfsg/clamd/CMakeLists.txt --- clamav-0.103.4+dfsg/clamd/CMakeLists.txt 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/CMakeLists.txt 2022-01-10 23:17:45.000000000 +0000 @@ -1,4 +1,4 @@ -# Copyright (C) 2020-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2020-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. cmake_minimum_required( VERSION 3.12...3.13 ) diff -Nru clamav-0.103.4+dfsg/clamd/Makefile.am clamav-0.103.5+dfsg/clamd/Makefile.am --- clamav-0.103.4+dfsg/clamd/Makefile.am 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/Makefile.am 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2002-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/clamd/Makefile.in clamav-0.103.5+dfsg/clamd/Makefile.in --- clamav-0.103.4+dfsg/clamd/Makefile.in 2021-11-02 15:48:15.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/Makefile.in 2022-01-10 23:18:12.000000000 +0000 @@ -15,7 +15,7 @@ @SET_MAKE@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2002-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/clamd/clamd.c clamav-0.103.5+dfsg/clamd/clamd.c --- clamav-0.103.4+dfsg/clamd/clamd.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/clamd.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm @@ -80,7 +80,6 @@ #include #endif - short debug_mode = 0, logok = 0; short foreground = -1; @@ -89,7 +88,7 @@ printf("\n"); printf(" Clam AntiVirus: Daemon %s\n", get_version()); printf(" By The ClamAV Team: https://www.clamav.net/about.html#credits\n"); - printf(" (C) 2021 Cisco Systems, Inc.\n"); + printf(" (C) 2022 Cisco Systems, Inc.\n"); printf("\n"); printf(" clamd [options]\n"); printf("\n"); @@ -144,9 +143,9 @@ #ifdef C_LINUX STATBUF sb; #endif - pid_t mainpid = 0; - mode_t old_umask = 0; - const char * user_name = NULL; + pid_t mainpid = 0; + mode_t old_umask = 0; + const char *user_name = NULL; if (check_flevel()) exit(1); @@ -156,8 +155,8 @@ sa.sa_handler = SIG_IGN; sigaction(SIGHUP, &sa, NULL); sigaction(SIGUSR2, &sa, NULL); - if(!setlocale(LC_CTYPE, "")) { - mprintf("^Failed to set locale\n"); + if (!setlocale(LC_CTYPE, "")) { + mprintf("^Failed to set locale\n"); } #endif @@ -214,7 +213,7 @@ } free(pt); - if ((opt = optget(opts, "User"))->enabled){ + if ((opt = optget(opts, "User"))->enabled) { user_name = opt->strarg; } @@ -252,48 +251,47 @@ logg_file = NULL; } - #ifndef WIN32 - /* fork into background */ - if (foreground == -1) { - if (optget(opts, "Foreground")->enabled) { - foreground = 1; - } else { - foreground = 0; - } + /* fork into background */ + if (foreground == -1) { + if (optget(opts, "Foreground")->enabled) { + foreground = 1; + } else { + foreground = 0; } - if (foreground == 0) { - int daemonizeRet = 0; + } + if (foreground == 0) { + int daemonizeRet = 0; #ifdef C_BSD - /* workaround for OpenBSD bug, see https://wwws.clamav.net/bugzilla/show_bug.cgi?id=885 */ - for (ret = 0; (unsigned int)ret < nlsockets; ret++) { - if (fcntl(lsockets[ret], F_SETFL, fcntl(lsockets[ret], F_GETFL) | O_NONBLOCK) == -1) { - logg("!fcntl for lsockets[] failed\n"); - close(lsockets[ret]); - ret = 1; - break; - } + /* workaround for OpenBSD bug, see https://wwws.clamav.net/bugzilla/show_bug.cgi?id=885 */ + for (ret = 0; (unsigned int)ret < nlsockets; ret++) { + if (fcntl(lsockets[ret], F_SETFL, fcntl(lsockets[ret], F_GETFL) | O_NONBLOCK) == -1) { + logg("!fcntl for lsockets[] failed\n"); + close(lsockets[ret]); + ret = 1; + break; } + } #endif - gengine = engine; - atexit(free_engine); - daemonizeRet = daemonize_parent_wait(user_name, logg_file); - if (daemonizeRet < 0){ - logg("!daemonize() failed: %s\n", strerror(errno)); - return 1; - } - gengine = NULL; + gengine = engine; + atexit(free_engine); + daemonizeRet = daemonize_parent_wait(user_name, logg_file); + if (daemonizeRet < 0) { + logg("!daemonize() failed: %s\n", strerror(errno)); + return 1; + } + gengine = NULL; #ifdef C_BSD - for (ret = 0; (unsigned int)ret < nlsockets; ret++) { - if (fcntl(lsockets[ret], F_SETFL, fcntl(lsockets[ret], F_GETFL) & ~O_NONBLOCK) == -1) { - logg("!fcntl for lsockets[] failed\n"); - close(lsockets[ret]); - ret = 1; - break; - } + for (ret = 0; (unsigned int)ret < nlsockets; ret++) { + if (fcntl(lsockets[ret], F_SETFL, fcntl(lsockets[ret], F_GETFL) & ~O_NONBLOCK) == -1) { + logg("!fcntl for lsockets[] failed\n"); + close(lsockets[ret]); + ret = 1; + break; } -#endif } +#endif + } #endif @@ -321,10 +319,10 @@ /*If the file has already been created by a different user, it will just be * rewritten by us, but not change the ownership, so do that explicitly. */ - if (0 == geteuid()){ - struct passwd * pw = getpwuid(0); - int ret = lchown(opt->strarg, pw->pw_uid, pw->pw_gid); - if (ret){ + if (0 == geteuid()) { + struct passwd *pw = getpwuid(0); + int ret = lchown(opt->strarg, pw->pw_uid, pw->pw_gid); + if (ret) { logg("!Can't change ownership of PID file %s '%s'\n", opt->strarg, strerror(errno)); exit(2); } @@ -782,7 +780,7 @@ * now, since everything is initialized.*/ /*signal the parent process.*/ - if (parentPid != getpid()){ + if (parentPid != getpid()) { daemonize_signal_parent(parentPid); } #endif diff -Nru clamav-0.103.4+dfsg/clamd/clamd_others.c clamav-0.103.5+dfsg/clamd/clamd_others.c --- clamav-0.103.4+dfsg/clamd/clamd_others.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/clamd_others.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, Trog, Török Edvin diff -Nru clamav-0.103.4+dfsg/clamd/clamd_others.h clamav-0.103.5+dfsg/clamd/clamd_others.h --- clamav-0.103.4+dfsg/clamd/clamd_others.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/clamd_others.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, Trog, Török Edvin diff -Nru clamav-0.103.4+dfsg/clamd/localserver.c clamav-0.103.5+dfsg/clamd/localserver.c --- clamav-0.103.4+dfsg/clamd/localserver.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/localserver.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm diff -Nru clamav-0.103.4+dfsg/clamd/localserver.h clamav-0.103.5+dfsg/clamd/localserver.h --- clamav-0.103.4+dfsg/clamd/localserver.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/localserver.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm diff -Nru clamav-0.103.4+dfsg/clamd/scanner.c clamav-0.103.5+dfsg/clamd/scanner.c --- clamav-0.103.4+dfsg/clamd/scanner.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/scanner.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, Török Edvin diff -Nru clamav-0.103.4+dfsg/clamd/scanner.h clamav-0.103.5+dfsg/clamd/scanner.h --- clamav-0.103.4+dfsg/clamd/scanner.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/scanner.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, Török Edvin diff -Nru clamav-0.103.4+dfsg/clamd/server-th.c clamav-0.103.5+dfsg/clamd/server-th.c --- clamav-0.103.4+dfsg/clamd/server-th.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/server-th.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, Trog, Török Edvin @@ -137,7 +137,8 @@ if (conn->filename) free(conn->filename); logg("$Finished scanthread\n"); - if (thrmgr_group_finished(conn->group, virus ? EXIT_OTHER : errors ? EXIT_ERROR : EXIT_OK)) { + if (thrmgr_group_finished(conn->group, virus ? EXIT_OTHER : errors ? EXIT_ERROR + : EXIT_OK)) { logg("$Scanthread: connection shut down (FD %d)\n", conn->sd); /* close connection if we were last in group */ shutdown(conn->sd, 2); diff -Nru clamav-0.103.4+dfsg/clamd/server.h clamav-0.103.5+dfsg/clamd/server.h --- clamav-0.103.4+dfsg/clamd/server.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/server.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, Trog, Török Edvin diff -Nru clamav-0.103.4+dfsg/clamd/session.c clamav-0.103.5+dfsg/clamd/session.c --- clamav-0.103.4+dfsg/clamd/session.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/session.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, Török Edvin diff -Nru clamav-0.103.4+dfsg/clamd/session.h clamav-0.103.5+dfsg/clamd/session.h --- clamav-0.103.4+dfsg/clamd/session.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/session.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, Török Edvin diff -Nru clamav-0.103.4+dfsg/clamd/shared.h clamav-0.103.5+dfsg/clamd/shared.h --- clamav-0.103.4+dfsg/clamd/shared.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/shared.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm diff -Nru clamav-0.103.4+dfsg/clamd/tcpserver.c clamav-0.103.5+dfsg/clamd/tcpserver.c --- clamav-0.103.4+dfsg/clamd/tcpserver.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/tcpserver.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, Török Edvin diff -Nru clamav-0.103.4+dfsg/clamd/tcpserver.h clamav-0.103.5+dfsg/clamd/tcpserver.h --- clamav-0.103.4+dfsg/clamd/tcpserver.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/tcpserver.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm diff -Nru clamav-0.103.4+dfsg/clamd/thrmgr.c clamav-0.103.5+dfsg/clamd/thrmgr.c --- clamav-0.103.4+dfsg/clamd/thrmgr.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/thrmgr.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Trog, Török Edvin diff -Nru clamav-0.103.4+dfsg/clamd/thrmgr.h clamav-0.103.5+dfsg/clamd/thrmgr.h --- clamav-0.103.4+dfsg/clamd/thrmgr.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamd/thrmgr.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, Török Edvin diff -Nru clamav-0.103.4+dfsg/clamdscan/CMakeLists.txt clamav-0.103.5+dfsg/clamdscan/CMakeLists.txt --- clamav-0.103.4+dfsg/clamdscan/CMakeLists.txt 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamdscan/CMakeLists.txt 2022-01-10 23:17:45.000000000 +0000 @@ -1,4 +1,4 @@ -# Copyright (C) 2020-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2020-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. cmake_minimum_required( VERSION 3.12...3.13 ) diff -Nru clamav-0.103.4+dfsg/clamdscan/Makefile.am clamav-0.103.5+dfsg/clamdscan/Makefile.am --- clamav-0.103.4+dfsg/clamdscan/Makefile.am 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamdscan/Makefile.am 2022-01-10 23:17:45.000000000 +0000 @@ -1,4 +1,4 @@ -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2002-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/clamdscan/Makefile.in clamav-0.103.5+dfsg/clamdscan/Makefile.in --- clamav-0.103.4+dfsg/clamdscan/Makefile.in 2021-11-02 15:48:15.000000000 +0000 +++ clamav-0.103.5+dfsg/clamdscan/Makefile.in 2022-01-10 23:18:12.000000000 +0000 @@ -14,7 +14,7 @@ @SET_MAKE@ -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2002-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/clamdscan/clamdscan.c clamav-0.103.5+dfsg/clamdscan/clamdscan.c --- clamav-0.103.4+dfsg/clamdscan/clamdscan.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamdscan/clamdscan.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, aCaB @@ -225,7 +225,7 @@ mprintf("\n"); mprintf(" Clam AntiVirus: Daemon Client %s\n", get_version()); mprintf(" By The ClamAV Team: https://www.clamav.net/about.html#credits\n"); - mprintf(" (C) 2021 Cisco Systems, Inc.\n"); + mprintf(" (C) 2022 Cisco Systems, Inc.\n"); mprintf("\n"); mprintf(" clamdscan [options] [file/directory/-]\n"); mprintf("\n"); diff -Nru clamav-0.103.4+dfsg/clamdscan/client.c clamav-0.103.5+dfsg/clamdscan/client.c --- clamav-0.103.4+dfsg/clamdscan/client.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamdscan/client.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2009-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, aCaB diff -Nru clamav-0.103.4+dfsg/clamdscan/client.h clamav-0.103.5+dfsg/clamdscan/client.h --- clamav-0.103.4+dfsg/clamdscan/client.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamdscan/client.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2009-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, aCaB diff -Nru clamav-0.103.4+dfsg/clamdscan/proto.c clamav-0.103.5+dfsg/clamdscan/proto.c --- clamav-0.103.4+dfsg/clamdscan/proto.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamdscan/proto.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2009-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, aCaB diff -Nru clamav-0.103.4+dfsg/clamdscan/proto.h clamav-0.103.5+dfsg/clamdscan/proto.h --- clamav-0.103.4+dfsg/clamdscan/proto.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamdscan/proto.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2009-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm, aCaB diff -Nru clamav-0.103.4+dfsg/clamdtop/CMakeLists.txt clamav-0.103.5+dfsg/clamdtop/CMakeLists.txt --- clamav-0.103.4+dfsg/clamdtop/CMakeLists.txt 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamdtop/CMakeLists.txt 2022-01-10 23:17:45.000000000 +0000 @@ -1,4 +1,4 @@ -# Copyright (C) 2020-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2020-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. cmake_minimum_required( VERSION 3.12...3.13 ) diff -Nru clamav-0.103.4+dfsg/clamdtop/clamdtop.c clamav-0.103.5+dfsg/clamdtop/clamdtop.c --- clamav-0.103.4+dfsg/clamdtop/clamdtop.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamdtop/clamdtop.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,7 +1,7 @@ /* * ClamdTOP * - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2008-2013 Sourcefire, Inc. * * Authors: Török Edvin @@ -1339,7 +1339,7 @@ printf("\n"); printf(" Clam AntiVirus: Monitoring Tool %s\n", get_version()); printf(" By The ClamAV Team: https://www.clamav.net/about.html#credits\n"); - printf(" (C) 2021 Cisco Systems, Inc.\n"); + printf(" (C) 2022 Cisco Systems, Inc.\n"); printf("\n"); printf(" clamdtop [-hVc] [host[:port] /path/to/clamd.socket ...]\n"); printf("\n"); diff -Nru clamav-0.103.4+dfsg/clamonacc/CMakeLists.txt clamav-0.103.5+dfsg/clamonacc/CMakeLists.txt --- clamav-0.103.4+dfsg/clamonacc/CMakeLists.txt 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/CMakeLists.txt 2022-01-10 23:17:45.000000000 +0000 @@ -1,4 +1,4 @@ -# Copyright (C) 2020-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2020-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. cmake_minimum_required( VERSION 3.12...3.13 ) diff -Nru clamav-0.103.4+dfsg/clamonacc/Makefile.am clamav-0.103.5+dfsg/clamonacc/Makefile.am --- clamav-0.103.4+dfsg/clamonacc/Makefile.am 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/Makefile.am 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ # -# Copyright (C) 2018 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2018-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # # Authors: Mickey Sola # diff -Nru clamav-0.103.4+dfsg/clamonacc/Makefile.in clamav-0.103.5+dfsg/clamonacc/Makefile.in --- clamav-0.103.4+dfsg/clamonacc/Makefile.in 2021-11-02 15:48:15.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/Makefile.in 2022-01-10 23:18:12.000000000 +0000 @@ -15,7 +15,7 @@ @SET_MAKE@ # -# Copyright (C) 2018 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2018-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # # Authors: Mickey Sola # diff -Nru clamav-0.103.4+dfsg/clamonacc/clamonacc.c clamav-0.103.5+dfsg/clamonacc/clamonacc.c --- clamav-0.103.4+dfsg/clamonacc/clamonacc.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/clamonacc.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2019-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2019-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * @@ -419,7 +419,7 @@ mprintf("\n"); mprintf(" ClamAV: On Access Scanning Application and Client %s\n", get_version()); mprintf(" By The ClamAV Team: https://www.clamav.net/about.html#credits\n"); - mprintf(" (C) 2021 Cisco Systems, Inc.\n"); + mprintf(" (C) 2022 Cisco Systems, Inc.\n"); mprintf("\n"); mprintf(" clamonacc [options] [file/directory/-]\n"); mprintf("\n"); diff -Nru clamav-0.103.4+dfsg/clamonacc/clamonacc.h clamav-0.103.5+dfsg/clamonacc/clamonacc.h --- clamav-0.103.4+dfsg/clamonacc/clamonacc.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/clamonacc.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Mickey Sola diff -Nru clamav-0.103.4+dfsg/clamonacc/client/client.c clamav-0.103.5+dfsg/clamonacc/client/client.c --- clamav-0.103.4+dfsg/clamonacc/client/client.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/client/client.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2015-2018 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2015-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2009 Sourcefire, Inc. * * Authors: Tomasz Kojm, aCaB, Mickey Sola diff -Nru clamav-0.103.4+dfsg/clamonacc/client/client.h clamav-0.103.5+dfsg/clamonacc/client/client.h --- clamav-0.103.4+dfsg/clamonacc/client/client.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/client/client.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2015-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2015-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2009 Sourcefire, Inc. * * Authors: Tomasz Kojm, aCaB diff -Nru clamav-0.103.4+dfsg/clamonacc/client/socket.c clamav-0.103.5+dfsg/clamonacc/client/socket.c --- clamav-0.103.4+dfsg/clamonacc/client/socket.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/client/socket.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2020-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2020-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Author: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamonacc/client/socket.h clamav-0.103.5+dfsg/clamonacc/client/socket.h --- clamav-0.103.4+dfsg/clamonacc/client/socket.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/client/socket.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2020-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2020-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Author: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamonacc/fanotif/fanotif.c clamav-0.103.5+dfsg/clamonacc/fanotif/fanotif.c --- clamav-0.103.4+dfsg/clamonacc/fanotif/fanotif.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/fanotif/fanotif.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2019-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2019-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamonacc/fanotif/fanotif.h clamav-0.103.5+dfsg/clamonacc/fanotif/fanotif.h --- clamav-0.103.4+dfsg/clamonacc/fanotif/fanotif.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/fanotif/fanotif.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2019-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2019-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamonacc/inotif/hash.c clamav-0.103.5+dfsg/clamonacc/inotif/hash.c --- clamav-0.103.4+dfsg/clamonacc/inotif/hash.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/inotif/hash.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2015-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2015-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamonacc/inotif/hash.h clamav-0.103.5+dfsg/clamonacc/inotif/hash.h --- clamav-0.103.4+dfsg/clamonacc/inotif/hash.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/inotif/hash.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2015-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2015-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamonacc/inotif/inotif.c clamav-0.103.5+dfsg/clamonacc/inotif/inotif.c --- clamav-0.103.4+dfsg/clamonacc/inotif/inotif.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/inotif/inotif.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2019-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2019-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * @@ -712,7 +712,7 @@ const char *path, const char *child_path, const struct inotify_event *event, int wd, uint64_t in_mask) { - if (!(event->mask & IN_ISDIR)){ + if (!(event->mask & IN_ISDIR)) { return; } diff -Nru clamav-0.103.4+dfsg/clamonacc/inotif/inotif.h clamav-0.103.5+dfsg/clamonacc/inotif/inotif.h --- clamav-0.103.4+dfsg/clamonacc/inotif/inotif.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/inotif/inotif.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2015-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2015-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamonacc/misc/utils.c clamav-0.103.5+dfsg/clamonacc/misc/utils.c --- clamav-0.103.4+dfsg/clamonacc/misc/utils.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/misc/utils.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2019-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2019-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamonacc/misc/utils.h clamav-0.103.5+dfsg/clamonacc/misc/utils.h --- clamav-0.103.4+dfsg/clamonacc/misc/utils.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/misc/utils.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2019-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2019-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamonacc/scan/onas_queue.c clamav-0.103.5+dfsg/clamonacc/scan/onas_queue.c --- clamav-0.103.4+dfsg/clamonacc/scan/onas_queue.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/scan/onas_queue.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2019-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2019-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamonacc/scan/onas_queue.h clamav-0.103.5+dfsg/clamonacc/scan/onas_queue.h --- clamav-0.103.4+dfsg/clamonacc/scan/onas_queue.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/scan/onas_queue.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2019-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2019-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamonacc/scan/thread.c clamav-0.103.5+dfsg/clamonacc/scan/thread.c --- clamav-0.103.4+dfsg/clamonacc/scan/thread.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/scan/thread.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2015-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2015-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamonacc/scan/thread.h clamav-0.103.5+dfsg/clamonacc/scan/thread.h --- clamav-0.103.4+dfsg/clamonacc/scan/thread.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamonacc/scan/thread.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2015-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2015-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Mickey Sola * diff -Nru clamav-0.103.4+dfsg/clamscan/CMakeLists.txt clamav-0.103.5+dfsg/clamscan/CMakeLists.txt --- clamav-0.103.4+dfsg/clamscan/CMakeLists.txt 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamscan/CMakeLists.txt 2022-01-10 23:17:45.000000000 +0000 @@ -1,4 +1,4 @@ -# Copyright (C) 2020-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2020-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. cmake_minimum_required( VERSION 3.12...3.13 ) diff -Nru clamav-0.103.4+dfsg/clamscan/Makefile.am clamav-0.103.5+dfsg/clamscan/Makefile.am --- clamav-0.103.4+dfsg/clamscan/Makefile.am 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamscan/Makefile.am 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2002-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/clamscan/Makefile.in clamav-0.103.5+dfsg/clamscan/Makefile.in --- clamav-0.103.4+dfsg/clamscan/Makefile.in 2021-11-02 15:48:15.000000000 +0000 +++ clamav-0.103.5+dfsg/clamscan/Makefile.in 2022-01-10 23:18:12.000000000 +0000 @@ -15,7 +15,7 @@ @SET_MAKE@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2002-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/clamscan/clamscan.c clamav-0.103.5+dfsg/clamscan/clamscan.c --- clamav-0.103.4+dfsg/clamscan/clamscan.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamscan/clamscan.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm @@ -232,7 +232,7 @@ mprintf("\n"); mprintf(" Clam AntiVirus: Scanner %s\n", get_version()); printf(" By The ClamAV Team: https://www.clamav.net/about.html#credits\n"); - printf(" (C) 2021 Cisco Systems, Inc.\n"); + printf(" (C) 2022 Cisco Systems, Inc.\n"); mprintf("\n"); mprintf(" clamscan [options] [file/directory/-]\n"); mprintf("\n"); diff -Nru clamav-0.103.4+dfsg/clamscan/global.h clamav-0.103.5+dfsg/clamscan/global.h --- clamav-0.103.4+dfsg/clamscan/global.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamscan/global.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm diff -Nru clamav-0.103.4+dfsg/clamscan/manager.c clamav-0.103.5+dfsg/clamscan/manager.c --- clamav-0.103.4+dfsg/clamscan/manager.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamscan/manager.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm diff -Nru clamav-0.103.4+dfsg/clamscan/manager.h clamav-0.103.5+dfsg/clamscan/manager.h --- clamav-0.103.4+dfsg/clamscan/manager.h 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamscan/manager.h 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ /* - * Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * Copyright (C) 2007-2013 Sourcefire, Inc. * * Authors: Tomasz Kojm diff -Nru clamav-0.103.4+dfsg/clamsubmit/CMakeLists.txt clamav-0.103.5+dfsg/clamsubmit/CMakeLists.txt --- clamav-0.103.4+dfsg/clamsubmit/CMakeLists.txt 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamsubmit/CMakeLists.txt 2022-01-10 23:17:45.000000000 +0000 @@ -1,4 +1,4 @@ -# Copyright (C) 2020-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2020-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. cmake_minimum_required( VERSION 3.12...3.13 ) diff -Nru clamav-0.103.4+dfsg/clamsubmit/clamsubmit.c clamav-0.103.5+dfsg/clamsubmit/clamsubmit.c --- clamav-0.103.4+dfsg/clamsubmit/clamsubmit.c 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/clamsubmit/clamsubmit.c 2022-01-10 23:17:45.000000000 +0000 @@ -1,7 +1,7 @@ /* * ClamAV Malware and False Positive Reporting Tool * - * Copyright (C) 2014-2020 Cisco Systems, Inc. and/or its affiliates. All rights reserved. + * Copyright (C) 2014-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. * * Authors: Shawn Webb, Steve Morgan * @@ -75,7 +75,7 @@ printf("\n"); printf(" Clam AntiVirus: Malware and False Positive Reporting Tool %s\n", get_version()); printf(" By The ClamAV Team: https://www.clamav.net/about.html#credits\n"); - printf(" (C) 2021 Cisco Systems, Inc.\n"); + printf(" (C) 2022 Cisco Systems, Inc.\n"); printf("\n"); printf(" %s -hHinpVvd?\n", name); printf("\n"); diff -Nru clamav-0.103.4+dfsg/configure clamav-0.103.5+dfsg/configure --- clamav-0.103.4+dfsg/configure 2021-11-02 15:48:14.000000000 +0000 +++ clamav-0.103.5+dfsg/configure 2022-01-10 23:18:10.000000000 +0000 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.69 for ClamAV 0.103.4. +# Generated by GNU Autoconf 2.69 for ClamAV 0.103.5. # # Report bugs to . # @@ -592,8 +592,8 @@ # Identity of this package. PACKAGE_NAME='ClamAV' PACKAGE_TARNAME='clamav' -PACKAGE_VERSION='0.103.4' -PACKAGE_STRING='ClamAV 0.103.4' +PACKAGE_VERSION='0.103.5' +PACKAGE_STRING='ClamAV 0.103.5' PACKAGE_BUGREPORT='https://github.com/Cisco-Talos/clamav/issues' PACKAGE_URL='https://www.clamav.net/' @@ -1606,7 +1606,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures ClamAV 0.103.4 to adapt to many kinds of systems. +\`configure' configures ClamAV 0.103.5 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1687,7 +1687,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of ClamAV 0.103.4:";; + short | recursive ) echo "Configuration of ClamAV 0.103.5:";; esac cat <<\_ACEOF --enable-dependency-tracking @@ -1922,7 +1922,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -ClamAV configure 0.103.4 +ClamAV configure 0.103.5 generated by GNU Autoconf 2.69 Copyright (C) 2012 Free Software Foundation, Inc. @@ -2550,7 +2550,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by ClamAV $as_me 0.103.4, which was +It was created by ClamAV $as_me 0.103.5, which was generated by GNU Autoconf 2.69. Invocation command line was $ $0 $@ @@ -4308,7 +4308,7 @@ # Define the identity of the package. PACKAGE='clamav' - VERSION='0.103.4' + VERSION='0.103.5' # Some tools Automake needs. @@ -6036,7 +6036,7 @@ $as_echo "#define PACKAGE PACKAGE_NAME" >>confdefs.h -VERSION="0.103.4" +VERSION="0.103.5" major=`echo $PACKAGE_VERSION |cut -d. -f1 | sed -e "s/^0-9//g"` minor=`echo $PACKAGE_VERSION |cut -d. -f2 | sed -e "s/^0-9//g"` @@ -31896,7 +31896,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by ClamAV $as_me 0.103.4, which was +This file was extended by ClamAV $as_me 0.103.5, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -31963,7 +31963,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -ClamAV config.status 0.103.4 +ClamAV config.status 0.103.5 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" @@ -34813,7 +34813,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by ClamAV $as_me 0.103.4, which was +This file was extended by ClamAV $as_me 0.103.5, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -34880,7 +34880,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -ClamAV config.status 0.103.4 +ClamAV config.status 0.103.5 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" diff -Nru clamav-0.103.4+dfsg/configure.ac clamav-0.103.5+dfsg/configure.ac --- clamav-0.103.4+dfsg/configure.ac 2021-11-13 20:57:13.000000000 +0000 +++ clamav-0.103.5+dfsg/configure.ac 2022-01-12 19:53:22.000000000 +0000 @@ -1,4 +1,4 @@ -dnl Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +dnl Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. dnl Copyright (C) 2007-2013 Sourcefire, Inc. dnl Copyright (C) 2002-2007 Tomasz Kojm dnl socklen_t check (c) Alexander V. Lukyanov @@ -22,7 +22,7 @@ dnl For a release change [devel] to the real version [0.xy] dnl also change VERSION below -AC_INIT([ClamAV], [0.103.4], [https://github.com/Cisco-Talos/clamav/issues], [clamav], [https://www.clamav.net/]) +AC_INIT([ClamAV], [0.103.5], [https://github.com/Cisco-Talos/clamav/issues], [clamav], [https://www.clamav.net/]) dnl put configure auxiliary into config AC_CONFIG_AUX_DIR([config]) diff -Nru clamav-0.103.4+dfsg/database/Makefile.am clamav-0.103.5+dfsg/database/Makefile.am --- clamav-0.103.4+dfsg/database/Makefile.am 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/database/Makefile.am 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2002-2007 Tomasz Kojm # Fixes by Arkadiusz Miskiewicz diff -Nru clamav-0.103.4+dfsg/database/Makefile.in clamav-0.103.5+dfsg/database/Makefile.in --- clamav-0.103.4+dfsg/database/Makefile.in 2021-11-02 15:48:16.000000000 +0000 +++ clamav-0.103.5+dfsg/database/Makefile.in 2022-01-10 23:18:12.000000000 +0000 @@ -15,7 +15,7 @@ @SET_MAKE@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2002-2007 Tomasz Kojm # Fixes by Arkadiusz Miskiewicz diff -Nru clamav-0.103.4+dfsg/debian/.git-dpm clamav-0.103.5+dfsg/debian/.git-dpm --- clamav-0.103.4+dfsg/debian/.git-dpm 2021-12-16 20:02:29.000000000 +0000 +++ clamav-0.103.5+dfsg/debian/.git-dpm 2022-01-13 20:49:00.000000000 +0000 @@ -1,8 +1,8 @@ # see git-dpm(1) from git-dpm package -a9367dca1bb602551ab6475b4a4582a6b1de45c5 -a9367dca1bb602551ab6475b4a4582a6b1de45c5 -86cddd22c95e08757ac21abef3807737d9b062df -86cddd22c95e08757ac21abef3807737d9b062df -clamav_0.103.4+dfsg.orig.tar.xz -20d685a2186a7fb0622dce8a400247ff1e84e7a6 -7119704 +d98f95bd2562d8205e1e0a209c06c7706b9107fc +d98f95bd2562d8205e1e0a209c06c7706b9107fc +857db6f7fe6291d39090c77afdefa94d97161cb2 +857db6f7fe6291d39090c77afdefa94d97161cb2 +clamav_0.103.5+dfsg.orig.tar.xz +6b767150c6b8cb9c8c6b11a2ae3df961fd65533f +7121136 diff -Nru clamav-0.103.4+dfsg/debian/changelog clamav-0.103.5+dfsg/debian/changelog --- clamav-0.103.4+dfsg/debian/changelog 2021-12-16 20:02:29.000000000 +0000 +++ clamav-0.103.5+dfsg/debian/changelog 2022-01-13 20:49:00.000000000 +0000 @@ -1,3 +1,11 @@ +clamav (0.103.5+dfsg-0+deb11u1) bullseye; urgency=medium + + * Import 0.103.5 + - CVE-2022-20698 (Fix for invalid pointer read that may cause a crash). + - Update symbol file. + + -- Sebastian Andrzej Siewior Thu, 13 Jan 2022 21:49:00 +0100 + clamav (0.103.4+dfsg-0+deb11u1) bullseye; urgency=medium * Import 0.103.4 diff -Nru clamav-0.103.4+dfsg/debian/libclamav9.symbols clamav-0.103.5+dfsg/debian/libclamav9.symbols --- clamav-0.103.4+dfsg/debian/libclamav9.symbols 2021-12-16 20:02:29.000000000 +0000 +++ clamav-0.103.5+dfsg/debian/libclamav9.symbols 2022-01-13 20:49:00.000000000 +0000 @@ -1,20 +1,20 @@ libclamav.so.9 libclamav9 #MINVER# * Build-Depends-Package: libclamav-dev - CLAMAV_PRIVATE@CLAMAV_PRIVATE 0.103.4 + CLAMAV_PRIVATE@CLAMAV_PRIVATE 0.103.5 CLAMAV_PUBLIC@CLAMAV_PUBLIC 0.101.0 - __cli_strcasestr@CLAMAV_PRIVATE 0.103.4 - __cli_strndup@CLAMAV_PRIVATE 0.103.4 - __cli_strnlen@CLAMAV_PRIVATE 0.103.4 - __cli_strnstr@CLAMAV_PRIVATE 0.103.4 - base64Flush@CLAMAV_PRIVATE 0.103.4 - blobAddData@CLAMAV_PRIVATE 0.103.4 - blobCreate@CLAMAV_PRIVATE 0.103.4 - blobDestroy@CLAMAV_PRIVATE 0.103.4 - cl_ASN1_GetTimeT@CLAMAV_PRIVATE 0.103.4 + __cli_strcasestr@CLAMAV_PRIVATE 0.103.5 + __cli_strndup@CLAMAV_PRIVATE 0.103.5 + __cli_strnlen@CLAMAV_PRIVATE 0.103.5 + __cli_strnstr@CLAMAV_PRIVATE 0.103.5 + base64Flush@CLAMAV_PRIVATE 0.103.5 + blobAddData@CLAMAV_PRIVATE 0.103.5 + blobCreate@CLAMAV_PRIVATE 0.103.5 + blobDestroy@CLAMAV_PRIVATE 0.103.5 + cl_ASN1_GetTimeT@CLAMAV_PRIVATE 0.103.5 cl_always_gen_section_hash@CLAMAV_PUBLIC 0.101.0 - cl_base64_decode@CLAMAV_PRIVATE 0.103.4 - cl_base64_encode@CLAMAV_PRIVATE 0.103.4 - cl_cleanup_crypto@CLAMAV_PRIVATE 0.103.4 + cl_base64_decode@CLAMAV_PRIVATE 0.103.5 + cl_base64_encode@CLAMAV_PRIVATE 0.103.5 + cl_cleanup_crypto@CLAMAV_PRIVATE 0.103.5 cl_countsigs@CLAMAV_PUBLIC 0.101.0 cl_cvdfree@CLAMAV_PUBLIC 0.101.0 cl_cvdhead@CLAMAV_PUBLIC 0.101.0 @@ -54,21 +54,21 @@ cl_fmap_close@CLAMAV_PUBLIC 0.101.0 cl_fmap_open_handle@CLAMAV_PUBLIC 0.101.0 cl_fmap_open_memory@CLAMAV_PUBLIC 0.101.0 - cl_get_pkey_file@CLAMAV_PRIVATE 0.103.4 - cl_get_x509_from_mem@CLAMAV_PRIVATE 0.103.4 - cl_hash_data@CLAMAV_PRIVATE 0.103.4 + cl_get_pkey_file@CLAMAV_PRIVATE 0.103.5 + cl_get_x509_from_mem@CLAMAV_PRIVATE 0.103.5 + cl_hash_data@CLAMAV_PRIVATE 0.103.5 cl_hash_destroy@CLAMAV_PUBLIC 0.101.0 - cl_hash_file_fd@CLAMAV_PRIVATE 0.103.4 - cl_hash_file_fd_ctx@CLAMAV_PRIVATE 0.103.4 - cl_hash_file_fp@CLAMAV_PRIVATE 0.103.4 + cl_hash_file_fd@CLAMAV_PRIVATE 0.103.5 + cl_hash_file_fd_ctx@CLAMAV_PRIVATE 0.103.5 + cl_hash_file_fp@CLAMAV_PRIVATE 0.103.5 cl_hash_init@CLAMAV_PUBLIC 0.101.0 cl_init@CLAMAV_PUBLIC 0.101.0 - cl_initialize_crypto@CLAMAV_PRIVATE 0.103.4 + cl_initialize_crypto@CLAMAV_PRIVATE 0.103.5 cl_load@CLAMAV_PUBLIC 0.101.0 - cl_load_cert@CLAMAV_PRIVATE 0.103.4 - cl_load_crl@CLAMAV_PRIVATE 0.103.4 + cl_load_cert@CLAMAV_PRIVATE 0.103.5 + cl_load_crl@CLAMAV_PRIVATE 0.103.5 cl_retdbdir@CLAMAV_PUBLIC 0.101.0 - cl_retflevel@CLAMAV_PUBLIC 0.103.4 + cl_retflevel@CLAMAV_PUBLIC 0.103.5 cl_retver@CLAMAV_PUBLIC 0.101.0 cl_scandesc@CLAMAV_PUBLIC 0.101.0 cl_scandesc_callback@CLAMAV_PUBLIC 0.101.0 @@ -76,196 +76,196 @@ cl_scanfile_callback@CLAMAV_PUBLIC 0.101.0 cl_scanmap_callback@CLAMAV_PUBLIC 0.101.0 cl_set_clcb_msg@CLAMAV_PUBLIC 0.101.0 - cl_sha1@CLAMAV_PRIVATE 0.103.4 - cl_sha256@CLAMAV_PRIVATE 0.103.4 - cl_sign_data@CLAMAV_PRIVATE 0.103.4 - cl_sign_data_keyfile@CLAMAV_PRIVATE 0.103.4 - cl_sign_file_fd@CLAMAV_PRIVATE 0.103.4 - cl_sign_file_fp@CLAMAV_PRIVATE 0.103.4 + cl_sha1@CLAMAV_PRIVATE 0.103.5 + cl_sha256@CLAMAV_PRIVATE 0.103.5 + cl_sign_data@CLAMAV_PRIVATE 0.103.5 + cl_sign_data_keyfile@CLAMAV_PRIVATE 0.103.5 + cl_sign_file_fd@CLAMAV_PRIVATE 0.103.5 + cl_sign_file_fp@CLAMAV_PRIVATE 0.103.5 cl_statchkdir@CLAMAV_PUBLIC 0.101.0 cl_statfree@CLAMAV_PUBLIC 0.101.0 cl_statinidir@CLAMAV_PUBLIC 0.101.0 cl_strerror@CLAMAV_PUBLIC 0.101.0 cl_update_hash@CLAMAV_PUBLIC 0.101.0 - cl_validate_certificate_chain@CLAMAV_PRIVATE 0.103.4 - cl_validate_certificate_chain_ts_dir@CLAMAV_PRIVATE 0.103.4 - cl_verify_signature@CLAMAV_PRIVATE 0.103.4 - cl_verify_signature_fd@CLAMAV_PRIVATE 0.103.4 - cl_verify_signature_fd_x509@CLAMAV_PRIVATE 0.103.4 - cl_verify_signature_fd_x509_keyfile@CLAMAV_PRIVATE 0.103.4 - cl_verify_signature_hash@CLAMAV_PRIVATE 0.103.4 - cl_verify_signature_hash_x509@CLAMAV_PRIVATE 0.103.4 - cl_verify_signature_hash_x509_keyfile@CLAMAV_PRIVATE 0.103.4 - cl_verify_signature_x509@CLAMAV_PRIVATE 0.103.4 - cl_verify_signature_x509_keyfile@CLAMAV_PRIVATE 0.103.4 - cli_ac_buildtrie@CLAMAV_PRIVATE 0.103.4 - cli_ac_chklsig@CLAMAV_PRIVATE 0.103.4 - cli_ac_free@CLAMAV_PRIVATE 0.103.4 - cli_ac_freedata@CLAMAV_PRIVATE 0.103.4 - cli_ac_init@CLAMAV_PRIVATE 0.103.4 - cli_ac_initdata@CLAMAV_PRIVATE 0.103.4 - cli_ac_scanbuff@CLAMAV_PRIVATE 0.103.4 - cli_basename@CLAMAV_PRIVATE 0.103.4 - cli_bm_free@CLAMAV_PRIVATE 0.103.4 - cli_bm_init@CLAMAV_PRIVATE 0.103.4 - cli_bm_scanbuff@CLAMAV_PRIVATE 0.103.4 - cli_build_regex_list@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_context_alloc@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_context_clear@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_context_destroy@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_context_getresult_int@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_context_set_trace@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_context_setfile@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_context_setfuncid@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_context_setparam_int@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_context_setparam_ptr@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_debug@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_debug_printsrc@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_describe@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_destroy@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_done@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_init@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_load@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_prepare2@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_printversion@CLAMAV_PRIVATE 0.103.4 - cli_bytecode_run@CLAMAV_PRIVATE 0.103.4 - cli_bytefunc_describe@CLAMAV_PRIVATE 0.103.4 - cli_byteinst_describe@CLAMAV_PRIVATE 0.103.4 - cli_bytetype_describe@CLAMAV_PRIVATE 0.103.4 - cli_bytevalue_describe@CLAMAV_PRIVATE 0.103.4 - cli_calloc@CLAMAV_PRIVATE 0.103.4 - cli_check_auth_header@CLAMAV_PRIVATE 0.103.4 - cli_chomp@CLAMAV_PRIVATE 0.103.4 - cli_codepage_to_utf8@CLAMAV_PRIVATE 0.103.4 - cli_ctime@CLAMAV_PRIVATE 0.103.4 - cli_cvdunpack@CLAMAV_PRIVATE 0.103.4 - cli_dbgmsg_internal@CLAMAV_PRIVATE 0.103.4 - cli_dconf_init@CLAMAV_PRIVATE 0.103.4 - cli_debug_flag@CLAMAV_PRIVATE 0.103.4 - cli_detect_environment@CLAMAV_PRIVATE 0.103.4 - cli_disasm_one@CLAMAV_PRIVATE 0.103.4 - cli_errmsg@CLAMAV_PRIVATE 0.103.4 - cli_filecopy@CLAMAV_PRIVATE 0.103.4 - cli_free_vba_project@CLAMAV_PRIVATE 0.103.4 - cli_ftw@CLAMAV_PRIVATE 0.103.4 - cli_genhash_pe@CLAMAV_PRIVATE 0.103.4 - cli_gentemp@CLAMAV_PRIVATE 0.103.4 - cli_gentemp_with_prefix@CLAMAV_PRIVATE 0.103.4 - cli_gentempfd@CLAMAV_PRIVATE 0.103.4 - cli_get_filepath_from_filedesc@CLAMAV_PRIVATE 0.103.4 - cli_gettmpdir@CLAMAV_PRIVATE 0.103.4 - cli_hashfile@CLAMAV_PRIVATE 0.103.4 - cli_hashset_destroy@CLAMAV_PRIVATE 0.103.4 - cli_hashstream@CLAMAV_PRIVATE 0.103.4 - cli_hex2str@CLAMAV_PRIVATE 0.103.4 - cli_hex2ui@CLAMAV_PRIVATE 0.103.4 - cli_initroots@CLAMAV_PRIVATE 0.103.4 - cli_isnumber@CLAMAV_PRIVATE 0.103.4 - cli_js_destroy@CLAMAV_PRIVATE 0.103.4 - cli_js_init@CLAMAV_PRIVATE 0.103.4 - cli_js_output@CLAMAV_PRIVATE 0.103.4 - cli_js_parse_done@CLAMAV_PRIVATE 0.103.4 - cli_js_process_buffer@CLAMAV_PRIVATE 0.103.4 - cli_ldbtokenize@CLAMAV_PRIVATE 0.103.4 - cli_malloc@CLAMAV_PRIVATE 0.103.4 - cli_memstr@CLAMAV_PRIVATE 0.103.4 - cli_ole2_extract@CLAMAV_PRIVATE 0.103.4 - cli_parse_add@CLAMAV_PRIVATE 0.103.4 - cli_pcre_build@CLAMAV_PRIVATE 0.103.4 - cli_pcre_freeoff@CLAMAV_PRIVATE 0.103.4 - cli_pcre_init@CLAMAV_PRIVATE 0.103.4 - cli_pcre_perf_events_destroy@CLAMAV_PRIVATE 0.103.4 - cli_pcre_perf_print@CLAMAV_PRIVATE 0.103.4 - cli_pcre_recaloff@CLAMAV_PRIVATE 0.103.4 - cli_pcre_scanbuf@CLAMAV_PRIVATE 0.103.4 - cli_ppt_vba_read@CLAMAV_PRIVATE 0.103.4 - cli_printcxxver@CLAMAV_PRIVATE 0.103.4 - cli_readn@CLAMAV_PRIVATE 0.103.4 - cli_realloc@CLAMAV_PRIVATE 0.103.4 - cli_realpath@CLAMAV_PRIVATE 0.103.4 - cli_regcomp@CLAMAV_PRIVATE 0.103.4 - cli_regex2suffix@CLAMAV_PRIVATE 0.103.4 - cli_regexec@CLAMAV_PRIVATE 0.103.4 - cli_regfree@CLAMAV_PRIVATE 0.103.4 - cli_rmdirs@CLAMAV_PRIVATE 0.103.4 - cli_rndnum@CLAMAV_PRIVATE 0.103.4 - cli_sanitize_filepath@CLAMAV_PRIVATE 0.103.4 - cli_scan_buff@CLAMAV_PRIVATE 0.103.4 - cli_scan_fmap@CLAMAV_PRIVATE 0.103.4 - cli_sigopts_handler@CLAMAV_PRIVATE 0.103.4 - cli_sigperf_events_destroy@CLAMAV_PRIVATE 0.103.4 - cli_sigperf_print@CLAMAV_PRIVATE 0.103.4 - cli_str2hex@CLAMAV_PRIVATE 0.103.4 - cli_strbcasestr@CLAMAV_PRIVATE 0.103.4 - cli_strdup@CLAMAV_PRIVATE 0.103.4 - cli_strerror@CLAMAV_PRIVATE 0.103.4 - cli_strlcat@CLAMAV_PRIVATE 0.103.4 - cli_strlcpy@CLAMAV_PRIVATE 0.103.4 - cli_strntoul@CLAMAV_PRIVATE 0.103.4 - cli_strrcpy@CLAMAV_PRIVATE 0.103.4 - cli_strtok@CLAMAV_PRIVATE 0.103.4 - cli_strtokbuf@CLAMAV_PRIVATE 0.103.4 - cli_strtokenize@CLAMAV_PRIVATE 0.103.4 - cli_textbuffer_append_normalize@CLAMAV_PRIVATE 0.103.4 - cli_unescape@CLAMAV_PRIVATE 0.103.4 - cli_unlink@CLAMAV_PRIVATE 0.103.4 - cli_url_canon@CLAMAV_PRIVATE 0.103.4 - cli_utf16_to_utf8@CLAMAV_PRIVATE 0.103.4 - cli_utf16toascii@CLAMAV_PRIVATE 0.103.4 - cli_vba_inflate@CLAMAV_PRIVATE 0.103.4 - cli_vba_readdir@CLAMAV_PRIVATE 0.103.4 - cli_versig2@CLAMAV_PRIVATE 0.103.4 - cli_versig@CLAMAV_PRIVATE 0.103.4 - cli_warnmsg@CLAMAV_PRIVATE 0.103.4 - cli_wm_decrypt_macro@CLAMAV_PRIVATE 0.103.4 - cli_wm_readdir@CLAMAV_PRIVATE 0.103.4 - cli_writen@CLAMAV_PRIVATE 0.103.4 - decodeLine@CLAMAV_PRIVATE 0.103.4 - disasmbuf@CLAMAV_PRIVATE 0.103.4 - fmap@CLAMAV_PRIVATE 0.103.4 - fmap_dump_to_file@CLAMAV_PRIVATE 0.103.4 - fmap_duplicate@CLAMAV_PRIVATE 0.103.4 - free_duplicate_fmap@CLAMAV_PRIVATE 0.103.4 - get_fpu_endian@CLAMAV_PRIVATE 0.103.4 - have_clamjit@CLAMAV_PRIVATE 0.103.4 - have_rar@CLAMAV_PRIVATE 0.103.4 - html_normalise_map@CLAMAV_PRIVATE 0.103.4 - html_normalise_mem@CLAMAV_PRIVATE 0.103.4 - html_screnc_decode@CLAMAV_PRIVATE 0.103.4 - html_tag_arg_free@CLAMAV_PRIVATE 0.103.4 - init_domainlist@CLAMAV_PRIVATE 0.103.4 - init_regex_list@CLAMAV_PRIVATE 0.103.4 - init_whitelist@CLAMAV_PRIVATE 0.103.4 - is_regex_ok@CLAMAV_PRIVATE 0.103.4 - load_regex_matcher@CLAMAV_PRIVATE 0.103.4 + cl_validate_certificate_chain@CLAMAV_PRIVATE 0.103.5 + cl_validate_certificate_chain_ts_dir@CLAMAV_PRIVATE 0.103.5 + cl_verify_signature@CLAMAV_PRIVATE 0.103.5 + cl_verify_signature_fd@CLAMAV_PRIVATE 0.103.5 + cl_verify_signature_fd_x509@CLAMAV_PRIVATE 0.103.5 + cl_verify_signature_fd_x509_keyfile@CLAMAV_PRIVATE 0.103.5 + cl_verify_signature_hash@CLAMAV_PRIVATE 0.103.5 + cl_verify_signature_hash_x509@CLAMAV_PRIVATE 0.103.5 + cl_verify_signature_hash_x509_keyfile@CLAMAV_PRIVATE 0.103.5 + cl_verify_signature_x509@CLAMAV_PRIVATE 0.103.5 + cl_verify_signature_x509_keyfile@CLAMAV_PRIVATE 0.103.5 + cli_ac_buildtrie@CLAMAV_PRIVATE 0.103.5 + cli_ac_chklsig@CLAMAV_PRIVATE 0.103.5 + cli_ac_free@CLAMAV_PRIVATE 0.103.5 + cli_ac_freedata@CLAMAV_PRIVATE 0.103.5 + cli_ac_init@CLAMAV_PRIVATE 0.103.5 + cli_ac_initdata@CLAMAV_PRIVATE 0.103.5 + cli_ac_scanbuff@CLAMAV_PRIVATE 0.103.5 + cli_basename@CLAMAV_PRIVATE 0.103.5 + cli_bm_free@CLAMAV_PRIVATE 0.103.5 + cli_bm_init@CLAMAV_PRIVATE 0.103.5 + cli_bm_scanbuff@CLAMAV_PRIVATE 0.103.5 + cli_build_regex_list@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_context_alloc@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_context_clear@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_context_destroy@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_context_getresult_int@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_context_set_trace@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_context_setfile@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_context_setfuncid@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_context_setparam_int@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_context_setparam_ptr@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_debug@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_debug_printsrc@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_describe@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_destroy@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_done@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_init@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_load@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_prepare2@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_printversion@CLAMAV_PRIVATE 0.103.5 + cli_bytecode_run@CLAMAV_PRIVATE 0.103.5 + cli_bytefunc_describe@CLAMAV_PRIVATE 0.103.5 + cli_byteinst_describe@CLAMAV_PRIVATE 0.103.5 + cli_bytetype_describe@CLAMAV_PRIVATE 0.103.5 + cli_bytevalue_describe@CLAMAV_PRIVATE 0.103.5 + cli_calloc@CLAMAV_PRIVATE 0.103.5 + cli_check_auth_header@CLAMAV_PRIVATE 0.103.5 + cli_chomp@CLAMAV_PRIVATE 0.103.5 + cli_codepage_to_utf8@CLAMAV_PRIVATE 0.103.5 + cli_ctime@CLAMAV_PRIVATE 0.103.5 + cli_cvdunpack@CLAMAV_PRIVATE 0.103.5 + cli_dbgmsg_internal@CLAMAV_PRIVATE 0.103.5 + cli_dconf_init@CLAMAV_PRIVATE 0.103.5 + cli_debug_flag@CLAMAV_PRIVATE 0.103.5 + cli_detect_environment@CLAMAV_PRIVATE 0.103.5 + cli_disasm_one@CLAMAV_PRIVATE 0.103.5 + cli_errmsg@CLAMAV_PRIVATE 0.103.5 + cli_filecopy@CLAMAV_PRIVATE 0.103.5 + cli_free_vba_project@CLAMAV_PRIVATE 0.103.5 + cli_ftw@CLAMAV_PRIVATE 0.103.5 + cli_genhash_pe@CLAMAV_PRIVATE 0.103.5 + cli_gentemp@CLAMAV_PRIVATE 0.103.5 + cli_gentemp_with_prefix@CLAMAV_PRIVATE 0.103.5 + cli_gentempfd@CLAMAV_PRIVATE 0.103.5 + cli_get_filepath_from_filedesc@CLAMAV_PRIVATE 0.103.5 + cli_gettmpdir@CLAMAV_PRIVATE 0.103.5 + cli_hashfile@CLAMAV_PRIVATE 0.103.5 + cli_hashset_destroy@CLAMAV_PRIVATE 0.103.5 + cli_hashstream@CLAMAV_PRIVATE 0.103.5 + cli_hex2str@CLAMAV_PRIVATE 0.103.5 + cli_hex2ui@CLAMAV_PRIVATE 0.103.5 + cli_initroots@CLAMAV_PRIVATE 0.103.5 + cli_isnumber@CLAMAV_PRIVATE 0.103.5 + cli_js_destroy@CLAMAV_PRIVATE 0.103.5 + cli_js_init@CLAMAV_PRIVATE 0.103.5 + cli_js_output@CLAMAV_PRIVATE 0.103.5 + cli_js_parse_done@CLAMAV_PRIVATE 0.103.5 + cli_js_process_buffer@CLAMAV_PRIVATE 0.103.5 + cli_ldbtokenize@CLAMAV_PRIVATE 0.103.5 + cli_malloc@CLAMAV_PRIVATE 0.103.5 + cli_memstr@CLAMAV_PRIVATE 0.103.5 + cli_ole2_extract@CLAMAV_PRIVATE 0.103.5 + cli_parse_add@CLAMAV_PRIVATE 0.103.5 + cli_pcre_build@CLAMAV_PRIVATE 0.103.5 + cli_pcre_freeoff@CLAMAV_PRIVATE 0.103.5 + cli_pcre_init@CLAMAV_PRIVATE 0.103.5 + cli_pcre_perf_events_destroy@CLAMAV_PRIVATE 0.103.5 + cli_pcre_perf_print@CLAMAV_PRIVATE 0.103.5 + cli_pcre_recaloff@CLAMAV_PRIVATE 0.103.5 + cli_pcre_scanbuf@CLAMAV_PRIVATE 0.103.5 + cli_ppt_vba_read@CLAMAV_PRIVATE 0.103.5 + cli_printcxxver@CLAMAV_PRIVATE 0.103.5 + cli_readn@CLAMAV_PRIVATE 0.103.5 + cli_realloc@CLAMAV_PRIVATE 0.103.5 + cli_realpath@CLAMAV_PRIVATE 0.103.5 + cli_regcomp@CLAMAV_PRIVATE 0.103.5 + cli_regex2suffix@CLAMAV_PRIVATE 0.103.5 + cli_regexec@CLAMAV_PRIVATE 0.103.5 + cli_regfree@CLAMAV_PRIVATE 0.103.5 + cli_rmdirs@CLAMAV_PRIVATE 0.103.5 + cli_rndnum@CLAMAV_PRIVATE 0.103.5 + cli_sanitize_filepath@CLAMAV_PRIVATE 0.103.5 + cli_scan_buff@CLAMAV_PRIVATE 0.103.5 + cli_scan_fmap@CLAMAV_PRIVATE 0.103.5 + cli_sigopts_handler@CLAMAV_PRIVATE 0.103.5 + cli_sigperf_events_destroy@CLAMAV_PRIVATE 0.103.5 + cli_sigperf_print@CLAMAV_PRIVATE 0.103.5 + cli_str2hex@CLAMAV_PRIVATE 0.103.5 + cli_strbcasestr@CLAMAV_PRIVATE 0.103.5 + cli_strdup@CLAMAV_PRIVATE 0.103.5 + cli_strerror@CLAMAV_PRIVATE 0.103.5 + cli_strlcat@CLAMAV_PRIVATE 0.103.5 + cli_strlcpy@CLAMAV_PRIVATE 0.103.5 + cli_strntoul@CLAMAV_PRIVATE 0.103.5 + cli_strrcpy@CLAMAV_PRIVATE 0.103.5 + cli_strtok@CLAMAV_PRIVATE 0.103.5 + cli_strtokbuf@CLAMAV_PRIVATE 0.103.5 + cli_strtokenize@CLAMAV_PRIVATE 0.103.5 + cli_textbuffer_append_normalize@CLAMAV_PRIVATE 0.103.5 + cli_unescape@CLAMAV_PRIVATE 0.103.5 + cli_unlink@CLAMAV_PRIVATE 0.103.5 + cli_url_canon@CLAMAV_PRIVATE 0.103.5 + cli_utf16_to_utf8@CLAMAV_PRIVATE 0.103.5 + cli_utf16toascii@CLAMAV_PRIVATE 0.103.5 + cli_vba_inflate@CLAMAV_PRIVATE 0.103.5 + cli_vba_readdir@CLAMAV_PRIVATE 0.103.5 + cli_versig2@CLAMAV_PRIVATE 0.103.5 + cli_versig@CLAMAV_PRIVATE 0.103.5 + cli_warnmsg@CLAMAV_PRIVATE 0.103.5 + cli_wm_decrypt_macro@CLAMAV_PRIVATE 0.103.5 + cli_wm_readdir@CLAMAV_PRIVATE 0.103.5 + cli_writen@CLAMAV_PRIVATE 0.103.5 + decodeLine@CLAMAV_PRIVATE 0.103.5 + disasmbuf@CLAMAV_PRIVATE 0.103.5 + fmap@CLAMAV_PRIVATE 0.103.5 + fmap_dump_to_file@CLAMAV_PRIVATE 0.103.5 + fmap_duplicate@CLAMAV_PRIVATE 0.103.5 + free_duplicate_fmap@CLAMAV_PRIVATE 0.103.5 + get_fpu_endian@CLAMAV_PRIVATE 0.103.5 + have_clamjit@CLAMAV_PRIVATE 0.103.5 + have_rar@CLAMAV_PRIVATE 0.103.5 + html_normalise_map@CLAMAV_PRIVATE 0.103.5 + html_normalise_mem@CLAMAV_PRIVATE 0.103.5 + html_screnc_decode@CLAMAV_PRIVATE 0.103.5 + html_tag_arg_free@CLAMAV_PRIVATE 0.103.5 + init_domainlist@CLAMAV_PRIVATE 0.103.5 + init_regex_list@CLAMAV_PRIVATE 0.103.5 + init_whitelist@CLAMAV_PRIVATE 0.103.5 + is_regex_ok@CLAMAV_PRIVATE 0.103.5 + load_regex_matcher@CLAMAV_PRIVATE 0.103.5 lsig_sub_matched@CLAMAV_PUBLIC 0.101.0 - messageCreate@CLAMAV_PRIVATE 0.103.4 - messageDestroy@CLAMAV_PRIVATE 0.103.4 - mpool_calloc@CLAMAV_PRIVATE 0.103.4 - mpool_create@CLAMAV_PRIVATE 0.103.4 - mpool_destroy@CLAMAV_PRIVATE 0.103.4 - mpool_free@CLAMAV_PRIVATE 0.103.4 - mpool_getstats@CLAMAV_PRIVATE 0.103.4 - phishingScan@CLAMAV_PRIVATE 0.103.4 - phishing_done@CLAMAV_PRIVATE 0.103.4 - phishing_init@CLAMAV_PRIVATE 0.103.4 - regex_list_add_pattern@CLAMAV_PRIVATE 0.103.4 - regex_list_done@CLAMAV_PRIVATE 0.103.4 - regex_list_match@CLAMAV_PRIVATE 0.103.4 - tableCreate@CLAMAV_PRIVATE 0.103.4 - tableDestroy@CLAMAV_PRIVATE 0.103.4 - tableFind@CLAMAV_PRIVATE 0.103.4 - tableInsert@CLAMAV_PRIVATE 0.103.4 - tableIterate@CLAMAV_PRIVATE 0.103.4 - tableRemove@CLAMAV_PRIVATE 0.103.4 - tableUpdate@CLAMAV_PRIVATE 0.103.4 - text_normalize_init@CLAMAV_PRIVATE 0.103.4 - text_normalize_map@CLAMAV_PRIVATE 0.103.4 - text_normalize_reset@CLAMAV_PRIVATE 0.103.4 - uniq_add@CLAMAV_PRIVATE 0.103.4 - uniq_free@CLAMAV_PRIVATE 0.103.4 - uniq_get@CLAMAV_PRIVATE 0.103.4 - uniq_init@CLAMAV_PRIVATE 0.103.4 + messageCreate@CLAMAV_PRIVATE 0.103.5 + messageDestroy@CLAMAV_PRIVATE 0.103.5 + mpool_calloc@CLAMAV_PRIVATE 0.103.5 + mpool_create@CLAMAV_PRIVATE 0.103.5 + mpool_destroy@CLAMAV_PRIVATE 0.103.5 + mpool_free@CLAMAV_PRIVATE 0.103.5 + mpool_getstats@CLAMAV_PRIVATE 0.103.5 + phishingScan@CLAMAV_PRIVATE 0.103.5 + phishing_done@CLAMAV_PRIVATE 0.103.5 + phishing_init@CLAMAV_PRIVATE 0.103.5 + regex_list_add_pattern@CLAMAV_PRIVATE 0.103.5 + regex_list_done@CLAMAV_PRIVATE 0.103.5 + regex_list_match@CLAMAV_PRIVATE 0.103.5 + tableCreate@CLAMAV_PRIVATE 0.103.5 + tableDestroy@CLAMAV_PRIVATE 0.103.5 + tableFind@CLAMAV_PRIVATE 0.103.5 + tableInsert@CLAMAV_PRIVATE 0.103.5 + tableIterate@CLAMAV_PRIVATE 0.103.5 + tableRemove@CLAMAV_PRIVATE 0.103.5 + tableUpdate@CLAMAV_PRIVATE 0.103.5 + text_normalize_init@CLAMAV_PRIVATE 0.103.5 + text_normalize_map@CLAMAV_PRIVATE 0.103.5 + text_normalize_reset@CLAMAV_PRIVATE 0.103.5 + uniq_add@CLAMAV_PRIVATE 0.103.5 + uniq_free@CLAMAV_PRIVATE 0.103.5 + uniq_get@CLAMAV_PRIVATE 0.103.5 + uniq_init@CLAMAV_PRIVATE 0.103.5 libfreshclam.so.2 libclamav9 #MINVER# FRESHCLAM_PRIVATE@FRESHCLAM_PRIVATE 0.103.0 FRESHCLAM_PUBLIC@FRESHCLAM_PUBLIC 0.102.1 diff -Nru clamav-0.103.4+dfsg/debian/patches/Add-support-for-LLVM-3.7.patch clamav-0.103.5+dfsg/debian/patches/Add-support-for-LLVM-3.7.patch --- clamav-0.103.4+dfsg/debian/patches/Add-support-for-LLVM-3.7.patch 2021-12-16 20:02:29.000000000 +0000 +++ clamav-0.103.5+dfsg/debian/patches/Add-support-for-LLVM-3.7.patch 2022-01-13 20:49:00.000000000 +0000 @@ -1,4 +1,4 @@ -From 9e14635f7236ad56865837ace192e266b840bbf1 Mon Sep 17 00:00:00 2001 +From ca1a543796d95c62bf4c4b9ec15ad94bfcf08077 Mon Sep 17 00:00:00 2001 From: Andreas Cadhalpun Date: Fri, 14 Oct 2016 20:24:39 +0200 Subject: Add support for LLVM 3.7 @@ -24,7 +24,7 @@ 4 files changed, 244 insertions(+), 19 deletions(-) diff --git a/libclamav/c++/ClamBCRTChecks.cpp b/libclamav/c++/ClamBCRTChecks.cpp -index c8a853f..09657b9 100644 +index 95b4e17..550aa80 100644 --- a/libclamav/c++/ClamBCRTChecks.cpp +++ b/libclamav/c++/ClamBCRTChecks.cpp @@ -201,9 +201,11 @@ namespace llvm { @@ -247,7 +247,7 @@ if (isa(Limit)) { Base = 0; diff --git a/libclamav/c++/bytecode2llvm.cpp b/libclamav/c++/bytecode2llvm.cpp -index 6f1181a..a0bab63 100644 +index 350e8d4..6a9bd7e 100644 --- a/libclamav/c++/bytecode2llvm.cpp +++ b/libclamav/c++/bytecode2llvm.cpp @@ -64,7 +64,11 @@ diff -Nru clamav-0.103.4+dfsg/debian/patches/Add-support-for-LLVM-3.8.patch clamav-0.103.5+dfsg/debian/patches/Add-support-for-LLVM-3.8.patch --- clamav-0.103.4+dfsg/debian/patches/Add-support-for-LLVM-3.8.patch 2021-12-16 20:02:29.000000000 +0000 +++ clamav-0.103.5+dfsg/debian/patches/Add-support-for-LLVM-3.8.patch 2022-01-13 20:49:00.000000000 +0000 @@ -1,4 +1,4 @@ -From 36723b3b772b2fd13429092e8238979bd225b2d8 Mon Sep 17 00:00:00 2001 +From f1ea5523cdfa2b0cda73d7afeff871cf6a27ef68 Mon Sep 17 00:00:00 2001 From: Andreas Cadhalpun Date: Fri, 14 Oct 2016 20:24:48 +0200 Subject: Add support for LLVM 3.8 @@ -22,7 +22,7 @@ 5 files changed, 119 insertions(+), 14 deletions(-) diff --git a/libclamav/c++/ClamBCRTChecks.cpp b/libclamav/c++/ClamBCRTChecks.cpp -index 09657b9..695a32b 100644 +index 550aa80..949eeec 100644 --- a/libclamav/c++/ClamBCRTChecks.cpp +++ b/libclamav/c++/ClamBCRTChecks.cpp @@ -54,7 +54,9 @@ @@ -214,7 +214,7 @@ } diff --git a/libclamav/c++/bytecode2llvm.cpp b/libclamav/c++/bytecode2llvm.cpp -index a0bab63..e7093cb 100644 +index 6a9bd7e..3490690 100644 --- a/libclamav/c++/bytecode2llvm.cpp +++ b/libclamav/c++/bytecode2llvm.cpp @@ -171,7 +171,9 @@ void LLVMInitializePowerPCAsmPrinter(); diff -Nru clamav-0.103.4+dfsg/debian/patches/Add-support-for-LLVM-3.9.patch clamav-0.103.5+dfsg/debian/patches/Add-support-for-LLVM-3.9.patch --- clamav-0.103.4+dfsg/debian/patches/Add-support-for-LLVM-3.9.patch 2021-12-16 20:02:29.000000000 +0000 +++ clamav-0.103.5+dfsg/debian/patches/Add-support-for-LLVM-3.9.patch 2022-01-13 20:49:00.000000000 +0000 @@ -1,4 +1,4 @@ -From 331fc24f27040bcec996893cb1fbb95588c1e925 Mon Sep 17 00:00:00 2001 +From db2466aa2494f16f5552b2b277af66bee4b087f4 Mon Sep 17 00:00:00 2001 From: Andreas Cadhalpun Date: Fri, 14 Oct 2016 20:24:56 +0200 Subject: Add support for LLVM 3.9 @@ -14,7 +14,7 @@ 2 files changed, 13 insertions(+), 3 deletions(-) diff --git a/libclamav/c++/bytecode2llvm.cpp b/libclamav/c++/bytecode2llvm.cpp -index e7093cb..ad93eae 100644 +index 3490690..7e4de54 100644 --- a/libclamav/c++/bytecode2llvm.cpp +++ b/libclamav/c++/bytecode2llvm.cpp @@ -788,7 +788,11 @@ class RuntimeLimits : public FunctionPass { diff -Nru clamav-0.103.4+dfsg/debian/patches/Change-paths-in-sample-conf-file-to-match-Debian.patch clamav-0.103.5+dfsg/debian/patches/Change-paths-in-sample-conf-file-to-match-Debian.patch --- clamav-0.103.4+dfsg/debian/patches/Change-paths-in-sample-conf-file-to-match-Debian.patch 2021-12-16 20:02:29.000000000 +0000 +++ clamav-0.103.5+dfsg/debian/patches/Change-paths-in-sample-conf-file-to-match-Debian.patch 2022-01-13 20:49:00.000000000 +0000 @@ -1,4 +1,4 @@ -From 18c8f7b4052622bcf60857b253527788a6e29aa9 Mon Sep 17 00:00:00 2001 +From 2e6262965ecae28f1880620661d352e0ff8e68b3 Mon Sep 17 00:00:00 2001 From: Scott Kitterman Date: Mon, 10 Mar 2014 19:20:18 -0400 Subject: Change paths in sample conf file to match Debian diff -Nru clamav-0.103.4+dfsg/debian/patches/Fix-ck_assert_msg-call.patch clamav-0.103.5+dfsg/debian/patches/Fix-ck_assert_msg-call.patch --- clamav-0.103.4+dfsg/debian/patches/Fix-ck_assert_msg-call.patch 2021-12-16 20:02:29.000000000 +0000 +++ clamav-0.103.5+dfsg/debian/patches/Fix-ck_assert_msg-call.patch 2022-01-13 20:49:00.000000000 +0000 @@ -1,4 +1,4 @@ -From a9367dca1bb602551ab6475b4a4582a6b1de45c5 Mon Sep 17 00:00:00 2001 +From d98f95bd2562d8205e1e0a209c06c7706b9107fc Mon Sep 17 00:00:00 2001 From: Orion Poplawski Date: Thu, 17 Sep 2020 22:26:04 -0600 Subject: unit tests: Fix ck_assert_msg() call @@ -11,7 +11,7 @@ 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unit_tests/check_jsnorm.c b/unit_tests/check_jsnorm.c -index f15dce4..7618776 100644 +index 114f052..9b2f4eb 100644 --- a/unit_tests/check_jsnorm.c +++ b/unit_tests/check_jsnorm.c @@ -247,7 +247,7 @@ static void tokenizer_test(const char *in, const char *expected, int split) diff -Nru clamav-0.103.4+dfsg/debian/patches/add-support-for-system-tomsfastmath.patch clamav-0.103.5+dfsg/debian/patches/add-support-for-system-tomsfastmath.patch --- clamav-0.103.4+dfsg/debian/patches/add-support-for-system-tomsfastmath.patch 2021-12-16 20:02:29.000000000 +0000 +++ clamav-0.103.5+dfsg/debian/patches/add-support-for-system-tomsfastmath.patch 2022-01-13 20:49:00.000000000 +0000 @@ -1,4 +1,4 @@ -From fb9b5e870fb2eee0cf0cb729de7210e5d449f9b8 Mon Sep 17 00:00:00 2001 +From c2db4e1f887e84773dcacbbf175eab292cf8aace Mon Sep 17 00:00:00 2001 From: Andreas Cadhalpun Date: Wed, 11 Mar 2015 20:03:15 +0100 Subject: add support for system tomsfastmath @@ -14,7 +14,7 @@ create mode 100644 m4/reorganization/libs/tomsfastmath.m4 diff --git a/configure.ac b/configure.ac -index ef1532f..7625a00 100644 +index 514a967..32be9e5 100644 --- a/configure.ac +++ b/configure.ac @@ -98,6 +98,7 @@ m4_include([m4/reorganization/libs/libmspack.m4]) @@ -34,7 +34,7 @@ # Yep, downgrading the compiler avoids the bug too: # 4.0.x, and 4.1.0 are the known buggy versions diff --git a/libclamav/Makefile.am b/libclamav/Makefile.am -index 0174a92..5547972 100644 +index 526ad56..7a5185e 100644 --- a/libclamav/Makefile.am +++ b/libclamav/Makefile.am @@ -588,6 +588,7 @@ libclamav_la_SOURCES += yara_arena.c \ diff -Nru clamav-0.103.4+dfsg/debian/patches/clamd_dont_depend_on_clamav_demon_socket.patch clamav-0.103.5+dfsg/debian/patches/clamd_dont_depend_on_clamav_demon_socket.patch --- clamav-0.103.4+dfsg/debian/patches/clamd_dont_depend_on_clamav_demon_socket.patch 2021-12-16 20:02:29.000000000 +0000 +++ clamav-0.103.5+dfsg/debian/patches/clamd_dont_depend_on_clamav_demon_socket.patch 2022-01-13 20:49:00.000000000 +0000 @@ -1,4 +1,4 @@ -From 6f48ee86a9efeb8cf58c052ae57a7f6250a89a39 Mon Sep 17 00:00:00 2001 +From 1fcbdac3d389676f930f06292a3f5ebcf58db2d0 Mon Sep 17 00:00:00 2001 From: Sebastian Andrzej Siewior Date: Thu, 11 Aug 2016 21:54:10 +0200 Subject: clamd: don't depend on clamav-demon.socket diff -Nru clamav-0.103.4+dfsg/debian/rules clamav-0.103.5+dfsg/debian/rules --- clamav-0.103.4+dfsg/debian/rules 2021-12-16 20:02:29.000000000 +0000 +++ clamav-0.103.5+dfsg/debian/rules 2022-01-13 20:49:00.000000000 +0000 @@ -88,7 +88,7 @@ fi;\ done; \ # Check for library features which may have been upgraded. - if ! grep -q "CL_FLEVEL 125" libclamav/others.h ; then \ + if ! grep -q "CL_FLEVEL 126" libclamav/others.h ; then \ echo "cl_retflevel needs boosting in symbol file"; \ touch debian/exit; \ fi; diff -Nru clamav-0.103.4+dfsg/docs/Makefile.am clamav-0.103.5+dfsg/docs/Makefile.am --- clamav-0.103.4+dfsg/docs/Makefile.am 2021-11-02 15:47:46.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/Makefile.am 2022-01-10 23:17:45.000000000 +0000 @@ -1,5 +1,5 @@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2002-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/docs/Makefile.in clamav-0.103.5+dfsg/docs/Makefile.in --- clamav-0.103.4+dfsg/docs/Makefile.in 2021-11-02 15:48:16.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/Makefile.in 2022-01-10 23:18:12.000000000 +0000 @@ -15,7 +15,7 @@ @SET_MAKE@ # -# Copyright (C) 2013-2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. +# Copyright (C) 2013-2022 Cisco Systems, Inc. and/or its affiliates. All rights reserved. # Copyright (C) 2007-2013 Sourcefire, Inc. # Copyright (C) 2002-2007 Tomasz Kojm # diff -Nru clamav-0.103.4+dfsg/docs/html/404.html clamav-0.103.5+dfsg/docs/html/404.html --- clamav-0.103.4+dfsg/docs/html/404.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/404.html 2022-01-10 23:17:46.000000000 +0000 @@ -5,7 +5,10 @@ + + + @@ -16,15 +19,18 @@ + + + @@ -122,6 +128,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/Introduction.html clamav-0.103.5+dfsg/docs/html/Introduction.html --- clamav-0.103.4+dfsg/docs/html/Introduction.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/Introduction.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Introduction - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/appendix/Appendix.html clamav-0.103.5+dfsg/docs/html/appendix/Appendix.html --- clamav-0.103.4+dfsg/docs/html/appendix/Appendix.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/appendix/Appendix.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Appendix - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/appendix/Authenticode.html clamav-0.103.5+dfsg/docs/html/appendix/Authenticode.html --- clamav-0.103.4+dfsg/docs/html/appendix/Authenticode.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/appendix/Authenticode.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Microsoft Authenticode Signature Verification - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/appendix/CvdPrivateMirror.html clamav-0.103.5+dfsg/docs/html/appendix/CvdPrivateMirror.html --- clamav-0.103.4+dfsg/docs/html/appendix/CvdPrivateMirror.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/appendix/CvdPrivateMirror.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Hosting a Private Database Mirror - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/appendix/FileTypes.html clamav-0.103.5+dfsg/docs/html/appendix/FileTypes.html --- clamav-0.103.4+dfsg/docs/html/appendix/FileTypes.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/appendix/FileTypes.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ ClamAV File Types and Target Types - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/appendix/FunctionalityLevels.html clamav-0.103.5+dfsg/docs/html/appendix/FunctionalityLevels.html --- clamav-0.103.4+dfsg/docs/html/appendix/FunctionalityLevels.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/appendix/FunctionalityLevels.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ ClamAV Versions and Functionality Levels - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/appendix/Terminology.html clamav-0.103.5+dfsg/docs/html/appendix/Terminology.html --- clamav-0.103.4+dfsg/docs/html/appendix/Terminology.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/appendix/Terminology.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Terminology - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/css/general.css clamav-0.103.5+dfsg/docs/html/css/general.css --- clamav-0.103.4+dfsg/docs/html/css/general.css 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/css/general.css 2022-01-10 23:17:46.000000000 +0000 @@ -12,6 +12,7 @@ color: var(--fg); background-color: var(--bg); text-size-adjust: none; + -webkit-text-size-adjust: none; } body { diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-cvd.html clamav-0.103.5+dfsg/docs/html/faq/faq-cvd.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-cvd.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-cvd.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Signature Database (CVD) - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-eol.html clamav-0.103.5+dfsg/docs/html/faq/faq-eol.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-eol.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-eol.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ ClamAV EOL Policy - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-freshclam.html clamav-0.103.5+dfsg/docs/html/faq/faq-freshclam.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-freshclam.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-freshclam.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ FreshClam (Signature Updater) - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-ignore.html clamav-0.103.5+dfsg/docs/html/faq/faq-ignore.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-ignore.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-ignore.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Ignore - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-misc.html clamav-0.103.5+dfsg/docs/html/faq/faq-misc.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-misc.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-misc.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Misc - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-ml.html clamav-0.103.5+dfsg/docs/html/faq/faq-ml.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-ml.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-ml.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Mailing Lists - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-pua.html clamav-0.103.5+dfsg/docs/html/faq/faq-pua.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-pua.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-pua.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ PUA (Potentially Unwanted Application) - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-safebrowsing.html clamav-0.103.5+dfsg/docs/html/faq/faq-safebrowsing.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-safebrowsing.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-safebrowsing.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Safe Browsing - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-scan-alerts.html clamav-0.103.5+dfsg/docs/html/faq/faq-scan-alerts.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-scan-alerts.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-scan-alerts.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Interpreting Scan Alerts - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-troubleshoot.html clamav-0.103.5+dfsg/docs/html/faq/faq-troubleshoot.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-troubleshoot.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-troubleshoot.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Troubleshooting - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-uninstall.html clamav-0.103.5+dfsg/docs/html/faq/faq-uninstall.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-uninstall.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-uninstall.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Uninstall - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-upgrade.html clamav-0.103.5+dfsg/docs/html/faq/faq-upgrade.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-upgrade.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-upgrade.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Upgrading - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-whichversion.html clamav-0.103.5+dfsg/docs/html/faq/faq-whichversion.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-whichversion.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-whichversion.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Selecting the Right Version of ClamAV for You - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq-win32.html clamav-0.103.5+dfsg/docs/html/faq/faq-win32.html --- clamav-0.103.4+dfsg/docs/html/faq/faq-win32.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq-win32.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Win32 - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/faq/faq.html clamav-0.103.5+dfsg/docs/html/faq/faq.html --- clamav-0.103.4+dfsg/docs/html/faq/faq.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/faq/faq.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Frequently Asked Questions - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/index.html clamav-0.103.5+dfsg/docs/html/index.html --- clamav-0.103.4+dfsg/docs/html/index.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/index.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Introduction - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development/Contribute.html clamav-0.103.5+dfsg/docs/html/manual/Development/Contribute.html --- clamav-0.103.4+dfsg/docs/html/manual/Development/Contribute.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development/Contribute.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Contribute - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development/build-installer-packages.html clamav-0.103.5+dfsg/docs/html/manual/Development/build-installer-packages.html --- clamav-0.103.4+dfsg/docs/html/manual/Development/build-installer-packages.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development/build-installer-packages.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Building the Installer Packages - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development/clamav-git-work-flow.html clamav-0.103.5+dfsg/docs/html/manual/Development/clamav-git-work-flow.html --- clamav-0.103.4+dfsg/docs/html/manual/Development/clamav-git-work-flow.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development/clamav-git-work-flow.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ ClamAV Git Work Flow - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development/code-coverage.html clamav-0.103.5+dfsg/docs/html/manual/Development/code-coverage.html --- clamav-0.103.4+dfsg/docs/html/manual/Development/code-coverage.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development/code-coverage.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Computing Code Coverage - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development/development-builds.html clamav-0.103.5+dfsg/docs/html/manual/Development/development-builds.html --- clamav-0.103.4+dfsg/docs/html/manual/Development/development-builds.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development/development-builds.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Building for Development - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development/fuzzing-sanitizers.html clamav-0.103.5+dfsg/docs/html/manual/Development/fuzzing-sanitizers.html --- clamav-0.103.4+dfsg/docs/html/manual/Development/fuzzing-sanitizers.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development/fuzzing-sanitizers.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Fuzzing Sanitizers - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development/github-pr-basics.html clamav-0.103.5+dfsg/docs/html/manual/Development/github-pr-basics.html --- clamav-0.103.4+dfsg/docs/html/manual/Development/github-pr-basics.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development/github-pr-basics.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Pull Request Basics - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development/libclamav.html clamav-0.103.5+dfsg/docs/html/manual/Development/libclamav.html --- clamav-0.103.4+dfsg/docs/html/manual/Development/libclamav.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development/libclamav.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ libclamav - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development/performance-profiling.html clamav-0.103.5+dfsg/docs/html/manual/Development/performance-profiling.html --- clamav-0.103.4+dfsg/docs/html/manual/Development/performance-profiling.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development/performance-profiling.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Performance Profiling - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development/personal-forks.html clamav-0.103.5+dfsg/docs/html/manual/Development/personal-forks.html --- clamav-0.103.4+dfsg/docs/html/manual/Development/personal-forks.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development/personal-forks.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Working with Your Fork - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development/testing-pull-requests.html clamav-0.103.5+dfsg/docs/html/manual/Development/testing-pull-requests.html --- clamav-0.103.4+dfsg/docs/html/manual/Development/testing-pull-requests.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development/testing-pull-requests.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Reviewing Pull Requests - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development/tips-and-tricks.html clamav-0.103.5+dfsg/docs/html/manual/Development/tips-and-tricks.html --- clamav-0.103.4+dfsg/docs/html/manual/Development/tips-and-tricks.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development/tips-and-tricks.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Dev Tips & Tricks - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Development.html clamav-0.103.5+dfsg/docs/html/manual/Development.html --- clamav-0.103.4+dfsg/docs/html/manual/Development.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Development.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ For Developers - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Installing/Add-clamav-user.html clamav-0.103.5+dfsg/docs/html/manual/Installing/Add-clamav-user.html --- clamav-0.103.4+dfsg/docs/html/manual/Installing/Add-clamav-user.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Installing/Add-clamav-user.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Add a service user account - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Installing/Community-projects.html clamav-0.103.5+dfsg/docs/html/manual/Installing/Community-projects.html --- clamav-0.103.4+dfsg/docs/html/manual/Installing/Community-projects.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Installing/Community-projects.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Community Projects - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Installing/Docker.html clamav-0.103.5+dfsg/docs/html/manual/Installing/Docker.html --- clamav-0.103.4+dfsg/docs/html/manual/Installing/Docker.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Installing/Docker.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Docker - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Installing/Installing-from-source-Unix-old.html clamav-0.103.5+dfsg/docs/html/manual/Installing/Installing-from-source-Unix-old.html --- clamav-0.103.4+dfsg/docs/html/manual/Installing/Installing-from-source-Unix-old.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Installing/Installing-from-source-Unix-old.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Unix from source (v0.103-) - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Installing/Installing-from-source-Unix.html clamav-0.103.5+dfsg/docs/html/manual/Installing/Installing-from-source-Unix.html --- clamav-0.103.4+dfsg/docs/html/manual/Installing/Installing-from-source-Unix.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Installing/Installing-from-source-Unix.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Unix from source (v0.104+) - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Installing/Installing-from-source-Windows.html clamav-0.103.5+dfsg/docs/html/manual/Installing/Installing-from-source-Windows.html --- clamav-0.103.4+dfsg/docs/html/manual/Installing/Installing-from-source-Windows.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Installing/Installing-from-source-Windows.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Windows from source - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Installing/Packages.html clamav-0.103.5+dfsg/docs/html/manual/Installing/Packages.html --- clamav-0.103.4+dfsg/docs/html/manual/Installing/Packages.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Installing/Packages.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Packages - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Installing.html clamav-0.103.5+dfsg/docs/html/manual/Installing.html --- clamav-0.103.4+dfsg/docs/html/manual/Installing.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Installing.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Installing - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/OnAccess.html clamav-0.103.5+dfsg/docs/html/manual/OnAccess.html --- clamav-0.103.4+dfsg/docs/html/manual/OnAccess.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/OnAccess.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ On-Access Scanning - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/AllowLists.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/AllowLists.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/AllowLists.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/AllowLists.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Allow Lists - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/AuthenticodeRules.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/AuthenticodeRules.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/AuthenticodeRules.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/AuthenticodeRules.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Trusted and Revoked EXE Certificates - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/BodySignatureFormat.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/BodySignatureFormat.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/BodySignatureFormat.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/BodySignatureFormat.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Content-based Signature Format - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/BytecodeSignatures.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/BytecodeSignatures.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/BytecodeSignatures.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/BytecodeSignatures.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Bytecode Signatures - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/ContainerMetadata.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/ContainerMetadata.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/ContainerMetadata.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/ContainerMetadata.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Container Metadata Signatures - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/DatabaseInfo.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/DatabaseInfo.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/DatabaseInfo.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/DatabaseInfo.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ CVD Info File - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/DynamicConfig.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/DynamicConfig.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/DynamicConfig.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/DynamicConfig.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Dynamic Configuration Settings - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/EncryptedArchives.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/EncryptedArchives.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/EncryptedArchives.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/EncryptedArchives.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Archive Passwords (experimental) - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/ExtendedSignatures.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/ExtendedSignatures.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/ExtendedSignatures.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/ExtendedSignatures.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Extended Signatures - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/FileTypeMagic.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/FileTypeMagic.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/FileTypeMagic.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/FileTypeMagic.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ File Type Recognition - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/HashSignatures.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/HashSignatures.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/HashSignatures.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/HashSignatures.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Hash-based Signatures - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/LogicalSignatures.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/LogicalSignatures.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/LogicalSignatures.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/LogicalSignatures.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Logical Signatures - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/PhishSigs.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/PhishSigs.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/PhishSigs.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/PhishSigs.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Phishing Signatures - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures/YaraRules.html clamav-0.103.5+dfsg/docs/html/manual/Signatures/YaraRules.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures/YaraRules.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures/YaraRules.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ YARA Rules - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Signatures.html clamav-0.103.5+dfsg/docs/html/manual/Signatures.html --- clamav-0.103.4+dfsg/docs/html/manual/Signatures.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Signatures.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Signatures - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Usage/Configuration.html clamav-0.103.5+dfsg/docs/html/manual/Usage/Configuration.html --- clamav-0.103.4+dfsg/docs/html/manual/Usage/Configuration.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Usage/Configuration.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Configuration - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Usage/ReportABug.html clamav-0.103.5+dfsg/docs/html/manual/Usage/ReportABug.html --- clamav-0.103.4+dfsg/docs/html/manual/Usage/ReportABug.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Usage/ReportABug.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Report a Bug - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Usage/Scanning.html clamav-0.103.5+dfsg/docs/html/manual/Usage/Scanning.html --- clamav-0.103.4+dfsg/docs/html/manual/Usage/Scanning.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Usage/Scanning.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Scanning - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Usage/Services.html clamav-0.103.5+dfsg/docs/html/manual/Usage/Services.html --- clamav-0.103.4+dfsg/docs/html/manual/Usage/Services.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Usage/Services.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Running ClamAV Services - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Usage/SignatureManagement.html clamav-0.103.5+dfsg/docs/html/manual/Usage/SignatureManagement.html --- clamav-0.103.4+dfsg/docs/html/manual/Usage/SignatureManagement.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Usage/SignatureManagement.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Updating Signature Databases - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/manual/Usage.html clamav-0.103.5+dfsg/docs/html/manual/Usage.html --- clamav-0.103.4+dfsg/docs/html/manual/Usage.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/manual/Usage.html 2022-01-10 23:17:46.000000000 +0000 @@ -4,7 +4,10 @@ Usage - ClamAV Documentation + + + @@ -15,15 +18,18 @@ + + + @@ -121,6 +127,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/print.html clamav-0.103.5+dfsg/docs/html/print.html --- clamav-0.103.4+dfsg/docs/html/print.html 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/print.html 2022-01-10 23:17:46.000000000 +0000 @@ -5,7 +5,10 @@ ClamAV Documentation + + + @@ -16,15 +19,18 @@ + + + @@ -122,6 +128,7 @@ + + + + + + + diff -Nru clamav-0.103.4+dfsg/docs/html/searchindex.js clamav-0.103.5+dfsg/docs/html/searchindex.js --- clamav-0.103.4+dfsg/docs/html/searchindex.js 2021-11-02 15:47:49.000000000 +0000 +++ clamav-0.103.5+dfsg/docs/html/searchindex.js 2022-01-10 23:17:46.000000000 +0000 @@ -1 +1 @@ -Object.assign(window.search, {"doc_urls":["Introduction.html#clamav","Introduction.html#community-projects","Introduction.html#features","Introduction.html#license","Introduction.html#supported-platforms","Introduction.html#recommended-system-requirements","Introduction.html#mailing-lists-and-chat","Introduction.html#submitting-new-or-otherwise-undetected-malware","Introduction.html#related-products","manual/Installing.html#installing-clamav","manual/Installing.html#installing-with-a-package-manager","manual/Installing.html#installing-with-an-installer","manual/Installing.html#official-clamav-docker-images","manual/Installing.html#installing-from-source","manual/Installing.html#what-now","manual/Installing/Packages.html#clamav-packages","manual/Installing/Packages.html#the-packages","manual/Installing/Docker.html#clamav-in-docker","manual/Installing/Docker.html#the-official-images-on-docker-hub","manual/Installing/Docker.html#building-the-clamav-image","manual/Installing/Docker.html#running-clamd","manual/Installing/Docker.html#running-clamdscan","manual/Installing/Docker.html#controlling-the-container","manual/Installing/Docker.html#connecting-to-the-container","manual/Installing/Docker.html#container-clamd-health-check","manual/Installing/Docker.html#performance","manual/Installing/Docker.html#bandwidth","manual/Installing/Docker.html#advanced-container-configurations","manual/Installing/Installing-from-source-Unix.html#building-clamav-with-cmake-v0104-and-newer","manual/Installing/Installing-from-source-Unix.html#install-prerequisites","manual/Installing/Installing-from-source-Unix.html#adding-new-system-user-and-group","manual/Installing/Installing-from-source-Unix.html#download-the-source-code","manual/Installing/Installing-from-source-Unix.html#build-clamav","manual/Installing/Installing-from-source-Unix.html#un-install","manual/Installing/Installing-from-source-Unix.html#what-now","manual/Installing/Installing-from-source-Unix-old.html#building-clamav-with-autotools-v0103-and-older","manual/Installing/Installing-from-source-Unix-old.html#install-prerequisites","manual/Installing/Installing-from-source-Unix-old.html#adding-new-system-user-and-group","manual/Installing/Installing-from-source-Unix-old.html#download-the-source-code","manual/Installing/Installing-from-source-Unix-old.html#build-clamav","manual/Installing/Installing-from-source-Unix-old.html#un-install","manual/Installing/Installing-from-source-Unix-old.html#what-now","manual/Installing/Installing-from-source-Windows.html#installing-clamav-on-windows-from-source","manual/Installing/Installing-from-source-Windows.html#install-prerequisites","manual/Installing/Installing-from-source-Windows.html#download-the-source-code","manual/Installing/Installing-from-source-Windows.html#build-clamav","manual/Installing/Installing-from-source-Windows.html#what-now","manual/Installing/Community-projects.html#community-projects","manual/Installing/Community-projects.html#signatures","manual/Installing/Community-projects.html#mail-filters","manual/Installing/Community-projects.html#clamav-bindings","manual/Installing/Community-projects.html#miscellaneous-tools","manual/Installing/Add-clamav-user.html#add-a-service-user-account","manual/Installing/Add-clamav-user.html#create-a-service-user-account-and-group","manual/Installing/Add-clamav-user.html#about-how-the-service-accounts-are-used","manual/Installing/Add-clamav-user.html#after-installation--make-the-service-account-own-the-database-directory","manual/Usage.html#usage","manual/Usage.html#purpose","manual/Usage.html#daemon","manual/Usage.html#scanner","manual/Usage.html#signature-testing-and-management","manual/Usage.html#configuration","manual/Usage/Configuration.html#configuration","manual/Usage/Configuration.html#first-time-set-up","manual/Usage/Configuration.html#freshclamconf","manual/Usage/Configuration.html#clamdconf","manual/Usage/Configuration.html#clamav-milterconf","manual/Usage/Configuration.html#configure-selinux-for-clamav","manual/Usage/Configuration.html#clamconf","manual/Usage/Configuration.html#next-steps","manual/Usage/SignatureManagement.html#signature-testing-and-management","manual/Usage/SignatureManagement.html#freshclam","manual/Usage/SignatureManagement.html#sigtool","manual/Usage/SignatureManagement.html#clambc","manual/Usage/SignatureManagement.html#next-steps","manual/Usage/SignatureManagement.html#create-your-own-signatures","manual/Usage/Scanning.html#scanning","manual/Usage/Scanning.html#daemon","manual/Usage/Scanning.html#one-time-scanning","manual/Usage/Scanning.html#process-memory-scanning","manual/Usage/Scanning.html#disclaimers","manual/Usage/Scanning.html#windows-specific-issues","manual/OnAccess.html#on-access-scanning","manual/OnAccess.html#purpose","manual/OnAccess.html#requirements","manual/OnAccess.html#general-use","manual/OnAccess.html#troubleshooting","manual/OnAccess.html#configuration-and-recipes","manual/OnAccess.html#command-line-options-for-versions--0102","manual/Usage/Services.html#running-clamav-services","manual/Usage/Services.html#windows-services","manual/Usage/ReportABug.html#how-to-report-a-bug","manual/Usage/ReportABug.html#warning-against-accidental-vulnerability-disclosure","manual/Usage/ReportABug.html#steps-before-you-report","manual/Usage/ReportABug.html#required-information","manual/Signatures.html#creating-signatures-for-clamav","manual/Signatures.html#introduction","manual/Signatures.html#database-formats","manual/Signatures.html#signature-writing-tips-and-tricks","manual/Signatures/DatabaseInfo.html#database-info","manual/Signatures/DynamicConfig.html#dynamic-configuration-dconf","manual/Signatures/DynamicConfig.html#example","manual/Signatures/AuthenticodeRules.html#trusted-and-revoked-certificates","manual/Signatures/FileTypeMagic.html#file-type-magic","manual/Signatures/AllowLists.html#allow-list-databases","manual/Signatures/AllowLists.html#file-allow-lists","manual/Signatures/AllowLists.html#signature-ignore-lists","manual/Signatures/HashSignatures.html#file-hash-signatures","manual/Signatures/HashSignatures.html#md5-hash-based-signatures","manual/Signatures/HashSignatures.html#sha1-and-sha256-hash-based-signatures","manual/Signatures/HashSignatures.html#hash-signatures-with-unknown-size","manual/Signatures/HashSignatures.html#pe-section-based-hash-signatures","manual/Signatures/BodySignatureFormat.html#body-based-signature-content-format","manual/Signatures/BodySignatureFormat.html#hexadecimal-format","manual/Signatures/BodySignatureFormat.html#wildcards","manual/Signatures/BodySignatureFormat.html#character-classes","manual/Signatures/BodySignatureFormat.html#alternate-strings","manual/Signatures/LogicalSignatures.html#logical-signatures","manual/Signatures/LogicalSignatures.html#subsignature-modifiers","manual/Signatures/LogicalSignatures.html#special-subsignature-types","manual/Signatures/LogicalSignatures.html#signatures-for-version-information-vi-metadata-in-pe-files","manual/Signatures/LogicalSignatures.html#icon-signatures-for-pe-files","manual/Signatures/ExtendedSignatures.html#extended-signature-format","manual/Signatures/YaraRules.html#using-yara-rules-in-clamav","manual/Signatures/PhishSigs.html#phishing-signatures","manual/Signatures/PhishSigs.html#database-file-format","manual/Signatures/PhishSigs.html#introduction-to-regular-expressions","manual/Signatures/PhishSigs.html#how-to-create-database-files","manual/Signatures/BytecodeSignatures.html#bytecode-signatures","manual/Signatures/ContainerMetadata.html#signatures-based-on-container-metadata","manual/Signatures/EncryptedArchives.html#passwords-for-archive-files-experimental","manual/Development.html#clamav-development","manual/Development.html#pull-request-basics","manual/Development.html#clamav-git-work-flow","manual/Development.html#working-with-your-fork","manual/Development.html#reviewing-pull-requests","manual/Development.html#building-for-development","manual/Development.html#building-the-installer-packages","manual/Development.html#dev-tips--tricks","manual/Development.html#libclamav","manual/Development.html#contribute","manual/Development/github-pr-basics.html#github-pull-request-basics","manual/Development/clamav-git-work-flow.html#clamav-git-work-flow","manual/Development/personal-forks.html#working-with-a-your-own-fork-of-the-clamav-repository","manual/Development/testing-pull-requests.html#reviewing--testing-pull-requests","manual/Development/development-builds.html#building-for-development","manual/Development/development-builds.html#build-dependencies","manual/Development/development-builds.html#download-the-source","manual/Development/development-builds.html#building-clamav-with-cmake-v0104-and-newer","manual/Development/development-builds.html#building-clamav-with-autotools-v0103-and-older","manual/Development/build-installer-packages.html#building-the-installer-packages","manual/Development/build-installer-packages.html#linux","manual/Development/build-installer-packages.html#macos","manual/Development/build-installer-packages.html#windows","manual/Development/tips-and-tricks.html#development-tips--tricks","manual/Development/tips-and-tricks.html#downloading-the-official-ruleset","manual/Development/tips-and-tricks.html#general-debugging","manual/Development/tips-and-tricks.html#hunting-for-memory-leaks","manual/Development/performance-profiling.html#performance-profiling","manual/Development/performance-profiling.html#flame-graph-profiling","manual/Development/performance-profiling.html#call-graph-profiling---callgrind","manual/Development/performance-profiling.html#system-call-tracing--fault-injection","manual/Development/code-coverage.html#computing-code-coverage","manual/Development/code-coverage.html#code-coverage-when-using-cmake-v0104-and-newer","manual/Development/code-coverage.html#code-coverage-when-using-autotools-v0103-and-older","manual/Development/fuzzing-sanitizers.html#building-and-testing-clamav-with-fuzzing-sanitizers","manual/Development/fuzzing-sanitizers.html#build--reproduce-fuzz-reports-using-oss-fuzz-tools","manual/Development/fuzzing-sanitizers.html#build--test-fuzz-targets-sanitizers-in-cmake-v0104-and-newer","manual/Development/fuzzing-sanitizers.html#clamav-with-address-sanitizer-asan-in-autotools-v0103-and-older","manual/Development/libclamav.html#libclamav","manual/Development/libclamav.html#license","manual/Development/libclamav.html#supported-formats-and-features","manual/Development/libclamav.html#api","manual/Development/libclamav.html#cvd-format","manual/Development/Contribute.html#project-ideas","manual/Development/Contribute.html#bugs","manual/Development/Contribute.html#larger-projects","faq/faq.html#clam-antivirus--frequently-asked-questions","faq/faq-whichversion.html#which-version-of-clamav-should-i-use","faq/faq-whichversion.html#stable-release","faq/faq-whichversion.html#beta-and-release-candidates-programs","faq/faq-freshclam.html#freshclam-faq","faq/faq-freshclam.html#failed-to-get-information-about-user-clamav","faq/faq-freshclam.html#cant-create-freshclamdat-in-usrlocalshareclamav","faq/faq-freshclam.html#problem-with-the-ssl-ca-cert","faq/faq-freshclam.html#invalid-dns-reply-falling-back-to-http-mode-or-error-cant-query-currentcvdclamavnet","faq/faq-freshclam.html#error-connection-with--failed","faq/faq-freshclam.html#warning-incremental-update-failed-trying-to-download-dailycvd","faq/faq-freshclam.html#database-update-process-failed-downloaded-database-had-lower-version-than-advertised","faq/faq-freshclam.html#update-failed-your-network-may-be-down-or-the-clamav-database-content-delivery-network-is-experiencing-an-outage","faq/faq-freshclam.html#update-failed-updating-too-frequently-with-an-outdated-version","faq/faq-freshclam.html#your-clamav-installation-is-outdated","faq/faq-freshclam.html#warning-current-functionality-level--1-required--2","faq/faq-freshclam.html#ignoring-mirror-ip-has-connected-too-many-times-with-an-outdated-version","faq/faq-freshclam.html#http-error-codes","faq/faq-freshclam.html#for-all-other-database-update-related-failures","faq/faq-cvd.html#clamav-virus-database-faq","faq/faq-cvd.html#how-do-i-keep-my-virus-database-up-to-date","faq/faq-cvd.html#how-often-is-the-virus-database-updated","faq/faq-cvd.html#the-last-cvd-update-crashed-my-clamav-installation-why","faq/faq-cvd.html#the-last-cvd-update-detects-a-lot-of-false-positives-on-my-system-why","faq/faq-cvd.html#i-tried-to-submit-a-sample-through-the-web-interface-but-it-said-the-sample-is-already-recognized-by-clamav-my-clamscan-tells-me-its-not-i-have-already-updated-my-database-and-clamav-engine-whats-wrong-with-my-setup","faq/faq-cvd.html#i-found-an-infected-file-in-my-hdusbmailbox-but-clamav-doesnt-recognize-it-yet-can-you-help-me","faq/faq-cvd.html#im-running-clamav-on-a-lot-of-clients-on-my-local-network-can-i-serve-the-cvd-files-from-a-local-server-so-that-each-client-doesnt-have-to-download-them-from-your-servers","faq/faq-cvd.html#i-cant-wait-for-you-to-update-the-database-i-need-to-use-the-new-signature-now","faq/faq-cvd.html#can-i-download-the-virus-database-manually","faq/faq-cvd.html#i-am-getting-error-codes-such-as-403-429-etc-when-freshclam-or-other-update-system-attempts-to-download-updates","faq/faq-misc.html#miscellaneous-faq","faq/faq-misc.html#i-see-you-have-bugzilla-and-github-issues-which-one-should-i-use","faq/faq-misc.html#i-reported-a-bug-on-bugzilla-but-no-one-can-see-it-what-do-i-do","faq/faq-misc.html#where-can-i-find-the-bug-ticket-for-a-security-bug-fix","faq/faq-misc.html#where-can-i-find-a-test-file-to-prove-that-a-security-bug-doesnt-affect-me-or-has-been-fixed-in-my-version","faq/faq-misc.html#can-phishing-be-considered-one-kind-of-spam-clamav-should-not-detect-it-as-some-kind-of-malware","faq/faq-misc.html#why-is-my-legitimate-html-newsletteremail-detected-by-clamav-as-phishingheuristicsemailspoofeddomain","faq/faq-misc.html#my-legitimate-emails-from-yourdomaintld-are-detected-as-phishingheuristicsemailspoofeddomain","faq/faq-misc.html#can-i-convert-the-new-database-format-to-the-old-one","faq/faq-misc.html#how-do-i-read-inside-the-cvd-files","faq/faq-misc.html#im-using-clamav-in-a-production-environment-and-a-brand-new-virus-is-not-being-recognized-by-clamav-how-long-do-i-have-to-wait-before-clamav-can-start-filtering-the-virus","faq/faq-misc.html#why-is-clamav-calling-the-xxx-virus-with-another-name","faq/faq-misc.html#i-get-many-false-positives-of-oversizedzip","faq/faq-misc.html#what-is-pua-i-get-a-lot-of-false-positives-named-pua","faq/faq-misc.html#can-clamav-disinfect-files","faq/faq-misc.html#when-using-clamscan-is-there-a-way-to-know-which-message-within-an-mbox-is-infected","faq/faq-misc.html#what-platforms-does-it-support","faq/faq-misc.html#where-can-i-find-more-information-about-clamav","faq/faq-ml.html#mailing-lists-faq","faq/faq-ml.html#where-can-i-ask-questions-about-using-clamav","faq/faq-ml.html#i-want-to-take-part-to-the-development-of-clamav-where-can-i-get-more-info","faq/faq-ml.html#the-mailing-lists-generate-too-many-messages-per-day-i-cant-handle-them-what-shall-i-do","faq/faq-ml.html#i-sent-a-message-to-one-of-clamavs-mailing-lists-but-the-mail-was-rejectedheld-for-approval-why","faq/faq-ml.html#i-read-the-mailing-list-from-the-gmane-news-gateway-can-i-post-to-the-mailing-list","faq/faq-ml.html#ive-been-unsubscribed-from-one-of-the-mailing-lists-what-happened","faq/faq-ml.html#how-do-i-disable-mail-delivery-from-the-mailing-list-im-subscribed-to","faq/faq-safebrowsing.html#safebrowsing","faq/faq-safebrowsing.html#about","faq/faq-safebrowsing.html#current-status","faq/faq-safebrowsing.html#history","faq/faq-troubleshoot.html#troubleshooting-faq","faq/faq-troubleshoot.html#after-clamav-is-installed-then-what-how-do-i-update--refresh-the-virus-database","faq/faq-troubleshoot.html#how-many-times-per-hour-shall-i-run-freshclam","faq/faq-troubleshoot.html#i-get-this-error-when-running-freshclam--invalid-dns-reply-falling-back-to-http-mode--or--error-cant-query-currentcvdclamavnet---what-does-it-mean","faq/faq-troubleshoot.html#what-does--warning-dns-record-is-older-than-3-hours--mean","faq/faq-troubleshoot.html#i-get-this-error-when-running-freshclam--error-connection-with--failed---what-shall-i-do","faq/faq-troubleshoot.html#how-do-i-know-if-my-ip-address-has-been-blocked","faq/faq-troubleshoot.html#i-cant-resolve-currentcvdclamavnet-is-there-a-problem-with-yourmy-dns-servers","faq/faq-scan-alerts.html#interpreting-scan-alerts-faq","faq/faq-scan-alerts.html#clamav-alerted-on-a-file-during-a-scan-what-do-i-do","faq/faq-upgrade.html#upgrading-clamav","faq/faq-upgrade.html#clamav-from-packages","faq/faq-upgrade.html#install-clamav-from-source","faq/faq-upgrade.html#webmin-and-yum","faq/faq-win32.html#clamav-on-microsoft-windows-faq","faq/faq-win32.html#what-is-the-difference-between-clamav-immunet-and-clamwin","faq/faq-win32.html#is-immunet-free-for-commercial-use","faq/faq-win32.html#will-immunet-send-any-sensitive-data-from-my-computer-to-the-cloud","faq/faq-win32.html#are-you-going-to-make-use-of-the-cloud-in-the-nix-version-of-clamav","faq/faq-win32.html#can-i-use-immunet-with-my-current-av-solution","faq/faq-win32.html#where-should-i-report-false-positives-or-undetected-malware","faq/faq-win32.html#are-there-64-bit-versions-of-clamav-for-windows-as-well-as-32-bit","faq/faq-pua.html#potentially-unwanted-applications-pua","faq/faq-pua.html#pua-config-options","faq/faq-pua.html#current-pua-categories","faq/faq-pua.html#pua-category-descriptions","faq/faq-ignore.html#how-do-i-ignore-a-clamav-signature","faq/faq-ignore.html#creating-an-ignore-file","faq/faq-ignore.html#ignore-individual-signatures","faq/faq-uninstall.html#uninstalling-clamav","faq/faq-uninstall.html#if-you-installed-from-source","faq/faq-uninstall.html#if-you-installed-from-packages","faq/faq-uninstall.html#caveats","faq/faq-eol.html#end-of-life-eol-policy","faq/faq-eol.html#long-term-support-lts-feature-releases","faq/faq-eol.html#regular-non-lts-feature-releases","faq/faq-eol.html#definitions","faq/faq-eol.html#version-support-matrix","faq/faq-eol.html#additional-detail-about-critical-patch-support","appendix/Appendix.html#appendix","appendix/Terminology.html#terminology","appendix/Terminology.html#general-terminology","appendix/Terminology.html#clamav-components","appendix/CvdPrivateMirror.html#private-local-mirrors","appendix/CvdPrivateMirror.html#use-cvdupdate-to-serve-whole-databases-and-database-patch-files-from-a-private-mirror","appendix/CvdPrivateMirror.html#use-freshclam-to-serve-only-whole-database-files-from-a-private-mirror","appendix/CvdPrivateMirror.html#use-an-http-proxy","appendix/Authenticode.html#microsoft-authenticode-signature-verification","appendix/Authenticode.html#about-microsoft-authenticode","appendix/Authenticode.html#authenticode-and-clamav","appendix/Authenticode.html#helpful-info-for-working-with-authenticode-signatures","appendix/Authenticode.html#format-specifications","appendix/Authenticode.html#verifying-the-signature","appendix/Authenticode.html#extracting-the-signature","appendix/Authenticode.html#inspecting-the-signature","appendix/Authenticode.html#creating-signed-executables","appendix/Authenticode.html#samples-with-interesting-authenticode-signatures","appendix/Authenticode.html#additional-references","appendix/FileTypes.html#clamav-file-types","appendix/FileTypes.html#target-types","appendix/FileTypes.html#file-types","appendix/FunctionalityLevels.html#versions--functionality-levels-flevels","appendix/FunctionalityLevels.html#clamav-version-to-flevel-chart"],"index":{"documentStore":{"docInfo":{"0":{"body":70,"breadcrumbs":2,"title":1},"1":{"body":29,"breadcrumbs":3,"title":2},"10":{"body":24,"breadcrumbs":4,"title":3},"100":{"body":154,"breadcrumbs":7,"title":3},"101":{"body":86,"breadcrumbs":5,"title":1},"102":{"body":110,"breadcrumbs":8,"title":3},"103":{"body":140,"breadcrumbs":7,"title":3},"104":{"body":0,"breadcrumbs":6,"title":3},"105":{"body":80,"breadcrumbs":6,"title":3},"106":{"body":61,"breadcrumbs":6,"title":3},"107":{"body":13,"breadcrumbs":7,"title":3},"108":{"body":138,"breadcrumbs":8,"title":4},"109":{"body":29,"breadcrumbs":9,"title":5},"11":{"body":456,"breadcrumbs":3,"title":2},"110":{"body":59,"breadcrumbs":8,"title":4},"111":{"body":64,"breadcrumbs":9,"title":5},"112":{"body":29,"breadcrumbs":10,"title":5},"113":{"body":15,"breadcrumbs":7,"title":2},"114":{"body":124,"breadcrumbs":6,"title":1},"115":{"body":25,"breadcrumbs":7,"title":2},"116":{"body":139,"breadcrumbs":7,"title":2},"117":{"body":454,"breadcrumbs":9,"title":2},"118":{"body":148,"breadcrumbs":9,"title":2},"119":{"body":592,"breadcrumbs":10,"title":3},"12":{"body":55,"breadcrumbs":5,"title":4},"120":{"body":311,"breadcrumbs":14,"title":7},"121":{"body":89,"breadcrumbs":11,"title":4},"122":{"body":221,"breadcrumbs":10,"title":3},"123":{"body":231,"breadcrumbs":7,"title":4},"124":{"body":80,"breadcrumbs":5,"title":2},"125":{"body":1055,"breadcrumbs":6,"title":3},"126":{"body":192,"breadcrumbs":6,"title":3},"127":{"body":217,"breadcrumbs":6,"title":3},"128":{"body":131,"breadcrumbs":5,"title":2},"129":{"body":154,"breadcrumbs":8,"title":4},"13":{"body":9,"breadcrumbs":3,"title":2},"130":{"body":98,"breadcrumbs":8,"title":4},"131":{"body":9,"breadcrumbs":3,"title":2},"132":{"body":15,"breadcrumbs":4,"title":3},"133":{"body":13,"breadcrumbs":5,"title":4},"134":{"body":12,"breadcrumbs":3,"title":2},"135":{"body":24,"breadcrumbs":4,"title":3},"136":{"body":27,"breadcrumbs":3,"title":2},"137":{"body":9,"breadcrumbs":4,"title":3},"138":{"body":11,"breadcrumbs":4,"title":3},"139":{"body":23,"breadcrumbs":2,"title":1},"14":{"body":15,"breadcrumbs":2,"title":1},"140":{"body":32,"breadcrumbs":2,"title":1},"141":{"body":205,"breadcrumbs":8,"title":4},"142":{"body":153,"breadcrumbs":9,"title":4},"143":{"body":485,"breadcrumbs":7,"title":4},"144":{"body":116,"breadcrumbs":8,"title":4},"145":{"body":56,"breadcrumbs":5,"title":2},"146":{"body":441,"breadcrumbs":5,"title":2},"147":{"body":35,"breadcrumbs":5,"title":2},"148":{"body":704,"breadcrumbs":8,"title":5},"149":{"body":598,"breadcrumbs":8,"title":5},"15":{"body":154,"breadcrumbs":4,"title":2},"150":{"body":43,"breadcrumbs":7,"title":3},"151":{"body":358,"breadcrumbs":5,"title":1},"152":{"body":246,"breadcrumbs":5,"title":1},"153":{"body":305,"breadcrumbs":5,"title":1},"154":{"body":24,"breadcrumbs":7,"title":3},"155":{"body":37,"breadcrumbs":7,"title":3},"156":{"body":326,"breadcrumbs":6,"title":2},"157":{"body":62,"breadcrumbs":7,"title":3},"158":{"body":0,"breadcrumbs":5,"title":2},"159":{"body":272,"breadcrumbs":6,"title":3},"16":{"body":745,"breadcrumbs":3,"title":1},"160":{"body":32,"breadcrumbs":7,"title":4},"161":{"body":425,"breadcrumbs":8,"title":5},"162":{"body":0,"breadcrumbs":7,"title":3},"163":{"body":9,"breadcrumbs":10,"title":6},"164":{"body":84,"breadcrumbs":10,"title":6},"165":{"body":0,"breadcrumbs":8,"title":5},"166":{"body":57,"breadcrumbs":11,"title":8},"167":{"body":45,"breadcrumbs":11,"title":8},"168":{"body":62,"breadcrumbs":10,"title":7},"169":{"body":26,"breadcrumbs":3,"title":1},"17":{"body":18,"breadcrumbs":4,"title":2},"170":{"body":20,"breadcrumbs":3,"title":1},"171":{"body":219,"breadcrumbs":5,"title":3},"172":{"body":1101,"breadcrumbs":3,"title":1},"173":{"body":66,"breadcrumbs":4,"title":2},"174":{"body":105,"breadcrumbs":4,"title":2},"175":{"body":28,"breadcrumbs":3,"title":1},"176":{"body":2069,"breadcrumbs":4,"title":2},"177":{"body":164,"breadcrumbs":8,"title":5},"178":{"body":6,"breadcrumbs":10,"title":3},"179":{"body":8,"breadcrumbs":9,"title":2},"18":{"body":98,"breadcrumbs":6,"title":4},"180":{"body":19,"breadcrumbs":11,"title":4},"181":{"body":52,"breadcrumbs":8,"title":2},"182":{"body":50,"breadcrumbs":10,"title":4},"183":{"body":89,"breadcrumbs":10,"title":4},"184":{"body":96,"breadcrumbs":10,"title":4},"185":{"body":58,"breadcrumbs":17,"title":11},"186":{"body":41,"breadcrumbs":9,"title":3},"187":{"body":10,"breadcrumbs":13,"title":7},"188":{"body":14,"breadcrumbs":15,"title":9},"189":{"body":23,"breadcrumbs":17,"title":11},"19":{"body":35,"breadcrumbs":5,"title":3},"190":{"body":63,"breadcrumbs":12,"title":6},"191":{"body":29,"breadcrumbs":9,"title":3},"192":{"body":21,"breadcrumbs":13,"title":7},"193":{"body":22,"breadcrumbs":14,"title":8},"194":{"body":136,"breadcrumbs":9,"title":3},"195":{"body":8,"breadcrumbs":10,"title":4},"196":{"body":55,"breadcrumbs":10,"title":4},"197":{"body":20,"breadcrumbs":11,"title":5},"198":{"body":40,"breadcrumbs":9,"title":3},"199":{"body":13,"breadcrumbs":12,"title":6},"2":{"body":256,"breadcrumbs":2,"title":1},"20":{"body":340,"breadcrumbs":4,"title":2},"200":{"body":30,"breadcrumbs":14,"title":8},"201":{"body":14,"breadcrumbs":27,"title":21},"202":{"body":43,"breadcrumbs":14,"title":8},"203":{"body":63,"breadcrumbs":23,"title":17},"204":{"body":34,"breadcrumbs":15,"title":9},"205":{"body":20,"breadcrumbs":10,"title":4},"206":{"body":26,"breadcrumbs":19,"title":13},"207":{"body":43,"breadcrumbs":6,"title":2},"208":{"body":20,"breadcrumbs":10,"title":6},"209":{"body":35,"breadcrumbs":9,"title":5},"21":{"body":261,"breadcrumbs":4,"title":2},"210":{"body":46,"breadcrumbs":10,"title":6},"211":{"body":75,"breadcrumbs":14,"title":10},"212":{"body":20,"breadcrumbs":13,"title":9},"213":{"body":18,"breadcrumbs":10,"title":6},"214":{"body":15,"breadcrumbs":9,"title":5},"215":{"body":14,"breadcrumbs":10,"title":6},"216":{"body":3,"breadcrumbs":8,"title":4},"217":{"body":18,"breadcrumbs":22,"title":18},"218":{"body":33,"breadcrumbs":10,"title":6},"219":{"body":18,"breadcrumbs":8,"title":4},"22":{"body":146,"breadcrumbs":4,"title":2},"220":{"body":92,"breadcrumbs":10,"title":6},"221":{"body":30,"breadcrumbs":7,"title":3},"222":{"body":30,"breadcrumbs":12,"title":8},"223":{"body":25,"breadcrumbs":6,"title":2},"224":{"body":46,"breadcrumbs":8,"title":4},"225":{"body":43,"breadcrumbs":8,"title":3},"226":{"body":5,"breadcrumbs":9,"title":4},"227":{"body":5,"breadcrumbs":12,"title":7},"228":{"body":21,"breadcrumbs":15,"title":10},"229":{"body":8,"breadcrumbs":14,"title":9},"23":{"body":276,"breadcrumbs":4,"title":2},"230":{"body":3,"breadcrumbs":14,"title":9},"231":{"body":35,"breadcrumbs":11,"title":6},"232":{"body":37,"breadcrumbs":12,"title":7},"233":{"body":0,"breadcrumbs":6,"title":1},"234":{"body":11,"breadcrumbs":5,"title":0},"235":{"body":126,"breadcrumbs":7,"title":2},"236":{"body":97,"breadcrumbs":6,"title":1},"237":{"body":52,"breadcrumbs":6,"title":2},"238":{"body":23,"breadcrumbs":10,"title":6},"239":{"body":15,"breadcrumbs":11,"title":7},"24":{"body":35,"breadcrumbs":6,"title":4},"240":{"body":30,"breadcrumbs":19,"title":15},"241":{"body":62,"breadcrumbs":11,"title":7},"242":{"body":42,"breadcrumbs":11,"title":7},"243":{"body":33,"breadcrumbs":8,"title":4},"244":{"body":54,"breadcrumbs":11,"title":7},"245":{"body":43,"breadcrumbs":10,"title":4},"246":{"body":554,"breadcrumbs":11,"title":5},"247":{"body":0,"breadcrumbs":6,"title":2},"248":{"body":27,"breadcrumbs":6,"title":2},"249":{"body":61,"breadcrumbs":7,"title":3},"25":{"body":96,"breadcrumbs":3,"title":1},"250":{"body":260,"breadcrumbs":6,"title":2},"251":{"body":134,"breadcrumbs":8,"title":4},"252":{"body":74,"breadcrumbs":9,"title":5},"253":{"body":18,"breadcrumbs":8,"title":4},"254":{"body":46,"breadcrumbs":10,"title":6},"255":{"body":14,"breadcrumbs":11,"title":7},"256":{"body":3,"breadcrumbs":9,"title":5},"257":{"body":10,"breadcrumbs":9,"title":5},"258":{"body":5,"breadcrumbs":12,"title":8},"259":{"body":7,"breadcrumbs":11,"title":4},"26":{"body":21,"breadcrumbs":3,"title":1},"260":{"body":81,"breadcrumbs":10,"title":3},"261":{"body":191,"breadcrumbs":10,"title":3},"262":{"body":215,"breadcrumbs":10,"title":3},"263":{"body":0,"breadcrumbs":7,"title":3},"264":{"body":13,"breadcrumbs":7,"title":3},"265":{"body":15,"breadcrumbs":7,"title":3},"266":{"body":0,"breadcrumbs":6,"title":2},"267":{"body":163,"breadcrumbs":6,"title":2},"268":{"body":36,"breadcrumbs":6,"title":2},"269":{"body":25,"breadcrumbs":5,"title":1},"27":{"body":154,"breadcrumbs":5,"title":3},"270":{"body":51,"breadcrumbs":10,"title":4},"271":{"body":73,"breadcrumbs":12,"title":6},"272":{"body":40,"breadcrumbs":11,"title":5},"273":{"body":272,"breadcrumbs":7,"title":1},"274":{"body":139,"breadcrumbs":9,"title":3},"275":{"body":290,"breadcrumbs":11,"title":5},"276":{"body":16,"breadcrumbs":2,"title":1},"277":{"body":0,"breadcrumbs":3,"title":1},"278":{"body":316,"breadcrumbs":4,"title":2},"279":{"body":201,"breadcrumbs":4,"title":2},"28":{"body":97,"breadcrumbs":9,"title":5},"280":{"body":69,"breadcrumbs":8,"title":3},"281":{"body":318,"breadcrumbs":15,"title":10},"282":{"body":258,"breadcrumbs":13,"title":8},"283":{"body":28,"breadcrumbs":8,"title":3},"284":{"body":0,"breadcrumbs":9,"title":4},"285":{"body":92,"breadcrumbs":7,"title":2},"286":{"body":139,"breadcrumbs":7,"title":2},"287":{"body":9,"breadcrumbs":10,"title":5},"288":{"body":30,"breadcrumbs":7,"title":2},"289":{"body":140,"breadcrumbs":7,"title":2},"29":{"body":447,"breadcrumbs":6,"title":2},"290":{"body":30,"breadcrumbs":7,"title":2},"291":{"body":517,"breadcrumbs":7,"title":2},"292":{"body":34,"breadcrumbs":8,"title":3},"293":{"body":172,"breadcrumbs":9,"title":4},"294":{"body":20,"breadcrumbs":7,"title":2},"295":{"body":12,"breadcrumbs":9,"title":3},"296":{"body":156,"breadcrumbs":8,"title":2},"297":{"body":457,"breadcrumbs":8,"title":2},"298":{"body":42,"breadcrumbs":9,"title":4},"299":{"body":751,"breadcrumbs":9,"title":4},"3":{"body":9,"breadcrumbs":2,"title":1},"30":{"body":19,"breadcrumbs":9,"title":5},"31":{"body":14,"breadcrumbs":7,"title":3},"32":{"body":393,"breadcrumbs":6,"title":2},"33":{"body":71,"breadcrumbs":6,"title":2},"34":{"body":15,"breadcrumbs":5,"title":1},"35":{"body":74,"breadcrumbs":9,"title":5},"36":{"body":283,"breadcrumbs":6,"title":2},"37":{"body":19,"breadcrumbs":9,"title":5},"38":{"body":14,"breadcrumbs":7,"title":3},"39":{"body":252,"breadcrumbs":6,"title":2},"4":{"body":87,"breadcrumbs":3,"title":2},"40":{"body":29,"breadcrumbs":6,"title":2},"41":{"body":15,"breadcrumbs":5,"title":1},"42":{"body":96,"breadcrumbs":7,"title":4},"43":{"body":243,"breadcrumbs":5,"title":2},"44":{"body":25,"breadcrumbs":6,"title":3},"45":{"body":530,"breadcrumbs":5,"title":2},"46":{"body":15,"breadcrumbs":4,"title":1},"47":{"body":11,"breadcrumbs":5,"title":2},"48":{"body":163,"breadcrumbs":4,"title":1},"49":{"body":861,"breadcrumbs":5,"title":2},"5":{"body":97,"breadcrumbs":4,"title":3},"50":{"body":279,"breadcrumbs":5,"title":2},"51":{"body":103,"breadcrumbs":5,"title":2},"52":{"body":42,"breadcrumbs":9,"title":4},"53":{"body":131,"breadcrumbs":10,"title":5},"54":{"body":148,"breadcrumbs":8,"title":3},"55":{"body":29,"breadcrumbs":11,"title":6},"56":{"body":10,"breadcrumbs":2,"title":1},"57":{"body":24,"breadcrumbs":2,"title":1},"58":{"body":36,"breadcrumbs":2,"title":1},"59":{"body":26,"breadcrumbs":2,"title":1},"6":{"body":59,"breadcrumbs":4,"title":3},"60":{"body":25,"breadcrumbs":4,"title":3},"61":{"body":65,"breadcrumbs":2,"title":1},"62":{"body":34,"breadcrumbs":3,"title":1},"63":{"body":267,"breadcrumbs":6,"title":4},"64":{"body":220,"breadcrumbs":3,"title":1},"65":{"body":178,"breadcrumbs":3,"title":1},"66":{"body":157,"breadcrumbs":4,"title":2},"67":{"body":61,"breadcrumbs":5,"title":3},"68":{"body":61,"breadcrumbs":3,"title":1},"69":{"body":13,"breadcrumbs":4,"title":2},"7":{"body":31,"breadcrumbs":6,"title":5},"70":{"body":24,"breadcrumbs":7,"title":3},"71":{"body":183,"breadcrumbs":5,"title":1},"72":{"body":113,"breadcrumbs":5,"title":1},"73":{"body":32,"breadcrumbs":5,"title":1},"74":{"body":13,"breadcrumbs":6,"title":2},"75":{"body":10,"breadcrumbs":6,"title":2},"76":{"body":45,"breadcrumbs":3,"title":1},"77":{"body":590,"breadcrumbs":3,"title":1},"78":{"body":262,"breadcrumbs":5,"title":3},"79":{"body":32,"breadcrumbs":5,"title":3},"8":{"body":79,"breadcrumbs":3,"title":2},"80":{"body":73,"breadcrumbs":3,"title":1},"81":{"body":105,"breadcrumbs":5,"title":3},"82":{"body":0,"breadcrumbs":6,"title":2},"83":{"body":21,"breadcrumbs":5,"title":1},"84":{"body":77,"breadcrumbs":5,"title":1},"85":{"body":294,"breadcrumbs":6,"title":2},"86":{"body":228,"breadcrumbs":5,"title":1},"87":{"body":196,"breadcrumbs":6,"title":2},"88":{"body":115,"breadcrumbs":9,"title":5},"89":{"body":4,"breadcrumbs":7,"title":3},"9":{"body":32,"breadcrumbs":3,"title":2},"90":{"body":43,"breadcrumbs":6,"title":2},"91":{"body":0,"breadcrumbs":5,"title":2},"92":{"body":26,"breadcrumbs":8,"title":5},"93":{"body":68,"breadcrumbs":6,"title":3},"94":{"body":127,"breadcrumbs":5,"title":2},"95":{"body":55,"breadcrumbs":4,"title":3},"96":{"body":95,"breadcrumbs":2,"title":1},"97":{"body":355,"breadcrumbs":3,"title":2},"98":{"body":1532,"breadcrumbs":5,"title":4},"99":{"body":40,"breadcrumbs":6,"title":2}},"docs":{"0":{"body":"ClamAV is an open source (GPLv2) anti-virus toolkit, designed especially for e-mail scanning on mail gateways. It provides a number of utilities including a flexible and scalable multi-threaded daemon, a command line scanner and advanced tool for automatic database updates. The core of the package is an anti-virus engine available in a form of shared library. Tip : ClamAV is not a traditional anti-virus or endpoint security suite. For a fully featured modern endpoint security suite, check out Cisco Secure Endpoint . See \"related products\" , below, for more details. ClamAV is brought to you by Cisco Systems, Inc.","breadcrumbs":"Introduction » ClamAV","id":"0","title":"ClamAV"},"1":{"body":"ClamAV has a diverse ecosystem of community projects, products, and other tools that either depend on ClamAV to provide malware detection capabilities or supplement ClamAV with new features such as improved support for 3rd party signature databases, graphical user interfaces (GUI), and more.","breadcrumbs":"Introduction » Community Projects","id":"1","title":"Community Projects"},"10":{"body":"ClamAV is widely available from third party package managers for most operating systems. This is often the quickest way to install ClamAV. It will make also upgrades easier. Check out the Packages page to find installation instructions for your system.","breadcrumbs":"Installing » Installing with a Package Manager","id":"10","title":"Installing with a Package Manager"},"100":{"body":"ClamAV supports a limited set of configuration options that may be enabled or disabled via settings in the *.cfg database. At this time, these settings are distributed in daily.cfg. The goal of DCONF is to enable the ClamAV team to rapidly disable new or experimental features for specific ClamAV versions if a significant defect is discovered after release. This database is small, and the settings are largely vestigial. The team has not had a need to disable many features in a long time, and so the ClamAV versions in the settings at this time should no longer be in use. The strings and values referenced in daily.cfg are best cross-referenced with the macros and structures defined here: https://github.com/Cisco-Talos/clamav/blob/main/libclamav/dconf.h#L49 https://github.com/Cisco-Talos/clamav/blob/main/libclamav/dconf.c#L54 The format for a DCONF signature is: Category:Flags:StartFlevel:EndFlevel Category may be one of: PE ELF MACHO ARCHIVE DOCUMENT MAIL OTHER PHISHING BYTECODE STATS PCRE Flags: Every feature that may be configured via DCONF is listed in struct dconf_module modules in libclamav/dconf.c. Any given feature may be default-on or default-off. Default-on features have the 4th field set to a 1 and default off are set to 0. The Flags field for a given Category overrides the defaults for all of the options listed under that category. A settings of 0x0, for example, means that all options the category be disabled. The macros listed in libclamav/dconf.h will help you identify which bits to set to get the desired results. StartFlevel: This is the FLEVEL of the minimum ClamAV engine for which you want the settings to be in effect. EndFlevel: This is the FLEVEL of the maximum ClamAV engine for which you want the settings to be in effect. You may wish to select 255 to override the defaults of future releases.","breadcrumbs":"Signatures » Dynamic Configuration Settings » Dynamic Configuration (DCONF)","id":"100","title":"Dynamic Configuration (DCONF)"},"101":{"body":"Consider the OTHER_CONF_PDFNAMEOBJ option in the category OTHER. #define OTHER_CONF_UUENC 0x1 // Default: 1\n#define OTHER_CONF_SCRENC 0x2 // Default: 1\n#define OTHER_CONF_RIFF 0x4 // Default: 1\n#define OTHER_CONF_JPEG 0x8 // Default: 1\n#define OTHER_CONF_CRYPTFF 0x10 // Default: 1\n#define OTHER_CONF_DLP 0x20 // Default: 1\n#define OTHER_CONF_MYDOOMLOG 0x40 // Default: 1\n#define OTHER_CONF_PREFILTERING 0x80 // Default: 1\n#define OTHER_CONF_PDFNAMEOBJ 0x100 // Default: 1\n#define OTHER_CONF_PRTNINTXN 0x200 // Default: 1\n#define OTHER_CONF_LZW 0x400 // Default: 1 All of the OTHER options, including OTHER_CONF_PDFNAMEOBJ are default-on. To disable the option for ClamAV v0.100.X but leave the other options in their default settings, we would need to set the flags to: 0110 1111 1111 ^pdfnameobj off Or in hex: 0x6FF The example setting to place in daily.cfg then woudl be: OTHER:0x6FF:90:99","breadcrumbs":"Signatures » Dynamic Configuration Settings » Example","id":"101","title":"Example"},"102":{"body":"Clamav 0.98 checks signed PE files for certificates and verifies each certificate in the chain against a database of trusted and revoked certificates. The signature format is Name;Trusted;Subject;Serial;Pubkey;Exponent;CodeSign;TimeSign;CertSign;\nNotBefore;Comment[;minFL[;maxFL]] where the corresponding fields are: Name: name of the entry Trusted: bit field, specifying whether the cert is trusted. 1 for trusted. 0 for revoked Subject: sha1 of the Subject field in hex Serial: the serial number as clamscan --debug --verbose reports Pubkey: the public key in hex Exponent: the exponent in hex. Currently ignored and hardcoded to 010001 (in hex) CodeSign: bit field, specifying whether this cert can sign code. 1 for true, 0 for false TimeSign: bit field. 1 for true, 0 for false CertSign: bit field, specifying whether this cert can sign other certs. 1 for true, 0 for false NotBefore: integer, cert should not be added before this variable. Defaults to 0 if left empty Comment: comments for this entry The signatures for certs are stored inside .crb files.","breadcrumbs":"Signatures » Trusted and Revoked EXE Certificates » Trusted and Revoked Certificates","id":"102","title":"Trusted and Revoked Certificates"},"103":{"body":"ClamAV's primary mechanism for determining file types is to match the file with a File Type Magic signature. These file type signatures are compiled into ClamAV, and may also be overridden dynamically using the definition founds found in a *.ftm file. The ClamAV standard signature database includes these definitions in daily.ftm. The signature format is not too disimilar from NDB body-based signatures. The format is: magictype:offset:magicbytes:name:rtype:type[:min_flevel[:max_flevel]] Where: magictype: Supported magic types include: 0 - direct memory comparison of magicbytes for file types 1 - The magicbytes use the body-based content matching format . 4 - direct memory comparison of magicbytes for partition types (HFS+, HFSX) offset: The offset from start of the file to match against. May be * if magictype is 1. name: A descriptive name for the file type. rtype: Previously detected file type. Usually CL_TYPE_ANY as a wild-card. type: The CL_TYPE corresponding with the file type signature. See the CL_TYPE reference for details. min_flevel: (optional) The minimum ClamAV engine that the file type signature works with. See the FLEVEL reference for details. To be used in the event that file type support has been recently added. max_flevel: (optional, requires min_flevel) The maximum ClamAV engine that the file type signature works with. To be used in the event that file type support has been recently removed.","breadcrumbs":"Signatures » File Type Recognition » File Type Magic","id":"103","title":"File Type Magic"},"104":{"body":"","breadcrumbs":"Signatures » Allow Lists » Allow list databases","id":"104","title":"Allow list databases"},"105":{"body":"To allow a specific file use the MD5 signature format and place it inside a database file with the extension of .fp (for \"false positive\"). To allow a specific file with the SHA1 or SHA256 file hash signature format, place the signature inside a database file with the extension of .sfp (for \"SHA false positive\"). To generate FP or SFP signatures, try something like this... MD5: sigtool --md5 /path/to/false/positive/file >> /path/to/databases/false-positives.fp SHA256: sigtool --sha256 /path/to/false/positive/file >> /path/to/databases/false-positives.sfp Here's an example adding the EICAR test file to an allow list by generating a sha256 false positive signature: ❯ clamscan ~/Downloads/eicar.com\n/mnt/c/Users/micah/Downloads/eicar.com: Win.Test.EICAR_HDB-1 FOUND ... ❯ sigtool --sha256 ~/Downloads/eicar.com >> /var/lib/clamav/false-positives.sfp ❯ clamscan ~/Downloads/eicar.com\n/mnt/c/Users/micah/Downloads/eicar.com: OK\n...","breadcrumbs":"Signatures » Allow Lists » File allow lists","id":"105","title":"File allow lists"},"106":{"body":"To ignore a specific signature from the database you just add the signature name into a local file with the .ign2 extension and store it inside the database directory. E.g: Eicar-Test-Signature Additionally, you can follow the signature name with the MD5 of the entire database entry for this signature. In such a case, the signature will no longer be ignored when its entry in the database gets modified (eg. the signature gets updated to avoid false alerts). E.g: Eicar-Test-Signature:bc356bae4c42f19a3de16e333ba3569c Historically, signature ignores were added to .ign files. This format is still functional, though it has been replaced by the .ign2 database.","breadcrumbs":"Signatures » Allow Lists » Signature ignore lists","id":"106","title":"Signature ignore lists"},"107":{"body":"The easiest way to create signatures for ClamAV is to use filehash checksums, however this method can be only used against static malware.","breadcrumbs":"Signatures » Hash-based Signatures » File hash signatures","id":"107","title":"File hash signatures"},"108":{"body":"To create a MD5 signature for test.exe use the --md5 option of sigtool: zolw@localhost:/tmp/test$ sigtool --md5 test.exe > test.hdb\nzolw@localhost:/tmp/test$ cat test.hdb\n48c4533230e1ae1c118c741c0db19dfb:17387:test.exe That’s it! The signature is ready for use: zolw@localhost:/tmp/test$ clamscan -d test.hdb test.exe\ntest.exe: test.exe FOUND ----------- SCAN SUMMARY -----------\nKnown viruses: 1\nScanned directories: 0\nEngine version: 0.92.1\nScanned files: 1\nInfected files: 1\nData scanned: 0.02 MB\nTime: 0.024 sec (0 m 0 s) You can change the name (by default sigtool uses the name of the file) and place it inside a *.hdb file. A single database file can include any number of signatures. To get them automatically loaded each time clamscan/clamd starts just copy the database file(s) into the local virus database directory (eg. /usr/local/share/clamav). The hash-based signatures shall not be used for text files, HTML and any other data that gets internally preprocessed before pattern matching. If you really want to use a hash signature in such a case, run clamscan with --debug and --leave-temps flags as described above and create a signature for a preprocessed file left in /tmp. Please keep in mind that a hash signature will stop matching as soon as a single byte changes in the target file.","breadcrumbs":"Signatures » Hash-based Signatures » MD5 hash-based signatures","id":"108","title":"MD5 hash-based signatures"},"109":{"body":"ClamAV 0.98 has also added support for SHA1 and SHA256 file checksums. The format is the same as for MD5 file checksum. It can differentiate between them based on the length of the hash string in the signature. For best backwards compatibility, these should be placed inside a *.hsb file. The format is: HashString:FileSize:MalwareName","breadcrumbs":"Signatures » Hash-based Signatures » SHA1 and SHA256 hash-based signatures","id":"109","title":"SHA1 and SHA256 hash-based signatures"},"11":{"body":"Pre-compiled packages provided on the clamav.net downloads page have all external library dependencies statically compiled in. These installers likely differ from packages provided by other packaging tools in that you will need to create and configure the freshclam.conf and clamd.conf files. You may also need to add a clamav service user account and adjust the permissions on the database directory. We hope to round out these sharp corners in the future and to make setup more convenient, but for now be advised that setup from one of these packages is a little bit more work than you may be used to. If you're interested in learning how these packages were built, you can check out these development instructions . Note : In the event that a vulnerability is found in one of the dependencies that may impact ClamAV, we will publish new packages with updated dependencies as soon as we're able. Linux (.deb, .rpm) Beginning with ClamAV 0.104, we offer Debian and RPM packages for x86_64 (64bit) and i686 (32bit) architectures. This will make it easier to get the latest version in the event that a package for your distribution is not readily available and you would prefer not to build ClamAV from source. Note : These packages do not presently include clamav-milter. You can help help us add clamav-milter to the packages by developing a Mussels recipe for building the libmilter.a static library and contributing it to our Mussels cookbook . RPM packages (for CentOS, Redhat, Fedora, SUSE, etc.) These are compiled on CentOS 7. They should be compatible with all RPM-based linux distributions running glibc version 2.17 or newer. To install, download the package for your system use yum or dnf to install the package. For example: sudo dnf install ~/Downloads/clamav-0.104.0-rc2.linux.x86_64.rpm You can verify that the package was installed using: dnf info clamav This package installs to /usr/local. Unlike packages provided by Debian or other distributions, this package does not presently include a preconfigured freshclam.conf, clamd.conf, database directory, or clamav user accounts for FreshClam and ClamD. You can follow these instructions to configure FreshClam and ClamD. You can follow these instructions to create the clamav user account for running FreshClam and ClamD services. And uninstall the package with: sudo dnf remove ~/Downloads/clamav-0.104.0-rc2.linux.x86_64.rpm DEB packages (for Debian, Ubuntu, Mint, etc.) These are compiled on Ubuntu 16.04, and have all external library dependencies statically compiled in. They should be compatible with all Debian-based linux distributions running glibc version 2.23 or newer. sudo apt install ~/Downloads/clamav-0.104.0-rc2.libnux.x86_64.deb You can verify that the package was installed using: apt info clamav This package installs to /usr/local. Unlike packages provided by Debian or other distributions, this package does not presently include a preconfigured freshclam.conf, clamd.conf, database directory, or clamav user accounts for FreshClam and ClamD. You can follow these instructions to configure FreshClam and ClamD. You can follow these instructions to create the clamav user account for running FreshClam and ClamD services. And uninstall the package with: sudo apt remove clamav macOS Beginning with ClamAV 0.104, we offer a PKG installer for macOS. These are universal binaries built for Intel x86_64 and Apple M1 arm64 processors. Disclaimer : The release materials for 0.104.0-rc2 are not signed or notarized. We are working on adding signing and notarization to our CI processes, but for now you may be unable to use this PKG installer on macOS Big Sur or newer. To install, download the macOS .pkg installer. Double-click the installer and follow the directions. This package installs to /usr/local/clamav. This is not in the default system PATH environment variable. You may wish to add /usr/local/clamav/bin and /usr/local/clamav/sbin to your PATH so you can run the ClamAV programs without entering the full path. To do this add this line to ~/.zshrc: export PATH=/usr/local/clamav/bin:/usr/local/clamav/sbin:$PATH Then run source ~/.zshrc or open a new terminal. Unlike packages provided by Homebrew, this package does not presently include a preconfigured freshclam.conf, clamd.conf, or database directory. You can follow these instructions to configure FreshClam and ClamD. macOS package installers do not provide a mechanism for automatically uninstalling the package. In the future, we hope to add a script to aid with uninstallation. But for now, to make it easier to remove, our macOS installer installs to /usr/local/clamav. To uninstall, all you need to do is run: sudo rm -rf /usr/local/clamav Windows The ClamAV team provides official ClamAV builds for Windows on the ClamAV downloads page . You can choose between a traditional executable installer or a portable install ZIP package. To use the executable installer, double-click the installer and follow the instructions. To install from a ZIP package, unzip the portable install package to any directory.","breadcrumbs":"Installing » Installing with an Installer","id":"11","title":"Installing with an Installer"},"110":{"body":"ClamAV 0.98 has also added support for hash signatures where the size is not known but the hash is. It is much more performance-efficient to use signatures with specific sizes, so be cautious when using this feature. For these cases, the ’*’ character can be used in the size field. To ensure proper backwards compatibility with older versions of ClamAV, these signatures must have a minimum functional level of 73 or higher. Signatures that use the wildcard size without this level set will be rejected as malformed. Sample .hsb signature matching any size: HashString:*:MalwareName:73 Sample .msb signature matching any size: *:PESectionHash:MalwareName:73","breadcrumbs":"Signatures » Hash-based Signatures » Hash signatures with unknown size","id":"110","title":"Hash signatures with unknown size"},"111":{"body":"You can create a hash signature for a specific section in a PE file. Such signatures shall be stored inside .mdb (MD5) and .msb files in the following format: PESectionSize:PESectionHash:MalwareName The easiest way to generate MD5 based section signatures is to extract target PE sections into separate files and then run sigtool with the option --mdb ClamAV also has support for SHA1 and SHA256 section based signatures. The format is the same as for MD5 PE section based signatures. It can differentiate between them based on the length of the hash string in the signature. For best backwards compatibility, these should be placed inside a *.msb file.","breadcrumbs":"Signatures » Hash-based Signatures » PE section based hash signatures","id":"111","title":"PE section based hash signatures"},"112":{"body":"ClamAV stores all body-based (content-based) signatures in a hexadecimal format, with exception to ClamAV's YARA rule support. In this section by a hex-signature we mean a fragment of malware’s body converted into a hexadecimal string which can be additionally extended using various wildcards.","breadcrumbs":"Signatures » Content-based Signature Format » Body-based Signature Content Format","id":"112","title":"Body-based Signature Content Format"},"113":{"body":"You can use sigtool --hex-dump to convert any data into a hex-string: zolw@localhost:/tmp/test$ sigtool --hex-dump\nHow do I look in hex?\n486f7720646f2049206c6f6f6b20696e206865783f0a","breadcrumbs":"Signatures » Content-based Signature Format » Hexadecimal format","id":"113","title":"Hexadecimal format"},"114":{"body":"ClamAV supports the following wildcards for hex-signatures: ?? Match any byte. a? Match a high nibble (the four high bits). ?a Match a low nibble (the four low bits). * Match any number of bytes. {n} Match n bytes. {-n} Match n or less bytes. {n-} Match n or more bytes. {n-m} Match between n and m bytes (where m > n). HEXSIG[x-y]aa or aa[x-y]HEXSIG Match aa anchored to a hex-signature, see Bugzilla ticket 776 for discussion and examples. The range signatures * and {} virtually separate a hex-signature into two parts, eg. aabbcc*bbaacc is treated as two sub-signatures aabbcc and bbaacc with any number of bytes between them. It’s a requirement that each sub-signature includes a block of two static characters somewhere in its body. Note that there is one exception to this restriction; that is when the range wildcard is of the form {n} with n<128. In this case, ClamAV uses an optimization and translates {n} to the string consisting of n ?? character wildcards. Character wildcards do not divide hex signatures into two parts and so the two static character requirement does not apply.","breadcrumbs":"Signatures » Content-based Signature Format » Wildcards","id":"114","title":"Wildcards"},"115":{"body":"ClamAV supports the following character classes for hex-signatures: (B) Match word boundary (including file boundaries). (L) Match CR, CRLF or file boundaries. (W) Match a non-alphanumeric character.","breadcrumbs":"Signatures » Content-based Signature Format » Character classes","id":"115","title":"Character classes"},"116":{"body":"Single-byte alternates (clamav-0.96) (aa|bb|cc|...) or !(aa|bb|cc|...) Match a member from a set of bytes (eg: aa, bb, cc, ...). Negation operation can be applied to match any non-member, assumed to be one-byte in length. Signature modifiers and wildcards cannot be applied. Multi-byte fixed length alternates (aaaa|bbbb|cccc|...) or !(aaaa|bbbb|cccc|...) Match a member from a set of multi-byte alternates (eg: aaaa, bbbb, cccc, ...) of n-length. All set members must be the same length. Negation operation can be applied to match any non-member, assumed to be n-bytes in length (clamav-0.98.2). Signature modifiers and wildcards cannot be applied. Generic alternates (clamav-0.99) (alt1|alt2|alt3|...) Match a member from a set of alternates (eg: alt1, alt2, alt3, ...) that can be of variable lengths. Negation operation cannot be applied. Signature modifiers and nibble wildcards (eg: ??, a?, ?a) can be applied. Ranged wildcards (eg: {n-m}) are limited to a fixed range of less than 128 bytes (eg: {1} -> {127}). Note : Using signature modifiers and wildcards classifies the alternate type to be a generic alternate. Thus single-byte alternates and multi-byte fixed length alternates can use signature modifiers and wildcards but will be classified as generic alternate. This means that negation cannot be applied in this situation and there is a slight performance impact.","breadcrumbs":"Signatures » Content-based Signature Format » Alternate strings","id":"116","title":"Alternate strings"},"117":{"body":"Logical signatures allow combining of multiple signatures in extended format using logical operators. They can provide both more detailed and flexible pattern matching. The logical sigs are stored inside *.ldb files in the following format: SignatureName;TargetDescriptionBlock;LogicalExpression;Subsig0;\nSubsig1;Subsig2;... where: TargetDescriptionBlock provides information about the engine and target file with comma separated Arg:Val pairs. For args where Val is a range, the minimum and maximum values should be expressed as min-max. LogicalExpression specifies the logical expression describing the relationship between Subsig0...SubsigN. Basis clause: 0,1,...,N decimal indexes are SUB-EXPRESSIONS representing Subsig0, Subsig1,...,SubsigN respectively. Inductive clause: if A and B are SUB-EXPRESSIONS and X, Y are decimal numbers then (A&B), (A|B), A=X, A=X,Y, A>X, A>X,Y, ACL_TYPE_*: Specify one or more layers of file types containing the scanned file. This is an alternative to using Container. You may specify up to 16 layers of file types separated by ’>’ in top-down order. Note that the ’>’ separator is not needed if you only specify a single container. The last type should be the immediate container containing the malicious file. Unlike with the Container option, CL_TYPE_ANY can be used as a wildcard file type. (expr; 0.100.0) For a list of possible CL_TYPEs, refer to the File Types Reference . IconGroup1: Icon group name 1 from .idb signature Required engine functionality (range; 0.96) IconGroup2: Icon group name 2 from .idb signature Required engine functionality (range; 0.96) Modifiers for subexpressions: A=X: If the SUB-EXPRESSION A refers to a single signature then this signature must get matched exactly X times; if it refers to a (logical) block of signatures then this block must generate exactly X matches (with any of its sigs). A=0 specifies negation (signature or block of signatures cannot be matched) A=X,Y: If the SUB-EXPRESSION A refers to a single signature then this signature must be matched exactly X times; if it refers to a (logical) block of signatures then this block must generate X matches and at least Y different signatures must get matched. A>X: If the SUB-EXPRESSION A refers to a single signature then this signature must get matched more than X times; if it refers to a (logical) block of signatures then this block must generate more than X matches (with any of its sigs). A>X,Y: If the SUB-EXPRESSION A refers to a single signature then this signature must get matched more than X times; if it refers to a (logical) block of signatures then this block must generate more than X matches and at least Y different signatures must be matched. AZ above with the change of \"more\" to \"less\". If the SUB-EXPRESSION A refers to a single signature then this signature must get matched less than X times; if it refers to a (logical) block of signatures then this block must generate less than X matches (with any of its sigs). AX,Y. If the SUB-EXPRESSION A refers to a single signature then this signature must get matched less than X times; if it refers to a (logical) block of signatures then this block must generate less than X matches and at least Y different signatures must be matched. Examples: Sig1;Target:0;(0&1&2&3)&(4|1);6b6f74656b;616c61;7a6f6c77;7374656\n6616e;deadbeef Sig2;Target:0;((0|1|2)>5,2)&(3|1);6b6f74656b;616c61;7a6f6c77;737\n46566616e Sig3;Target:0;((0|1|2|3)=2)&(4|1);6b6f74656b;616c61;7a6f6c77;737\n46566616e;deadbeef Sig4;Engine:51-255,Target:1;((0|1)&(2|3))&4;EP+123:33c06834f04100\nf2aef7d14951684cf04100e8110a00;S2+78:22??232c2d252229{-15}6e6573\n(63|64)61706528;S3+50:68efa311c3b9963cb1ee8e586d32aeb9043e;f9c58\ndcf43987e4f519d629b103375;SL+550:6300680065005c0046006900","breadcrumbs":"Signatures » Content-based Signature Format » Logical Signatures » Logical signatures","id":"117","title":"Logical signatures"},"118":{"body":"ClamAV (clamav-0.99) supports a number of additional subsignature modifiers for logical signatures. This is done by specifying :: followed by a number of characters representing the desired options. Signatures using subsignature modifiers require Engine:81-255 for backwards-compatibility. Case-Insensitive [i] Specifying the i modifier causes ClamAV to match all alphabetic hex bytes as case-insensitive. All patterns in ClamAV are case-sensitive by default. Wide [w] Specifying the w causes ClamAV to match all hex bytes encoded with two bytes per character. Note this simply interweaves each character with NULL characters and does not truly support UTF-16 characters. Wildcards for ’wide’ subsignatures are not treated as wide (i.e. there can be an odd number of intermittent characters). This can be combined with a to search for patterns in both wide and ascii. Fullword [f] Match subsignature as a fullword (delimited by non-alphanumeric characters). Ascii [a] Match subsignature as ascii characters. This can be combined with w to search for patterns in both ascii and wide. Examples: Match 'AAAA'(nocase) and 'BBBBBB'(nocase) clamav-nocase-A;Engine:81-255,Target:0;0&1;41414141::i;424242424242::i Match 'AAA' and 'hello'(fullword) clamav-fullword-A;Engine:81-255,Target:0;0&1;414141;68656c6c6f::f Match 'AAA' and 'hello'(fullword nocase) clamav-fullword-B;Engine:81-255,Target:0;0&1;414141;68656c6c6f::fi Match 'AAA' and 'hello'(wide ascii) clamav-wide-B2;Engine:81-255,Target:0;0&1;414141;68656c6c6f::wa Match 'AAA' and 'hello'(nocase wide fullword ascii) clamav-wide-C0;Engine:81-255,Target:0;0&1;414141;68656c6c6f::iwfa","breadcrumbs":"Signatures » Content-based Signature Format » Logical Signatures » Subsignature Modifiers","id":"118","title":"Subsignature Modifiers"},"119":{"body":"Macro subsignatures Introduced in ClamAV 0.96 Format: ${min-max}MACROID$ Macro subsignatures are used to combine a number of existing extended signatures (.ndb) into a on-the-fly generated alternate string logical signature (.ldb). Signatures using macro subsignatures require Engine:51-255 for backwards-compatibility. Example: test.ldb: TestMacro;Engine:51-255,Target:0;0&1;616161;${6-7}12$ test.ndb: D1:0:$12:626262 D2:0:$12:636363 D3:0:$30:626264 The example logical signature TestMacro is functionally equivalent to: TestMacro;Engine:51-255,Target:0;0;616161{3-4}(626262|636363) MACROID points to a group of signatures; there can be at most 32 macro groups. In the example, MACROID is 12 and both D1 and D2 are members of macro group 12. D3 is a member of separate macro group 30. {min-max} specifies the offset range at which one of the group signatures should match; the offset range is relative to the starting offset of the preceding subsignature. This means a macro subsignature cannot be the first subsignature. In the example, {min-max} is {6-7} and it is relative to the start of a 616161 match. For more information and examples please see https://bugzilla.clamav.net/show_bug.cgi?id=164 . Byte Compare Subsignatures Introduced in ClamAV 0.101 Format: subsigid_trigger(offset#byte_options#comparisons) Byte compare subsignatures can be used to evaluate a numeric value at a given offset from the start of another (matched) subsignature within the same logical signature. These are executed after all other subsignatures within the logical subsignature are fired, with the exception of PCRE subsignatures. They can evaluate offsets only from a single referenced subsignature, and that subsignature must give a valid match for the evaluation to occur. subsigid_trigger is a required field and may refer to any single non-PCRE, non-Byte Compare subsignature within the lsig. The byte compare subsig will evaluate if subsigid_trigger matches. Triggering on multiple subsigs or logic based triggering is not currently supported. offset is a required field that consists of an offset_modifier and a numeric offset (hex or decimal offsets are okay). offset_modifier can be either >> or << where the former denotes a positive offset and the latter denotes a negative offset. The offset is calculated from the start of subsigid_trigger, which allows for byte extraction before the specified match, after the match, and within the match itself. offset must be a positive hex or decimal value. This will be the number of bytes from the start of the referenced subsigid_trigger match within the file buffer to begin the comparison. byte_options are used to specify the numeric type and endianess of the extracted byte sequence in that order as well as the number of bytes to be read. By default ClamAV will attempt to matchup up to the number of byte specified, unless the e (exact) option is specified or the numeric type is b (binary). This field follows the form [h|d|a|i][l|b][e]num_bytes h|d|a|i where h specifies the byte sequence will be in hex, d decimal, a automatic detection of hex or decimal at runtime, and i signifies raw binary data. l|b where l specifies the byte sequence will be in little endian order and b big endian. If decimal d is specified, big-endian is implied and using l will result in a malformed database error. e specifies that ClamAV will only evaluate the comparison if it can extract the exact number of bytes specified. This option is implicitly declared when using the i flag. num_bytes specifies the number of bytes to extract. This can be a hex or decimal value. If i is specified only 1, 2, 4, and 8 are valid options. comparisons are a required field which denotes how to evaluate the extracted byte sequence. Each Byte Compare signature can have one or two comparison_sets separated by a comma. Each comparison_set consists of a Comparison_symbol and a Comparison_value and takes the form Comparison_symbolComparison_value. Thus, comparisons takes the form comparison_set[,comparison_set] Comparison_symbol denotes the type of comparison to be done. The supported comparison symbols are <, >, =. Comparison_value is a required field which must be a numeric hex or decimal value. If all other conditions are met, the byte compare subsig will evalutate the extracted byte sequence against this number based on the provided comparison_symbol. PCRE subsignatures Introduced in ClamAV 0.99 Format: Trigger/PCRE/[Flags] PCRE subsignatures are used within a logical signature (.ldb) to specify regex matches that execute once triggered by a conditional based on preceding subsignatures. Signatures using PCRE subsignatures require Engine:81-255 for backwards-compatibility. Trigger is a required field that is a valid LogicalExpression and may refer to any subsignatures that precede this subsignature. Triggers cannot be self-referential and cannot refer to subsequent subsignatures. PCRE is the expression representing the regex to execute. PCRE must be delimited by ’/’ and usage of ’/’ within the expression need to be escaped. For backward compatibility, ’;’ within the expression must be expressed as ’\\x3B’. PCRE cannot be empty and (?UTF*) control sequence is not allowed. If debug is specified, named capture groups are displayed in a post-execution report. Flags are a series of characters which affect the compilation and execution of PCRE within the PCRE compiler and the ClamAV engine. This field is optional. g [CLAMAV_GLOBAL] specifies to search for ALL matches of PCRE (default is to search for first match). NOTE: INCREASES the time needed to run the PCRE. r [CLAMAV_ROLLING] specifies to use the given offset as the starting location to search for a match as opposed to the only location; applies to subsigs without maxshifts. By default, in order to facilatate normal ClamAV offset behavior, PCREs are auto-anchored (only attempt match on first offset); using the rolling option disables the auto-anchoring. e [CLAMAV_ENCOMPASS] specifies to CONFINE matching between the specified offset and maxshift; applies only when maxshift is specified. Note : DECREASES time needed to run the PCRE. i [PCRE_CASELESS] s [PCRE_DOTALL] m [PCRE_MULTILINE] x [PCRE_EXTENDED] A [PCRE_ANCHORED] E [PCRE_DOLLAR_ENODNLY] U [PCRE_UNGREEDY] Examples: Find.All.ClamAV;Engine:81-255,Target:0;1;6265676c6164697427736e6f7462797465636f6465;0/clamav/g Find.ClamAV.OnlyAt.299;Engine:81-255,Target:0;2;7374756c747a67657473;7063726572656765786c6f6c;299:0&1/clamav/ Find.ClamAV.StartAt.300;Engine:81-255,Target:0;3;616c61696e;62756731393238;636c6f736564;300:0&1&2/clamav/r Find.All.Encompassed.ClamAV;Engine:81-255,Target:0;3;7768796172656e2774;796f757573696e67;79617261;200,300:0&1&2/clamav/ge Named.CapGroup.Pcre;Engine:81-255,Target:0;3;636f75727479617264;616c62756d;74657272696572;50:0&1&2/variable=(?<nilshell>.{16})end/gr Firefox.TreeRange.UseAfterFree;Engine:81-255,Target:0,Engine:81-255;0&1&2;2e766965772e73656c656374696f6e;2e696e76616c696461746553656c656374696f6e;0&1/\\x2Eview\\x2Eselection.*?\\x2Etree\\s*\\x3D\\s*null.*?\\x2Einvalidate/smi Firefox.IDB.UseAfterFree;Engine:81-255,Target:0;0&1;4944424b657952616e6765;0/^\\x2e(only|lowerBound|upperBound|bound)\\x28.*?\\x29.*?\\x2e(lower|upper|lowerOpen|upperOpen)/smi Firefox.boundElements;Engine:81-255,Target:0;0&1&2;6576656e742e6\n26f756e64456c656d656e7473;77696e646f772e636c6f7365;0&1/on(load|click)\\s*=\\s*\\x22?window\\.close\\s*\\x28/si","breadcrumbs":"Signatures » Content-based Signature Format » Logical Signatures » Special Subsignature Types","id":"119","title":"Special Subsignature Types"},"12":{"body":"There are now official ClamAV images on Docker Hub. You can find the images on Docker Hub under clamav . At present we offer images with builds of the latest development version. We call this \"unstable\". ClamAV 0.104 will be the first stable release that we'll publish on Docker Hub.. Once published 0.104.0+ will be available using a Docker image tag with the specific version number, or using \"stable\" to get the latest stable release. Check out the Docker page to learn how to install and use ClamAV with Docker.","breadcrumbs":"Installing » Official ClamAV Docker Images","id":"12","title":"Official ClamAV Docker Images"},"120":{"body":"Starting with ClamAV 0.96 it is possible to easily match certain information built into PE files (executables and dynamic link libraries). Whenever you lookup the properties of a PE executable file in windows, you are presented with a bunch of details about the file itself. These info are stored in a special area of the file resources which goes under the name of VS_VERSION_INFORMATION (or versioninfo for short). It is divided into 2 parts. The first part (which is rather uninteresting) is really a bunch of numbers and flags indicating the product and file version. It was originally intended for use with installers which, after parsing it, should be able to determine whether a certain executable or library are to be upgraded/overwritten or are already up to date. Suffice to say, this approach never really worked and is generally never used. The second block is much more interesting: it is a simple list of key/value strings, intended for user information and completely ignored by the OS. For example, if you look at ping.exe you can see the company being \"Microsoft Corporation\" , the description \"TCP/IP Ping command\" , the internal name \"ping.exe\" and so on... Depending on the OS version, some keys may be given peculiar visibility in the file properties dialog, however they are internally all the same. To match a versioninfo key/value pair, the special file offset anchor VI was introduced. This is similar to the other anchors (like EP and SL) except that, instead of matching the hex pattern against a single offset, it checks it against each and every key/value pair in the file. The VI token doesn’t need nor accept a +/- offset like e.g. EP+1. As for the hex signature itself, it’s just the utf16 dump of the key and value. Only the ?? and (aa|bb) wildcards are allowed in the signature. Usually, you don’t need to bother figuring it out: each key/value pair together with the corresponding VI-based signature is printed by clamscan when the --debug option is given. For example clamscan --debug freecell.exe produces: [...]\nRecognized MS-EXE/DLL file\nin cli_peheader\nversioninfo_cb: type: 10, name: 1, lang: 410, rva: 9608\ncli_peheader: parsing version info @ rva 9608 (1/1)\nVersionInfo (d2de): 'CompanyName'='Microsoft Corporation' -\nVI:43006f006d00700061006e0079004e0061006d006500000000004d006900\n630072006f0073006f0066007400200043006f00720070006f0072006100740\n069006f006e000000\nVersionInfo (d32a): 'FileDescription'='Entertainment Pack\nFreeCell Game' - VI:460069006c006500440065007300630072006900700\n0740069006f006e000000000045006e007400650072007400610069006e006d\n0065006e00740020005000610063006b0020004600720065006500430065006\nc006c002000470061006d0065000000\nVersionInfo (d396): 'FileVersion'='5.1.2600.0 (xpclient.010817\n-1148)' - VI:460069006c006500560065007200730069006f006e00000000\n0035002e0031002e0032003600300030002e003000200028007800700063006\nc00690065006e0074002e003000310030003800310037002d00310031003400\n380029000000\nVersionInfo (d3fa): 'InternalName'='freecell' - VI:49006e007400\n650072006e0061006c004e0061006d006500000066007200650065006300650\n06c006c000000\nVersionInfo (d4ba): 'OriginalFilename'='freecell' - VI:4f007200\n6900670069006e0061006c00460069006c0065006e0061006d0065000000660\n0720065006500630065006c006c000000\nVersionInfo (d4f6): 'ProductName'='Sistema operativo Microsoft\nWindows' - VI:500072006f0064007500630074004e0061006d00650000000\n000530069007300740065006d00610020006f00700065007200610074006900\n76006f0020004d006900630072006f0073006f0066007400ae0020005700690\n06e0064006f0077007300ae000000\nVersionInfo (d562): 'ProductVersion'='5.1.2600.0' - VI:50007200\n6f006400750063007400560065007200730069006f006e00000035002e00310\n02e0032003600300030002e0030000000\n[...] Although VI-based signatures are intended for use in logical signatures you can test them using ordinary .ndb files. For example: my_test_vi_sig:1:VI:paste_your_hex_sig_here Final note. If you want to decode a VI-based signature into a human readable form you can use: echo hex_string | xxd -r -p | strings -el For example: echo 460069006c0065004400650073006300720069007000740069006f006e000000000045006e007400650072007400610069006e006d0065006e00740020005000610063006b0020004600720065006500430065006c006c00200047006100\n6d0065000000 | xxd -r -p | strings -el\nFileDescription\nEntertainment Pack FreeCell Game","breadcrumbs":"Signatures » Content-based Signature Format » Logical Signatures » Signatures for Version Information (VI) metadata in PE files","id":"120","title":"Signatures for Version Information (VI) metadata in PE files"},"121":{"body":"While Icon Signatures are stored in a .idb file, they are a feature of Logical Signatures. ClamAV 0.96 includes an approximate/fuzzy icon matcher to help detecting malicious executables disguising themselves as innocent looking image files, office documents and the like. Icon matching is only triggered by Logical Signatures (.ldb) using the special attribute tokens IconGroup1 or IconGroup2. These identify two (optional) groups of icons defined in a .idb database file. The format of the .idb file is: ICONNAME:GROUP1:GROUP2:ICON_HASH where: ICON_NAME is a unique string identifier for a specific icon, GROUP1 is a string identifier for the first group of icons (IconGroup1) GROUP2 is a string identifier for the second group of icons (IconGroup2), ICON_HASH is a fuzzy hash of the icon image The ICON_HASH field can be obtained from the debug output of libclamav. For example: LibClamAV debug: ICO SIGNATURE:\nICON_NAME:GROUP1:GROUP2:18e2e0304ce60a0cc3a09053a30000414100057e000afe0000e 80006e510078b0a08910d11ad04105e0811510f084e01040c080a1d0b0021000a39002a41","breadcrumbs":"Signatures » Content-based Signature Format » Logical Signatures » Icon Signatures for PE files","id":"121","title":"Icon Signatures for PE files"},"122":{"body":"The extended signature format is ClamAV's most basic type of body-based signature since the deprecation of the original .db database format. Extended sigantures allow for specification of additional information beyond just hexidecimal content such as a file \"target type\", virus offset, or engine functionality level (FLEVEL), making the detection more reliable. The format is: MalwareName:TargetType:Offset:HexSignature[:min_flevel:[max_flevel]] MalwareName: The virus name. Should conform to the standards defined here . TargetType: A number specifying the type of the target file: Target Types Offset: An asterisk or a decimal number n possibly combined with a special modifier: * = any n = absolute offset EOF-n = end of file minus n bytes Signatures for PE, ELF and Mach-O files additionally support: EP+n = entry point plus n bytes (EP+0 for EP) EP-n = entry point minus n bytes Sx+n = start of section x’s (counted from 0) data plus n bytes SEx = entire section x (offset must lie within section boundaries) SL+n = start of last section plus n bytes All the above offsets except * can be turned into floating offsets and represented as Offset,MaxShift where MaxShift is an unsigned integer. A floating offset will match every offset between Offset and Offset+MaxShift, eg. 10,5 will match all offsets from 10 to 15 and EP+n,y will match all offsets from EP+n to EP+n+y. Versions of ClamAV older than 0.91 will silently ignore the MaxShift extension and only use Offset. Optional MinFL and MaxFL parameters can restrict the signature to specific engine releases. All signatures in the extended format must be placed inside *.ndb files. HexSignature: The body-based content matching format . min_flevel: (optional) The minimum ClamAV engine that the file type signature works with. See the FLEVEL reference for details. To be used in the event that file type support has been recently added. max_flevel: (optional, requires min_flevel) The maximum ClamAV engine that the file type signature works with. To be used in the event that file type support has been recently removed.","breadcrumbs":"Signatures » Content-based Signature Format » Extended Signatures » Extended signature format","id":"122","title":"Extended signature format"},"123":{"body":"ClamAV can process YARA rules. ClamAV virus database file names ending with .yar or .yara are parsed as YARA rule files. The link to the YARA rule grammar documentation may be found at https://virustotal.github.io/yara/ . There are currently a few limitations on using YARA rules within ClamAV: YARA modules are not yet supported by ClamAV. This includes the “import” keyword and any YARA module-specific keywords. Global rules (global keyword) are not supported by ClamAV. External variables(contains and matches keywords) are not supported. YARA rules pre-compiled with the yarac command are not supported. As in the ClamAV logical and extended signature formats, YARA strings and segments of strings separated by wild cards must represent at least two octets of data. There is a maximum of 64 strings per YARA rule. YARA rules in ClamAV must contain at least one literal, hexadecimal, or regular expression string. In addition, there are a few more ClamAV processing modes that may affect the outcome of YARA rules. File decomposition and decompression - Since ClamAV uses file decomposition and decompression to find viruses within de-archived and uncompressed inner files, YARA rules executed by ClamAV will match against these files as well. Normalization - By default, ClamAV normalizes HTML, JavaScript, and ASCII text files. YARA rules in ClamAV will match against the normalized result. The effects of normalization of these file types may be captured using clamscan --leave-temps --tempdir=mytempdir. YARA rules may then be written using the normalized file(s) found in mytempdir. Alternatively, starting with ClamAV 0.100.0, clamscan --normalize=no will prevent normalization and only scan the raw file. To obtain similar behavior prior to 0.99.2, use clamscan --scan-html=no. The corresponding parameters for clamd.conf are Normalize and ScanHTML. YARA conditions driven by string matches - All YARA conditions are driven by string matches in ClamAV. This saves from executing every YARA rule on every file. Any YARA condition may be augmented with a string match clause which is always true, such as: rule CheckFileSize\n{ strings: $abc = \"abc\" condition: ($abc or not $abc) and filesize < 200KB\n} This will ensure that the YARA condition always performs the desired action (checking the file size in this example),","breadcrumbs":"Signatures » YARA Rules » Using YARA rules in ClamAV","id":"123","title":"Using YARA rules in ClamAV"},"124":{"body":"Table of Contents Phishing Signatures Database file format PDB format GDB format WDB format Hints Examples of PDB signatures Examples of WDB signatures Example for how the URL extractor works How matching works RealURL, DisplayedURL concatenation What happens when a match is found Extraction of RealURL, DisplayedURL from HTML tags Example Simple patterns Regular expressions Flags Introduction to regular expressions Special characters Character classes Escaping Alternation Optional matching, and repetition Groups How to create database files How to create and maintain the allow list (daily.wdb) How to create and maintain the domain list (daily.pdb) Dealing with false positives, and undetected phishing mails False positives Undetected phish mails","breadcrumbs":"Signatures » Phishing Signatures » Phishing Signatures","id":"124","title":"Phishing Signatures"},"125":{"body":"PDB format This file contains urls/hosts that are target of phishing attempts. It contains lines in the following format: R[Filter]:RealURL:DisplayedURL[:FuncLevelSpec]\nH[Filter]:DisplayedHostname[:FuncLevelSpec] R Regular expression, for the concatenated URL. The last 3 characters of the regular expression cannot regex special characters and much be an exact match. H Matches the DisplayedHostname as a simple pattern (literally, no regular expression). The pattern can match either the full hostname. Or a subdomain of the specified hostname. To avoid false matches in case of subdomain matches, the engine checks that there is a dot(.) or a space( ) before the matched portion. Filter Is ignored for R and H for compatibility reasons. RealURL Is the URL the user is sent to, example: href attribute of an html anchor ( tag). DisplayedURL Is the URL description displayed to the user, where its claimed they are sent, example: contents of an html anchor ( tag). DisplayedHostname Is the hostname portion of the DisplayedURL. FuncLevelSpec An (optional) functionality level, 2 formats are possible: minlevel all engines having functionality level >= minlevel will load this line. minlevel-maxlevel engines with functionality level >= minlevel, and < maxlevel will load this line. GDB format This file contains URL hashes in the following format: S:P:HostPrefix[:FuncLevelSpec]\nS:F:Sha256hash[:FuncLevelSpec]\nS1:P:HostPrefix[:FuncLevelSpec]\nS1:F:Sha256hash[:FuncLevelSpec]\nS2:P:HostPrefix[:FuncLevelSpec]\nS2:F:Sha256hash[:FuncLevelSpec]\nS:W:Sha256hash[:FuncLevelSpec] S: These are hashes for Google Safe Browsing - malware sites, and should not be used for other purposes. S2: These are hashes for Google Safe Browsing - phishing sites, and should not be used for other purposes. S1: Hashes for blocking phishing sites. Virus name: Phishing.URL.Blocked. S:W: Locally allowed hashes. HostPrefix 4-byte prefix of the sha256 hash of the last 2 or 3 components of the hostname. If prefix doesn’t match, no further lookups are performed. Sha256hash sha256 hash of the canonicalized URL, or a sha256 hash of its prefix/suffix according to the Google Safe Browsing “Performing Lookups” rules. There should be a corresponding :P:HostkeyPrefix entry for the hash to be taken into consideration. To see which hash/URL matched, look at the clamscan --debug output, and look for the following strings: Looking up hash, prefix matched, and Hash matched. To ignore .gdb entries, create a local.gdb file, and adding a line S:W:. WDB format This file contains url pairs for links that may look suspicious but are safe and should be allowed. It contains lines in the following format: X:RealURL:DisplayedURL[:FuncLevelSpec]\nM:RealHostname:DisplayedHostname[:FuncLevelSpec] X Regular expression, for the entire URL , not just the hostname. The regular expression is by default anchored to start-of-line and end-of-line, as if you have used ^RegularExpression$ A trailing / is automatically added both to the regex, and the input string to avoid false matches. The regular expression matches the concatenation of the RealURL, a colon(:), and the DisplayedURL as a single string. It doesn’t separately match RealURL and DisplayedURL! The last 3 characters of the regular expression cannot regex special characters and much be an exact match. M Matches hostname, or subdomain of it, see notes for H above. Hints Empty lines are ignored The colons are mandatory Don’t leave extra spaces on the end of a line! If any of the lines don’t conform to this format, ClamAV will abort with a Malformed Database Error See section Extraction-of-RealURL for more details on RealURL/DisplayedURL Examples of PDB signatures To check for phishing mails that target amazon.com, or subdomains of amazon.com: H:amazon.com To do the same, but for amazon.co.uk: H:amazon.co.uk You can limit the signatures to certain engine versions . For example... Restrict so that engine versions 20 through 30 can load it, but not 31+: H:amazon.co.uk:20-30 Restrict so that engine versions >= 20 can load it: H:amazon.co.uk:20- Restrict so that engine versions <= 20 can load it: H:amazon.co.uk:0-20 In a real situation, you’d probably use the second form. A situation like that would be if you are using a feature of the signatures not available in earlier versions, or if earlier versions have bugs with your signature. Its neither case here, the above examples are for illustrative purposes only. Examples of WDB signatures To allow Amazon’s country specific domains and amazon.com, to mix domain names in DisplayedURL, and RealURL: X:.+\\.amazon\\.(at|ca|co\\.uk|co\\.jp|de|fr)([/?].*)?:.+\\.amazon\\.com([/?].*)?:17- Explanation of this signature: X: this is a regular expression :17- load signature only for engines with functionality level >= 17 The regular expression is the following (X:, :17- stripped, and a / appended) .+\\.amazon\\.(at|ca|co\\.uk|co\\.jp|de|fr)([/?].*)?:.+\\.amazon\\.com([/?].*)?/ Explanation of this regular expression (note that it is a single regular expression, and not 2 regular expressions splitted at the :). .+ any subdomain of \\.amazon\\. domain we are allowing (RealURL part) (at|ca|co\\.uk|co\\.jp|de|fr) country-domains: at, ca, co.uk, co.jp, de, fr ([/?].*)? recomended way to end the real-url, this protects against embedded URLs (evilurl.example.com/amazon.co.uk/) : RealURL and DisplayedURL are concatenated via a :, so match a literal : here .+ any subdomain of \\.amazon\\.com allowed DisplayedURL ([/?].*)? recommended way to end displayed url part, to protect against embedded URLs / automatically added to further protect against embedded URLs When you add an entry, make sure you check that both domains are owned by the same entity. This signature allows links claiming to point to amazon.com (DisplayedURL), when in fact they really go to a country-specific domain of amazon (RealURL). Example for how the URL extractor works Consider the following HTML file: \n 1.displayedurl.example.com\n\n 2 di

splayedurl.example.com\n\n 3.nested.example.com 4.displayedurl.example.com \n\n

sometext 5.form.nested.link-displayedurl.example.com \n\n 6.displ ayedurl.example.com\n\n