ClamAV 0.98.7 README.

README

@@ -8,19 +8,40 @@ here may not be available in binary packages.
 ClamAV 0.98.7 is here! This release contains new scanning features
 and bug fixes. 
 
-    - Improvement to PDF processing: encryption handling, escape
-      sequence handling, file property collection.
-    - fix infinite loop on crafted y0da cryptor file. Identified and patch
-      suggested by Sebastian Andrzej Siewior. CVE-2015-2221.
-    - fix crash on crafted petite packed file. Reported and patch
+    - Improvements to PDF processing: decryption, escape sequence
+      handling, and file property collection.
+    - Scanning/analysis of additional Microsoft Office XML based formats.
+    - Fix infinite loop condition on crafted y0da cryptor file. Identified
+      and patch suggested by Sebastian Andrzej Siewior. CVE-2015-2221.
+    - Fix crash on crafted petite packed file. Reported and patch
       supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
-    - fix false negatives on files within iso9660 containers. This issue
+    - Fix false negatives on files within iso9660 containers. This issue
       was reported by Minzhuan Gong.
-    - fix a couple crashes on crafted upack packed file. Identified and
+    - Fix a couple crashes on crafted upack packed file. Identified and
       patches supplied by Sebastian Andrzej Siewior.
-    - fix a crash during algorithimic detection on crafted PE file.
+    - Fix a crash during algorithmic detection on crafted PE file.
       Identified and patch supplied by Sebastian Andrzej Siewior.
+    - Fix an infinite loop condition on a crafted "xz" archive file.
+      This was reported by Dimitri Kirchner and Goulven Guiheux.
+      CVE-2015-2668.
+    - Fix compilation error after ./configure --disable-pthreads.
+      Reported and fix suggested by John E. Krokes.
+    - Apply upstream patch for possible heap overflow in Henry Spencer's 
+      regex library. CVE-2015-2305.
+    - Fix crash in upx decoder with crafted file. Discovered and patch
+      supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
+    - Fix segfault scanning certain HTML files. Reported with sample by
+      Kai Risku. 
+
+As always, we appreciate the contibutions of the ClamAV community members
+for their code and sample submissions!
 
+Sebastian Andrzej Siewior
+Minzhaun Gong
+Dimitri Kirchne
+Goulven Guiheux
+John E. Krokes
+Kai Risku
 
 0.98.6
 ------