This post-release fix is for the following products/versions:
o F-Secure Anti-Virus for Microsoft Exchange 6.31
o F-Secure Internet Gatekeeper 6.41
If you use earlier versions of the above mentioned products, please
download and install the latest version.
This post-release fix includes the following new fixes:
o SCR#36132, Some enhancements in ZIP file handling
This post-release fix includes the following fixes from Hotfix 1:
o SCR#36162, Malware in a specially crafted archive may bypass detection
o SCR#36164, CSS may report exceptions in transaction handler
o SCR#36135, Occasional unhandled exceptions on scanning a PPT file with Libra
o SCR#36022, Unsuccessful spam checking may cause a mail to be quarantined/spooled
o SCR#37511, Improvements in spam definition database update logic
Recommendation: It is recommended to apply this hotfix.
TECHNICAL DETAILS
SCR#36132 description:
This hotfix enhances the ZIP file handling as outlined in the SCR#36162 description with detection of manually edited ZIP files.
SCR#36162 description:
ZIP archives crafted in a special way may fool the scanner to terminate
scanning and possible leave undetected malware in the archive.
For further details, please refer to FSC-2004-3 Security Bulletin
http://www.f-secure.com/security/fsc-2004-3.shtml
SCR#36164 description:
Under high loading the Content Scanner Server daemon may report exceptions in
transaction handler. Although exceptions do not cause malfunction of the
product, they may result in some e-mail messages or attachments being
quarantined due to a failure occurred on scanning. This fix solves the problem.
SCR#36135 description:
The Libra scan engine may generate unhandled exception on scanning a certain
PPT file because of incorrect error handling. The problem is fixed in
the new version of the Libra engine included into this hotfix.
SCR#36022 description:
Under certain conditions the spam scanner may fail to process a message,
which would cause the message to be stopped in the spool or put in the
quarantine. This fix improves the error handling logic and a failure on
spam checking will not block messages anymore.
SCR#37511 description:
This hotfix improves the handling of F-Secure Spam Control spam definition database updates. Applying this hotfix is required for succesful database updates.
OTHER INFORMATION
This post-release fix includes the following files: