diff --git a/README b/README index e6717436e..1ab8812c0 100644 --- a/README +++ b/README @@ -8,19 +8,40 @@ here may not be available in binary packages. ClamAV 0.98.7 is here! This release contains new scanning features and bug fixes. - - Improvement to PDF processing: encryption handling, escape - sequence handling, file property collection. - - fix infinite loop on crafted y0da cryptor file. Identified and patch - suggested by Sebastian Andrzej Siewior. CVE-2015-2221. - - fix crash on crafted petite packed file. Reported and patch + - Improvements to PDF processing: decryption, escape sequence + handling, and file property collection. + - Scanning/analysis of additional Microsoft Office XML based formats. + - Fix infinite loop condition on crafted y0da cryptor file. Identified + and patch suggested by Sebastian Andrzej Siewior. CVE-2015-2221. + - Fix crash on crafted petite packed file. Reported and patch supplied by Sebastian Andrzej Siewior. CVE-2015-2222. - - fix false negatives on files within iso9660 containers. This issue + - Fix false negatives on files within iso9660 containers. This issue was reported by Minzhuan Gong. - - fix a couple crashes on crafted upack packed file. Identified and + - Fix a couple crashes on crafted upack packed file. Identified and patches supplied by Sebastian Andrzej Siewior. - - fix a crash during algorithimic detection on crafted PE file. + - Fix a crash during algorithmic detection on crafted PE file. Identified and patch supplied by Sebastian Andrzej Siewior. + - Fix an infinite loop condition on a crafted "xz" archive file. + This was reported by Dimitri Kirchner and Goulven Guiheux. + CVE-2015-2668. + - Fix compilation error after ./configure --disable-pthreads. + Reported and fix suggested by John E. Krokes. + - Apply upstream patch for possible heap overflow in Henry Spencer's + regex library. CVE-2015-2305. + - Fix crash in upx decoder with crafted file. Discovered and patch + supplied by Sebastian Andrzej Siewior. CVE-2015-2170. + - Fix segfault scanning certain HTML files. Reported with sample by + Kai Risku. + +As always, we appreciate the contibutions of the ClamAV community members +for their code and sample submissions! +Sebastian Andrzej Siewior +Minzhaun Gong +Dimitri Kirchne +Goulven Guiheux +John E. Krokes +Kai Risku 0.98.6 ------