Re: [clamav-users] FP in structured SSN

2019-09-30 Thread Micah Snyder (micasnyd) via clamav-users
Sorry, still drinking my morning coffee. The "easy" fix I suggested is probably terrible. I imagine it's totally fine to have 0-prefixed numbers ( eg AA-GG-0123 ). We'll definitely have to get away from sscanf() for the fix. Micah On 9/30/19, 11:49 AM, "clamav-users on behalf of Micah Sn

Re: [clamav-users] FP in structured SSN

2019-09-30 Thread Micah Snyder (micasnyd) via clamav-users
Hi Wagde, It looks like you've found a bug. The SSN detection logic is hardcoded, here: https://github.com/Cisco-Talos/clamav-devel/blob/dev/0.102/libclamav/dlp.c#L295 As you can see, it looks for sequences in the form "%3d-%2d-%4d" or "%3d%2d%4d" using sscanf(), and then validates that each o

Re: [clamav-users] [Clamav-devel] ClamAV(R) blog: ClamAV 0.102.0 Release Candidate is now available

2019-09-30 Thread Franky Van Liedekerke via clamav-users
Op Maandag, 30-09-2019 om 15:27 schreef Franky Van Liedekerke via clamav-users: > Op Maandag, 30-09-2019 om 15:14 schreef J.R. via clamav-users: > > > While I applaud the re-use of existing components, requiring this > > > (minimum) version of libcurl will be a problem for redhat/centOS 7 > > > use

Re: [clamav-users] [Clamav-devel] ClamAV(R) blog: ClamAV 0.102.0 Release Candidate is now available

2019-09-30 Thread Franky Van Liedekerke via clamav-users
Op Maandag, 30-09-2019 om 15:14 schreef J.R. via clamav-users: > > While I applaud the re-use of existing components, requiring this > > (minimum) version of libcurl will be a problem for redhat/centOS 7 > > users: everybody is still on RHEL7 (RHEL8 is "just" released and still > > lacks support fr

Re: [clamav-users] [Clamav-devel] ClamAV(R) blog: ClamAV 0.102.0 Release Candidate is now available

2019-09-30 Thread J.R. via clamav-users
> While I applaud the re-use of existing components, requiring this > (minimum) version of libcurl will be a problem for redhat/centOS 7 > users: everybody is still on RHEL7 (RHEL8 is "just" released and still > lacks support from many vendors). > In RHEL/Centos, clamav is only packaged in EPEL, an

Re: [clamav-users] [Clamav-devel] ClamAV® blog: ClamAV 0.102.0 Release Candidate is now available

2019-09-30 Thread Franky Van Liedekerke via clamav-users
Hi Micah,  While I applaud the re-use of existing components, requiring this (minimum) version of libcurl will be a problem for redhat/centOS 7 users: everybody is still on RHEL7 (RHEL8 is "just" released and still lacks support from many vendors). In RHEL/Centos, clamav is only packaged in EPEL,